Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: TXRfu0+M5sdN/Qi2iiOFxfSKwBhGH4+B6NHx3hrIu5A=
Subject key identifier: 7B:E2:06:75:6E:07:95:E4:B0:B0:F7:FC:D5:54:60:9F:8A:A9:52:ED
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 01976BBCF68B15A732CE81F62FBB5DA5D85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 0340
Signing time: Sat 14 Jun 2025 00:00:35 +0000
Manifest this update: Sat 14 Jun 2025 00:00:35 +0000
Manifest next update: Sun 15 Jun 2025 00:00:35 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: Vw2xO74aB8b+KgYPjyVxIKZpAMGk0j3EKgr7tf+8CmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:f6:8b:15:a7:32:ce:81:f6:2f:bb:5d:a5:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Jun 14 00:00:35 2025 GMT
Not After : Jun 15 00:00:35 2025 GMT
Subject: CN=7be206756e0795e4b0b0f7fcd554609f8aa952ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:fa:6d:9c:cc:e8:fe:bd:99:ca:d2:e8:37:
02:47:c3:32:cb:3a:04:0b:13:11:6d:ad:69:3e:d6:
18:1d:a6:61:ae:5d:be:57:ac:0c:15:9b:17:9d:7d:
05:71:9a:bd:53:f5:e0:02:49:8e:2c:c3:40:24:a5:
c3:ae:65:59:90:18:8c:82:06:8e:7f:6f:be:7e:56:
0a:3c:7b:2e:0b:48:dd:21:e4:97:aa:e8:25:2e:b1:
20:f9:55:70:d9:c7:1d:59:44:12:65:2d:1d:96:1a:
12:f7:7b:2a:93:ee:b1:cf:d3:5a:b1:73:eb:5e:69:
aa:92:20:71:21:ea:19:f5:fa:81:df:35:dc:35:d5:
69:7a:f9:20:2e:fa:ac:a3:7b:f9:55:66:d4:f3:d1:
9e:9e:0d:4e:67:32:98:a5:18:04:1b:54:ca:eb:80:
9c:4b:09:9b:af:9d:6c:e4:45:76:29:3c:33:2f:49:
f7:e1:05:c1:7b:ba:a3:4e:ea:e5:ee:e7:8b:21:76:
8f:5f:35:e6:ec:74:7b:47:d4:fa:68:bf:6b:51:b1:
30:a9:29:91:81:5f:f1:50:b4:10:d4:c0:42:25:6d:
f6:5e:b2:a0:a8:f3:a9:49:05:51:f9:25:67:e6:14:
95:a2:fc:ce:71:cb:de:00:86:f0:a9:36:f7:27:a8:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:06:75:6E:07:95:E4:B0:B0:F7:FC:D5:54:60:9F:8A:A9:52:ED
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:5d:a8:e8:f2:2b:01:71:1d:22:a5:53:e3:99:51:9a:01:
ca:4c:83:36:83:63:ec:4e:b4:16:6a:f2:21:1f:4d:22:b9:b9:
b7:67:82:22:54:63:d7:38:90:c3:58:e0:e9:94:fa:0e:04:55:
91:ab:0b:25:d4:02:2e:68:2c:f4:f1:4f:1e:e1:35:ff:64:41:
d9:61:2a:5e:00:82:e3:95:40:87:84:17:93:82:69:62:09:da:
05:9f:63:a6:4b:61:b9:28:bd:78:10:ea:e0:d1:50:62:3b:45:
1b:b2:14:3f:7a:9f:96:59:08:9c:df:aa:63:2a:fd:0d:40:99:
13:e4:06:be:fd:52:c9:75:8c:b4:8e:5b:f4:95:4d:f8:f6:1f:
c5:66:eb:90:24:20:f2:e3:a8:1d:b8:c1:64:a5:4d:e1:7e:e5:
57:2f:61:90:35:82:a8:0c:4c:74:3a:7f:07:23:21:3a:fb:4b:
80:21:ec:50:48:b0:5b:a0:23:b7:d4:a6:35:f5:b1:5d:ac:fd:
17:a6:5d:ba:dc:56:c2:38:a3:a2:a4:6b:b0:3a:42:b3:01:55:
40:87:77:0b:5f:bb:7e:2f:45:63:ef:79:dd:e8:0f:44:7e:35:
50:e7:5b:66:e3:6e:fd:ce:db:7a:0a:73:0a:31:c0:95:5b:17:
e8:9e:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:49 2025 by rpki-client