Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: 2NmoIS4gt1YvsuegcJwqbn4Q+6gKPyKPCTaeTOTAko8=
Subject key identifier: 0F:6D:37:A3:33:CF:04:85:B5:B1:70:3A:0D:B9:CE:F5:F9:05:68:DA
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 019890DB6DF55BFF261EFF49E36075BBDBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 1000
Signing time: Sat 09 Aug 2025 22:02:36 +0000
Manifest this update: Sat 09 Aug 2025 22:02:36 +0000
Manifest next update: Sun 10 Aug 2025 22:02:36 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: dFedsgGFYD9ABPgWBQPkADRwsp6wroM1BqahkuWkfvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:6d:f5:5b:ff:26:1e:ff:49:e3:60:75:bb:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Aug 9 22:02:36 2025 GMT
Not After : Aug 10 22:02:36 2025 GMT
Subject: CN=0f6d37a333cf0485b5b1703a0db9cef5f90568da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:6b:5d:00:ba:90:d5:c8:dd:9e:57:e2:7e:
5f:27:e1:bb:21:ab:e0:a0:67:a8:26:d8:ce:39:64:
ca:2e:70:8f:cd:d5:69:a3:e8:39:fe:c5:43:ec:0b:
4f:ea:05:32:95:c1:29:14:ee:ed:b9:00:65:e2:0f:
cf:12:1c:df:58:16:79:35:22:af:bb:b3:a3:ca:4d:
a0:06:51:13:c6:7a:cf:90:55:7e:c5:db:03:78:f5:
07:71:0b:25:d3:b8:f3:17:6f:7f:47:6e:6f:f4:ae:
f5:6d:41:86:5a:52:19:e1:81:71:9a:08:ba:ec:c0:
d8:90:36:94:b0:2c:38:aa:b5:97:32:9a:30:5f:ad:
b9:e0:14:06:c2:18:33:4f:08:6c:f4:73:32:04:d1:
b4:66:03:4f:67:d0:cc:68:a2:84:b6:31:6e:3d:be:
01:54:6f:c4:43:40:41:00:11:28:80:4a:0e:75:6f:
60:ef:96:f2:e4:a6:34:86:1c:9e:78:1e:c1:fb:7e:
ae:80:a6:cf:4d:1c:93:51:7e:20:4d:31:48:15:01:
7f:25:1c:f9:47:c5:3a:51:f0:bf:f8:68:92:64:25:
0d:41:69:c5:32:6f:05:0a:3e:68:7e:b4:8a:4c:8d:
55:40:d3:43:53:39:a7:4c:da:d9:36:f6:85:02:3b:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:37:A3:33:CF:04:85:B5:B1:70:3A:0D:B9:CE:F5:F9:05:68:DA
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c7:7b:45:74:61:74:f7:53:7d:c1:1e:0e:56:2d:67:4d:19:
cd:d0:cb:3e:70:50:4d:f2:b0:d2:8d:90:7a:6b:8f:95:2c:8c:
b5:1b:15:c0:0e:49:90:a5:bc:cf:e0:f7:58:38:24:c2:db:2c:
38:e9:97:60:11:26:18:28:6f:da:74:26:94:e9:52:d7:4d:0e:
a0:59:c4:88:bc:f7:c4:ac:6d:cb:7f:a4:c7:4c:07:de:02:5f:
da:a6:21:c8:c9:96:67:f9:5f:e9:69:cc:33:97:78:9b:26:ab:
cd:67:a9:1e:90:3d:c7:6a:f8:a4:46:e5:cf:c4:9c:ec:92:a7:
cb:5e:7c:04:2e:80:bb:38:a9:45:7f:92:af:cd:8e:b8:bd:58:
4f:b5:71:b1:52:df:2c:d9:14:a3:95:0e:2a:fd:94:2b:23:0d:
13:2b:6a:cd:52:a4:53:17:c6:81:1d:b4:1a:5b:dc:56:b1:64:
c8:b8:01:ba:89:84:be:3f:5f:ce:c5:39:c9:58:6f:96:17:5a:
ca:12:6f:3d:5c:44:f5:d0:bf:42:2c:98:62:59:14:ed:ff:6b:
ab:f6:a2:65:1d:c0:79:98:80:37:68:37:14:30:28:73:28:dd:
f1:a5:fa:05:99:8b:e8:31:ad:90:ae:29:56:b0:c1:7f:c4:4c:
7c:3d:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:44:33 2025 by rpki-client