Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: XOX6VgYhRnu90ZGNXx6zdpj0qSpVkd+ehaltuL3YzOs=
Subject key identifier: 7A:E8:83:B6:11:D1:48:A6:8E:D1:05:F9:99:9D:11:E0:0E:C3:CD:A2
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 01988B7D016CB7334346BD25D45581CB1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 21:01:22 +0000
Manifest this update: Fri 08 Aug 2025 21:01:22 +0000
Manifest next update: Sat 09 Aug 2025 21:01:22 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: 4ZwL5nO66sPwWMgUMuHC+/YAyAgmlz9keMbl6fV5FCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:01:6c:b7:33:43:46:bd:25:d4:55:81:cb:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Aug 8 21:01:22 2025 GMT
Not After : Aug 9 21:01:22 2025 GMT
Subject: CN=7ae883b611d148a68ed105f9999d11e00ec3cda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:f5:62:68:bc:b5:4c:bb:b5:bd:80:67:d0:
95:c0:97:da:7f:b9:3a:41:16:e0:d7:d3:99:0c:54:
8d:90:d8:a2:c2:96:2b:b0:ab:ec:6a:e1:c2:6e:3e:
59:84:53:4a:c9:bf:1c:93:75:fe:4c:c1:47:39:1b:
e3:27:05:b3:67:bc:8f:a0:eb:ae:e3:63:66:7b:6c:
a2:a7:3f:24:2d:83:61:3f:c2:85:98:9e:56:65:12:
8d:59:a4:da:af:24:fa:ea:28:90:17:c9:53:a0:d5:
50:4a:09:3d:32:c8:44:a0:48:86:07:4e:b7:b4:8d:
30:62:33:b2:c1:99:11:b0:94:1e:9e:f1:eb:b9:5c:
8b:54:52:d0:b9:db:66:2d:3f:0b:73:a9:a8:b2:7c:
8d:38:b8:03:5a:ac:0b:b2:b6:2e:8a:8c:b0:e4:cc:
a4:ab:53:36:b5:94:dc:31:b5:20:ee:7b:ce:e0:ec:
2c:d0:1c:51:56:54:03:8b:5f:52:4a:35:16:64:64:
11:81:53:87:76:53:2b:c8:a7:7f:92:79:a7:a2:30:
20:c5:3f:36:1d:c3:72:9f:13:fc:bb:7d:1d:72:89:
da:61:89:a3:91:b9:c0:34:a1:b9:fe:34:c4:56:1d:
42:fa:7e:5b:6a:2c:c4:c6:cb:c5:cf:47:b1:d8:42:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:83:B6:11:D1:48:A6:8E:D1:05:F9:99:9D:11:E0:0E:C3:CD:A2
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:da:a5:40:4c:d8:20:3d:a5:22:43:d1:db:35:81:83:8d:
79:1a:a7:a8:63:35:d6:e0:27:6b:fa:a4:2b:cb:76:81:a1:69:
93:10:76:ea:c7:62:88:2f:07:7b:e4:66:eb:16:17:26:a1:50:
bd:40:b4:e7:41:03:fe:df:58:0e:04:2e:b7:61:b2:8a:32:0b:
0e:0a:d0:bd:63:69:c0:02:0a:0b:21:7a:3a:df:b3:fe:63:41:
ca:a8:84:16:70:39:ae:e0:00:d1:e5:6a:52:07:ae:a8:05:b2:
4d:76:d1:e1:ab:c8:ee:76:a9:e9:33:bb:46:d1:76:f2:f4:ad:
eb:03:2f:14:05:e0:d5:cd:18:af:a5:eb:27:e8:83:59:53:cf:
2d:1e:e9:7c:07:a6:ac:e5:bd:5d:47:5e:dc:e5:1c:12:8f:93:
cd:43:4f:68:87:f1:f0:e7:48:be:bc:5a:b6:ca:9f:b8:ee:1e:
91:25:42:99:01:80:b9:d8:e8:ad:c9:37:d4:99:8c:24:55:b4:
12:8b:3c:ee:c9:f5:ab:4c:08:83:9b:94:77:d8:91:be:1e:46:
fa:36:6c:4a:3b:81:08:11:46:2b:62:72:1b:50:ec:ad:96:87:
2e:21:d8:01:2a:c2:fd:84:50:32:ae:6e:98:e9:22:56:af:58:
15:7d:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:08 2025 by rpki-client