Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File: NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier: 0u1PVc0+LzCXhc0SykZ7o/v7wUGKkH5NeM29RAWUiDY=
Subject key identifier: AC:83:EB:DF:BE:EA:68:4D:A6:A3:3D:89:CE:68:0D:8F:26:42:51:22
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer: /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial: 01988B0E6940A017CA02CDEB7863EF7B7440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number: 0D1A
Signing time: Fri 08 Aug 2025 19:00:34 +0000
Manifest this update: Fri 08 Aug 2025 19:00:34 +0000
Manifest next update: Sat 09 Aug 2025 19:00:34 +0000
Files and hashes: 1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: WkFiAM1Dj0ln3Df8vowa145mOxAWjaAXTw1BxYXrEtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:69:40:a0:17:ca:02:cd:eb:78:63:ef:7b:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Validity
Not Before: Aug 8 19:00:34 2025 GMT
Not After : Aug 9 19:00:34 2025 GMT
Subject: CN=ac83ebdfbeea684da6a33d89ce680d8f26425122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:1b:27:a9:67:38:71:33:d7:f1:5b:b7:55:
6e:2e:cf:14:3b:90:a3:3a:4b:6f:64:da:3f:d9:f8:
9d:2d:cf:16:b2:a4:e1:53:e2:95:28:2b:c3:df:5b:
7f:6e:27:09:b0:8d:0d:44:c3:e2:98:13:65:8f:19:
a2:95:ac:21:f0:f5:79:ee:1f:ef:03:63:46:7f:e3:
a5:8e:9f:a1:3d:c3:00:4e:4e:80:0c:57:6b:12:5a:
03:4a:89:cf:8e:a6:52:98:87:a7:03:aa:45:74:fd:
2a:90:7b:93:ae:f8:44:2f:bb:8b:87:ad:eb:59:f3:
a7:9a:a8:7b:1c:ed:c3:b6:ff:ec:57:ca:ab:6f:48:
cc:2b:3f:ae:e6:c0:f8:b4:db:7f:99:e7:c6:6c:d0:
cd:72:8e:94:75:c5:93:a9:01:6a:9a:21:9f:a2:7d:
e4:81:b6:ae:94:9f:53:62:0c:f4:b6:32:74:c3:f7:
98:6e:e7:21:09:89:b7:ef:73:ac:bf:20:3e:12:df:
cd:0b:b6:01:4d:75:79:22:03:9d:aa:66:be:54:d6:
2e:0f:24:50:b3:b6:bd:d3:4c:1b:44:22:a0:8e:46:
02:3b:bf:9a:a4:f0:23:dc:f3:4b:07:ce:f5:29:31:
d7:db:eb:45:ed:0f:e6:38:45:a3:4f:d7:22:81:1a:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:83:EB:DF:BE:EA:68:4D:A6:A3:3D:89:CE:68:0D:8F:26:42:51:22
X509v3 Authority Key Identifier:
keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:b3:d9:7c:9d:18:1a:eb:ba:61:31:39:a4:b6:35:a1:a3:
4a:cf:b1:19:47:41:6f:f5:d5:bc:e9:4b:da:15:e1:2c:f2:fa:
3a:a3:08:ce:42:ec:d9:6e:c7:bb:1b:e0:9b:65:2e:07:cb:b6:
67:c9:b8:df:97:78:73:19:78:eb:87:95:cb:9c:dd:93:fe:67:
00:91:dd:1d:c3:5e:ed:f5:71:de:32:27:f4:af:b3:97:46:e7:
ec:81:67:68:9a:75:dd:5e:b1:e6:a7:4d:8f:9c:a7:1d:5b:02:
fa:34:a0:f0:7f:2e:56:0b:81:2f:57:60:e0:d3:b6:f8:6d:51:
eb:2e:ea:d3:f9:be:3e:af:ad:51:23:12:5a:a1:4d:08:fa:a4:
07:17:39:d7:99:43:0a:0a:a1:5f:c8:a1:f5:cc:16:3a:f2:3c:
9e:14:a6:c9:18:0a:d9:5f:8b:8a:73:a4:83:47:3e:b5:6f:04:
35:f3:2b:a5:de:a8:fd:f6:7f:c2:50:48:2c:17:32:67:d4:c0:
b8:3e:85:1d:34:78:9d:83:17:cf:1d:9f:a3:86:2c:9a:53:df:
cf:54:75:2f:a1:3d:f7:d2:9a:3a:a1:2a:80:a3:87:00:57:8d:
fc:9c:24:7d:ba:6d:18:02:6d:aa:c6:b6:f2:f9:bd:a3:e3:2d:
a5:60:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:18:33 2025 by rpki-client