Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File: Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier: ekO5QjMx+OuQCDPs4GI7a0g4kO47cXKLb/H8mUJdTh0=
Subject key identifier: DB:FB:4B:A8:8B:0A:F2:93:7D:EB:44:CD:E5:7C:D4:22:0D:06:7C:D0
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer: /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial: 01987D8BB914D7C33DC07CAF7FF990289666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number: 0CAF
Signing time: Wed 06 Aug 2025 04:02:45 +0000
Manifest this update: Wed 06 Aug 2025 04:02:45 +0000
Manifest next update: Thu 07 Aug 2025 04:02:45 +0000
Files and hashes: 1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: hpW37G/6pSEhmWB1uulHStMDbyN2tMpunQ7adbFzTuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:b9:14:d7:c3:3d:c0:7c:af:7f:f9:90:28:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Validity
Not Before: Aug 6 04:02:45 2025 GMT
Not After : Aug 7 04:02:45 2025 GMT
Subject: CN=dbfb4ba88b0af2937deb44cde57cd4220d067cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:dc:91:42:6b:df:7c:ce:23:6a:17:f2:1e:
68:e8:d8:ec:17:34:1b:32:ac:a4:4f:e7:6f:34:78:
97:1e:03:fa:6f:4b:af:78:5f:38:3c:7d:8c:44:7f:
42:c2:e2:66:d3:ff:c2:87:7b:36:ba:2c:ec:4d:9f:
13:4e:55:5a:08:6c:3e:ad:ea:4c:79:10:32:ba:44:
20:16:4a:73:22:6c:7b:bd:c8:6d:01:91:29:7e:06:
c9:4c:b0:19:6f:ca:ed:d8:71:36:e9:1f:af:85:8d:
f2:e8:6a:4f:e7:84:5b:7d:d7:06:6c:ea:80:da:13:
f1:7d:9b:cf:ee:37:ea:a1:fc:f6:a7:bb:4a:d0:95:
b8:0b:1e:45:17:28:97:39:a1:b3:68:d1:43:c4:7b:
61:96:a5:98:f8:8f:0e:95:70:07:92:07:a9:08:53:
ca:c5:f3:15:d3:45:56:85:24:2f:55:b0:16:29:dc:
8b:02:5e:c9:7c:ae:2b:d8:2e:cd:2b:0a:29:d3:3d:
00:2b:a2:61:af:f7:8c:4a:b3:16:04:26:aa:3d:e1:
59:c2:2b:fd:bb:55:7b:ea:fe:0a:7f:a5:64:81:30:
ad:d0:7a:98:23:af:e8:67:0c:5b:28:fb:2c:e8:ae:
85:31:d3:24:97:bc:38:db:94:a5:b9:b3:62:88:6b:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FB:4B:A8:8B:0A:F2:93:7D:EB:44:CD:E5:7C:D4:22:0D:06:7C:D0
X509v3 Authority Key Identifier:
keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:63:d4:07:b6:f8:8a:e8:be:9b:58:72:90:1a:2f:d7:f4:
9c:66:49:df:45:77:56:b9:09:c2:26:99:00:67:64:c7:5a:3b:
2e:08:bc:62:b5:fb:1b:90:e6:ba:00:6d:aa:3a:ec:07:67:e9:
8c:ae:2c:13:74:d1:fc:d2:59:ac:51:ef:3a:b6:d8:0d:94:06:
17:4b:3d:7b:9f:c1:6e:ec:a9:c0:b4:6c:1f:36:22:16:94:d6:
4b:a0:b6:27:46:ba:10:78:fe:4b:b1:1c:5d:53:36:3b:2f:1f:
8d:10:01:ae:1b:ab:b5:4e:48:53:4d:e4:f0:37:98:c7:91:83:
5a:de:e3:f9:63:34:78:35:42:e3:ce:d0:a4:38:87:d2:c2:76:
aa:81:e2:a2:e9:a8:83:81:3b:af:23:da:28:be:ee:3e:af:05:
43:bb:65:45:a1:1a:f8:c0:ef:6d:b1:84:2a:3e:65:5a:71:cc:
0a:fc:49:e1:30:a6:92:bc:e6:59:7e:69:78:87:88:c8:8c:9b:
cf:3b:3b:92:1c:78:c8:58:f4:c9:47:46:40:46:94:1d:ea:b1:
4d:33:b9:f5:ab:84:b2:5e:6d:53:1d:e4:3d:af:9f:1c:e3:71:
52:24:ad:aa:1c:66:ca:2d:ee:0c:5c:1a:6a:d9:7c:11:bb:cf:
b6:c0:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:02 2025 by rpki-client