Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: cYZnoI4YTUA4wqietj3Kyve9dJ0b5cQg+IEcFvEj0WY=
Subject key identifier: 7B:8A:5E:D3:C3:04:14:D7:9B:D4:3F:69:FE:13:D4:52:81:31:03:FB
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 0198733D633F7C11BF4256C0501D4276007B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 13DA
Signing time: Mon 04 Aug 2025 04:00:59 +0000
Manifest this update: Mon 04 Aug 2025 04:00:59 +0000
Manifest next update: Tue 05 Aug 2025 04:00:59 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: s01sPzoQFEVZhJMqAk70AKl9zqhIt78h9xDG7wDQqm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:63:3f:7c:11:bf:42:56:c0:50:1d:42:76:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Aug 4 04:00:59 2025 GMT
Not After : Aug 5 04:00:59 2025 GMT
Subject: CN=7b8a5ed3c30414d79bd43f69fe13d452813103fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:66:fd:7d:83:76:70:c1:b2:f8:d8:11:44:
d2:fb:6d:75:f3:08:49:ff:2c:0f:b0:f0:4b:a2:b4:
01:d9:ef:d5:4c:ef:dc:2b:78:4f:bf:56:27:5c:01:
7d:91:f9:27:7e:f2:be:cf:c0:95:25:cb:97:54:2c:
f2:f8:41:55:e3:e7:95:2e:ba:97:c5:4d:b6:b3:a3:
84:47:32:54:74:93:2c:9d:ba:3c:59:77:fd:d5:51:
2a:1f:85:dc:91:ba:79:82:e5:96:25:97:4b:14:4b:
9a:21:2d:90:08:80:03:0a:73:62:37:e4:05:f7:4e:
5b:1d:80:5e:df:d5:d2:c1:aa:3c:ca:be:2f:25:eb:
5d:be:20:0a:c9:e0:29:d9:a6:c6:4a:1f:bf:d3:53:
2a:93:7e:01:df:6a:c0:82:7b:e3:42:3f:5f:46:aa:
31:31:a9:3e:cb:52:5d:28:23:e2:65:e8:d5:ab:e0:
42:d9:fa:e0:28:2c:bf:e0:25:87:a1:79:3b:67:d9:
e8:1f:53:55:9c:3c:47:24:98:6b:cc:5f:b2:74:0c:
21:82:3b:95:ef:fb:c5:56:d7:ce:1b:ed:4c:fc:71:
12:96:39:5a:15:89:a2:aa:6f:e1:ec:c6:a5:d6:d4:
1f:73:05:5f:59:7e:67:09:21:9c:e4:9f:32:91:47:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:5E:D3:C3:04:14:D7:9B:D4:3F:69:FE:13:D4:52:81:31:03:FB
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:dc:26:c3:fb:11:6e:12:ff:52:0c:e3:38:74:d8:08:3b:
ac:79:6b:d6:90:bf:64:b2:4b:79:78:1c:67:45:41:f7:1d:0f:
95:2e:b4:e9:70:58:d2:4c:d0:e0:a7:fd:91:bd:b5:3a:f7:99:
e3:6f:3f:06:5f:ed:32:5e:ef:f5:a0:2f:3f:f1:c1:83:37:d1:
86:c8:e1:46:7b:f7:2c:19:24:09:db:31:4b:1c:2d:a8:4e:2b:
fd:01:6e:41:a2:eb:8e:35:6a:91:24:79:e9:10:47:b4:93:c3:
b7:53:20:46:93:ce:d3:36:ed:4c:f6:79:f7:f3:1c:19:9f:5c:
d2:89:4f:1b:27:2e:75:1a:69:6d:bd:4e:57:3e:5e:21:50:6a:
59:98:0f:38:1a:d8:8d:bd:75:07:22:a6:9e:87:ae:65:e6:d5:
1a:03:40:f7:1b:3c:a1:7b:c7:d4:47:48:57:d9:9e:9b:ac:87:
fd:a7:e0:de:39:cd:8d:d2:d5:51:09:25:66:d4:60:f0:16:df:
49:4b:a2:98:de:13:90:68:4e:08:cd:08:3d:90:af:7e:ea:55:
02:e5:67:2e:20:ed:74:eb:7c:12:bb:11:1e:88:a4:57:dd:6d:
cb:ca:d6:37:01:f8:c2:ab:a9:8d:89:6f:25:96:a3:9c:0e:e3:
95:f1:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:23 2025 by rpki-client