Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: Ui9osIWEKpJGSrEbRFyLT4r5U1QzD4kK3mJHA6Tk7hQ=
Subject key identifier: D6:CD:75:8D:AE:9A:EA:90:0C:EC:9B:0F:62:C2:4F:BB:BD:F7:06:5A
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 019896A4A91CCB235CE9FD0E24C73655D4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 15B9
Signing time: Mon 11 Aug 2025 01:00:30 +0000
Manifest this update: Mon 11 Aug 2025 01:00:30 +0000
Manifest next update: Tue 12 Aug 2025 01:00:30 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: apoRPZl6i1iz3TFFV4NvzHkehJ10asDDpdnX7BJZPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:a9:1c:cb:23:5c:e9:fd:0e:24:c7:36:55:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Aug 11 01:00:30 2025 GMT
Not After : Aug 12 01:00:30 2025 GMT
Subject: CN=d6cd758dae9aea900cec9b0f62c24fbbbdf7065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:65:e1:cd:24:fe:9e:a2:87:2e:e6:80:2c:
58:a3:30:71:14:e0:16:62:bf:ed:d6:0d:dc:50:95:
41:29:75:17:19:69:8f:62:8c:10:b6:9a:92:67:e5:
d7:e1:17:cd:59:c3:62:4a:4b:3c:a4:36:67:2b:e9:
3d:1b:ad:d0:3d:e5:82:c3:e2:5c:a7:83:6d:db:f5:
78:cc:b3:31:16:2d:71:b9:f0:34:70:c8:7f:17:5a:
68:c4:d0:5d:00:cc:0b:6a:7b:12:36:75:71:f0:2e:
9d:d6:33:59:a0:02:05:29:91:cb:27:cc:42:bc:41:
88:ef:37:4f:04:c7:ab:c4:66:e0:3a:7f:06:53:50:
4f:86:94:03:68:1d:6d:54:18:a2:8d:73:fa:34:3b:
11:8f:93:cc:17:d5:e4:7d:1a:15:0b:b7:16:3c:6b:
a8:2e:ab:fb:fa:e4:81:ad:e6:54:22:50:df:e2:6c:
a1:b0:f3:41:46:58:15:be:d6:75:3d:66:c3:ea:61:
78:fa:35:a1:ab:58:20:5e:5d:5f:ca:87:25:9a:03:
20:e1:37:5a:17:39:a5:65:8a:6e:25:14:d8:df:80:
a5:2b:eb:91:17:7c:f7:ee:23:50:cb:b0:16:40:30:
79:61:83:ee:85:e2:4f:4c:97:b1:c6:7f:44:25:cc:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:75:8D:AE:9A:EA:90:0C:EC:9B:0F:62:C2:4F:BB:BD:F7:06:5A
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7d:1c:67:d8:ea:c5:c7:c7:69:19:28:26:1e:08:ec:9c:ba:
21:9c:68:98:60:a7:f8:b2:36:8b:29:6b:ed:5c:85:1d:9f:1b:
48:86:19:d9:25:9e:fc:d7:0d:67:5a:52:5b:b3:77:d6:73:6e:
2e:53:a6:f2:3e:32:f4:00:8a:8d:a4:12:63:d2:6d:f1:40:b0:
14:91:72:c4:72:8f:e7:1f:c4:68:a6:9d:ba:4a:4b:32:86:d3:
4f:3e:11:dc:5c:17:fe:c7:61:0d:85:f5:02:7f:b2:b6:b0:b5:
ed:37:03:41:70:1c:51:50:44:d4:90:d4:03:38:68:74:7f:43:
06:ba:85:00:7c:78:c7:36:a1:aa:dc:c9:8d:ad:14:b2:2d:c3:
cb:3c:b4:61:3e:89:8a:51:75:43:2f:98:77:49:2f:cd:df:13:
a6:84:28:d8:7a:bc:07:30:46:5b:6f:ce:a0:64:2e:e6:81:44:
aa:8b:a9:0f:98:01:3a:b9:87:c8:af:fd:1a:9d:17:06:b9:a0:
bb:b4:d4:03:de:26:8b:c4:2c:87:56:34:1f:e1:af:17:f6:71:
2d:7a:59:71:ac:61:d7:a6:ae:82:90:f5:98:4f:7a:7e:c5:5a:
67:cc:6b:8c:0f:97:77:10:05:5c:78:f4:c8:c8:8a:15:6d:80:
95:68:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:09 2025 by rpki-client