Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: aDbrKrC2b5bvWVpXJcfmzpDSvaJ3aVmoj4umyR8vvEw=
Subject key identifier: 29:4E:5E:F0:33:80:5E:1C:48:4E:89:15:8B:1A:FA:F6:68:B7:9A:BF
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 019873E36B64A5E3E3E949CFCA31E4AEB9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: FD
Signing time: Mon 04 Aug 2025 07:02:20 +0000
Manifest this update: Mon 04 Aug 2025 07:02:20 +0000
Manifest next update: Tue 05 Aug 2025 07:02:20 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: 2ESy5nGjxIEQ46sgwbwvXKaGG+MxS3wqWOUUhlY+w2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:6b:64:a5:e3:e3:e9:49:cf:ca:31:e4:ae:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Aug 4 07:02:20 2025 GMT
Not After : Aug 5 07:02:20 2025 GMT
Subject: CN=294e5ef033805e1c484e89158b1afaf668b79abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:1c:66:25:c9:a2:dc:c5:b1:71:f1:fc:e6:
da:d3:d4:e4:30:f7:80:de:c9:17:9a:92:31:13:91:
e9:8b:d8:75:08:f5:81:94:f4:8d:34:e5:bb:27:73:
bd:65:15:52:7e:ef:88:aa:c6:4e:45:d7:3a:86:0b:
04:09:b3:98:cc:56:52:8a:e7:f5:6f:9a:f4:83:c7:
c2:7f:49:89:93:a0:b0:0a:75:fd:99:cb:87:2f:2d:
cf:3f:ff:07:95:18:3c:60:4e:3d:78:ac:63:7f:9c:
71:7d:1d:1c:d7:3a:ed:cd:77:98:f5:b4:0c:f7:9d:
bc:69:54:52:85:ff:f8:67:52:f1:0c:c8:38:14:f0:
4b:60:e2:dc:86:cc:6a:26:20:aa:c8:0a:4a:1f:fe:
10:95:e4:a5:e7:a1:ef:57:ae:3c:a9:f8:8f:81:c9:
f7:1b:42:99:46:06:fc:3a:25:8a:2f:7a:d7:e8:fe:
7d:cb:bd:74:a4:6c:cb:da:13:b0:1d:9b:7f:06:1b:
eb:05:e3:ad:6a:44:4b:9d:64:bc:ed:71:c4:29:a2:
b1:a4:40:82:c6:f4:02:e6:4e:07:58:96:d7:92:c1:
ff:c8:42:1e:d4:90:d7:93:55:d7:99:d7:cc:30:17:
12:00:a7:44:e6:22:34:6c:3f:cb:7e:1f:f9:f7:18:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:5E:F0:33:80:5E:1C:48:4E:89:15:8B:1A:FA:F6:68:B7:9A:BF
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:dd:37:98:c1:6a:6f:07:19:c3:87:68:7f:ad:5e:e4:38:
2b:a4:67:06:34:a2:b2:04:e4:4f:2a:21:f5:ac:9b:a1:c9:79:
37:e9:a8:bd:40:e7:85:73:d0:ca:61:6f:51:8b:84:f3:1e:53:
da:a1:27:22:4b:99:33:e8:55:30:84:0d:af:ef:6b:9e:21:0f:
c2:9b:2a:e5:b2:ad:02:06:27:f3:07:40:ce:9b:36:4f:8b:ee:
8d:ef:9b:b3:40:64:6a:0e:7b:02:3f:2e:7a:18:7c:7f:e6:89:
4c:cb:18:9a:c8:d0:b2:1e:5d:d2:a0:4f:3d:d6:ca:47:aa:9b:
40:49:f5:10:d9:5c:19:07:b4:e5:f8:77:5d:6e:ba:65:89:bc:
8c:dd:50:71:11:d8:63:9d:2b:f5:bf:9b:48:c5:62:c4:d5:5c:
ad:44:db:ad:17:a2:89:af:9c:cf:63:fe:dc:f0:86:6f:9e:45:
2f:56:f4:f3:5b:99:50:18:08:70:94:7c:63:08:29:40:88:d7:
f7:e6:ea:8d:16:d9:70:be:fd:7e:4f:25:57:ab:d7:e4:f3:52:
2c:4c:6a:95:6f:f3:c1:e0:eb:0d:70:07:b3:77:fd:b4:e2:78:
8a:8e:a3:09:31:8d:5f:20:13:98:52:3c:e9:2c:ec:ff:57:ca:
b4:26:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:24 2025 by rpki-client