Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: Gra7cyC/ML9ksm3UcABlvzdsCGDNl1yqTCnTA0jm8dQ=
Subject key identifier: 99:FE:FF:11:CA:8A:85:7F:BB:DB:90:0B:4A:9E:BD:D3:81:5E:83:92
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 019872CF94DD592D971A818672C1BAC363BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 0F2A
Signing time: Mon 04 Aug 2025 02:01:03 +0000
Manifest this update: Mon 04 Aug 2025 02:01:03 +0000
Manifest next update: Tue 05 Aug 2025 02:01:03 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: +if247v3DSQpkkznFIz+eC7u/nB98WB1IVpeCLVDyEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:94:dd:59:2d:97:1a:81:86:72:c1:ba:c3:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Aug 4 02:01:03 2025 GMT
Not After : Aug 5 02:01:03 2025 GMT
Subject: CN=99feff11ca8a857fbbdb900b4a9ebdd3815e8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:11:e5:94:82:0b:c9:db:c9:51:c1:e4:bc:
33:fd:de:9a:0e:12:d3:d1:7e:43:a8:28:4a:bb:96:
21:b3:0e:76:70:d8:37:6c:ba:54:0c:1f:1d:75:6d:
f6:30:68:81:e2:c4:96:f1:b8:5c:53:3b:3c:63:9c:
a7:41:b7:b3:3a:b6:84:12:ae:ec:72:cf:bc:f2:9c:
53:a0:44:90:f3:77:96:99:0f:4b:c0:73:3a:ae:aa:
f1:37:1d:c1:50:5d:7e:6a:40:6e:fd:7a:89:f6:54:
fb:ce:82:a5:f1:86:e0:bc:a9:8c:9d:c2:86:72:c1:
bb:0d:55:f2:15:c0:57:cb:21:73:82:b8:d1:0c:64:
83:55:72:d6:95:2b:0c:c7:06:16:ee:5f:3f:e5:8e:
70:0f:c4:d5:83:d3:c7:74:55:54:15:47:63:5b:b6:
ae:9f:44:fd:fb:e0:81:de:c5:ae:e4:53:ab:43:37:
1e:4b:a0:28:d7:39:36:75:7d:81:c9:8f:2f:d8:3e:
ba:08:8a:08:ce:66:14:64:8c:75:cf:81:32:b6:08:
50:cd:b5:9b:11:1a:79:fc:ff:0f:17:95:e3:aa:d3:
89:c4:cd:f5:46:4e:43:11:bd:e0:ac:c0:f5:ec:ff:
ba:72:92:ca:fd:28:3c:20:f3:73:a6:ec:2f:54:29:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:FF:11:CA:8A:85:7F:BB:DB:90:0B:4A:9E:BD:D3:81:5E:83:92
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f0:57:29:a5:f5:df:d1:ba:03:85:1d:56:b6:62:45:7f:26:
05:f2:6d:56:bc:74:9f:33:a9:27:f4:fa:22:39:81:61:35:10:
ae:c3:dd:ee:8b:37:11:93:2e:fe:30:ae:f9:48:42:2a:e2:d7:
0a:d2:9f:9a:32:1e:61:03:58:b3:f2:d2:24:60:07:21:ec:05:
88:44:0c:f9:bc:9e:fe:c5:07:4f:c6:a4:d5:06:c8:2b:06:9f:
08:c1:d1:a9:21:1a:cd:5b:76:0a:fc:84:0d:21:c9:84:2a:bc:
56:6f:6a:0d:f8:f0:70:a8:c8:ec:f0:42:68:e0:42:29:ac:3f:
0b:6e:91:1d:e5:75:f9:e5:b9:15:d2:b6:3a:75:d9:0d:c8:27:
ab:cd:df:94:89:78:ee:2d:a9:8a:4a:59:e6:ee:93:84:cc:b6:
ab:a6:36:0a:a1:43:c0:39:c4:b9:bc:f1:6f:23:94:bc:77:2a:
cd:49:ae:a4:0f:f1:71:45:b9:ce:0a:5b:5a:28:89:3a:04:ec:
05:7c:ae:47:96:64:c2:2a:81:51:56:8a:ba:32:38:08:d9:30:
51:25:5b:ba:f8:f6:87:2d:24:c5:6d:00:0a:5f:68:1e:a8:8e:
b9:9a:9b:b9:71:59:f5:2d:f8:50:96:18:6f:16:31:c1:59:ca:
27:2f:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:49 2025 by rpki-client