Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File: nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier: uVDIPKQadQ07G1W0RbFyBRWfQqqdAtT2FF9xEQ8logg=
Subject key identifier: 8B:4F:15:B6:BD:FE:2B:44:00:F1:30:7F:D0:74:E6:3D:13:52:0C:65
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer: /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial: 019893A3E5A6116A032179E84202CCA28B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number: 0D7F
Signing time: Sun 10 Aug 2025 11:00:48 +0000
Manifest this update: Sun 10 Aug 2025 11:00:48 +0000
Manifest next update: Mon 11 Aug 2025 11:00:48 +0000
Files and hashes: 1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: t90jSMo1Y63Jb2ipAU9Fm86fdubd3+jCGoxbnQQmTcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e5:a6:11:6a:03:21:79:e8:42:02:cc:a2:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Validity
Not Before: Aug 10 11:00:48 2025 GMT
Not After : Aug 11 11:00:48 2025 GMT
Subject: CN=8b4f15b6bdfe2b4400f1307fd074e63d13520c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:56:9f:c3:c0:38:5e:9b:86:f6:d0:39:94:
8a:d2:e5:20:1c:6f:d0:e1:71:c0:21:04:d8:65:ed:
bf:52:a7:db:e7:b0:b8:55:5c:19:5c:0a:91:ba:ad:
6b:f1:91:a5:2d:14:4a:9b:29:a7:de:32:e0:82:26:
11:91:8f:98:02:76:8c:09:8a:c9:6e:ef:f5:b4:93:
55:8c:93:90:56:35:94:10:53:85:15:fd:9b:1c:08:
53:e1:99:ca:26:1b:0f:15:7d:d8:6d:90:8e:77:25:
1a:c8:fa:86:bd:ec:ba:35:f7:81:89:79:a0:75:e8:
f5:25:17:4c:41:dc:f1:bb:f0:d6:ac:91:1a:21:ad:
82:33:ee:98:19:2c:31:81:4c:bf:89:f0:b5:72:8e:
0c:71:46:cd:54:8d:4a:55:07:4e:70:7d:55:82:28:
64:26:88:6a:ed:1a:29:82:04:58:f6:9f:74:60:48:
0a:14:fd:ac:a2:04:65:39:00:7b:1d:a2:53:57:27:
73:41:5e:7a:7d:47:6e:c5:65:37:78:64:c4:fa:73:
37:d9:59:44:c6:82:90:09:08:1e:f9:2f:99:9b:74:
de:04:3a:37:9e:77:6c:f6:ef:dc:f1:d8:f1:70:5a:
6d:49:f2:e4:4e:8c:35:5e:e0:83:05:dc:01:dc:fd:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4F:15:B6:BD:FE:2B:44:00:F1:30:7F:D0:74:E6:3D:13:52:0C:65
X509v3 Authority Key Identifier:
keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:d5:b6:b8:1d:1d:d1:1a:71:27:b0:1f:d4:d4:d0:6b:39:
c8:72:84:85:63:a3:d7:9b:de:2d:18:a8:65:9b:27:6b:d2:cb:
56:32:c3:f4:bf:f0:b9:47:7f:bb:31:ef:36:7e:4d:48:51:cc:
fc:26:db:54:29:f6:45:ef:7f:39:cc:37:49:6f:05:d1:80:a4:
e8:38:e7:4b:29:53:e6:c7:0a:69:c1:dd:0a:c0:ec:ce:f9:92:
ae:2a:12:f3:0c:4b:f3:3a:b3:cb:83:ce:26:f1:ba:97:f2:30:
71:a4:a4:c7:2b:5c:c5:cd:01:28:07:1a:44:91:6a:bb:60:a4:
ee:0c:b3:b0:9f:ff:6f:66:8d:3b:b7:30:52:99:96:ae:b0:8c:
d9:b7:26:36:fb:5a:99:b3:90:87:65:20:e3:6d:3c:e0:d0:83:
3f:c9:a7:e5:28:f5:a0:31:ad:2c:25:80:4b:44:aa:82:80:31:
e0:be:16:f4:7e:18:d6:fd:6b:3e:f0:66:53:9a:29:ad:75:90:
b2:97:3b:09:d7:86:59:89:54:77:60:b0:92:e8:27:a3:79:a3:
1d:4c:e9:c7:2b:50:45:a1:3e:e7:2a:5e:97:2b:c4:68:3d:65:
b0:78:5a:49:40:ad:c0:b9:92:3c:e1:ca:68:f4:37:72:6f:1e:
64:4c:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:47 2025 by rpki-client