Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: GEhR7f1esa5xXFd5ukDirQJ4YYc5ww11iLJWyc0BzlU=
Subject key identifier: 57:53:28:B9:C7:DB:FC:FE:2B:C2:A8:97:8C:CE:7E:D8:A5:8E:42:FA
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 01987E6624F2FBC0C5232AC4A3E5BCA06F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 04B5
Signing time: Wed 06 Aug 2025 08:01:19 +0000
Manifest this update: Wed 06 Aug 2025 08:01:19 +0000
Manifest next update: Thu 07 Aug 2025 08:01:19 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: 4K4DVLZ+lBNB6QrPflJ9D2enkqQ2cIx+pt+hZctNqKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:24:f2:fb:c0:c5:23:2a:c4:a3:e5:bc:a0:6f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Aug 6 08:01:19 2025 GMT
Not After : Aug 7 08:01:19 2025 GMT
Subject: CN=575328b9c7dbfcfe2bc2a8978cce7ed8a58e42fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c4:54:88:6c:93:dd:9e:16:0f:81:6d:c7:58:
4d:0b:47:9b:a4:b5:d6:1d:53:b9:c5:6f:7c:6f:d0:
19:71:64:17:d7:4e:8e:4d:23:10:3c:3d:22:59:fd:
b1:1c:01:b9:bb:3c:78:52:f4:b9:dc:a1:b6:76:da:
c6:8a:80:00:0d:ba:90:c8:c8:21:25:bd:55:82:b6:
0a:0a:36:ce:62:69:dc:54:d6:1c:db:26:fe:68:fa:
6d:7c:6b:c2:47:cf:9d:2e:37:9d:27:d8:f2:a0:2a:
ca:fd:11:3f:e7:9c:75:e1:f4:38:7f:71:2a:6b:7d:
03:fa:ef:a4:d8:da:fe:99:5f:a2:59:fb:69:5b:44:
87:e7:d1:de:2c:f7:e3:9b:f0:29:9f:71:09:c1:57:
fa:1e:03:10:36:81:2a:83:33:00:bf:06:1c:87:df:
74:08:93:b9:3c:5e:a2:df:18:f5:63:34:8d:60:3c:
fe:34:0a:4b:c5:9b:40:8f:5d:09:db:d5:55:55:af:
7a:a3:a3:89:68:c1:d3:1a:22:14:d8:94:e7:a8:0f:
53:0e:b9:29:8b:67:ef:f7:d5:25:a0:d8:6b:c0:a7:
05:64:07:e9:02:fe:11:b1:da:5c:f1:ca:11:6e:00:
ff:69:86:ac:e7:82:d3:f3:9e:9a:5a:e2:ca:c9:b4:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:28:B9:C7:DB:FC:FE:2B:C2:A8:97:8C:CE:7E:D8:A5:8E:42:FA
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:11:51:ae:a5:b6:c8:b7:4c:47:38:e9:4f:89:b0:10:34:
0a:17:bf:e2:f5:2f:d3:4c:c0:32:7c:e8:29:1d:5e:52:2b:b6:
82:17:1f:d1:15:0f:9a:0e:a9:d9:23:64:a8:6d:b5:78:cf:e3:
62:0e:dd:dc:75:19:34:f4:1a:e9:e8:a3:c6:ea:1f:27:77:07:
96:fb:c3:a4:f3:71:f4:c5:12:4a:66:b0:b2:26:4b:16:51:4b:
0d:c6:73:14:1c:4a:6c:f4:b4:27:fc:35:3a:60:82:23:46:38:
88:50:0e:b9:d3:1f:8b:89:12:a4:91:c0:40:25:9c:27:56:0e:
6e:b8:c8:bd:96:c4:0c:fc:0f:35:74:86:e1:81:4c:ea:7d:2d:
92:10:a1:81:bc:c6:a6:68:92:37:5c:99:9b:95:8b:43:5e:9d:
fc:cd:5e:5e:83:e1:a3:53:d5:b6:a5:31:11:a5:3a:d4:91:29:
a8:b2:bc:98:81:9f:dd:89:02:40:a3:ed:9f:f2:b8:21:9f:b3:
07:3a:71:6f:88:9f:3c:aa:93:88:fa:64:fc:46:d0:a6:30:62:
78:cf:5e:be:c4:10:8d:73:50:80:64:4a:26:b0:17:2d:74:f8:
3c:45:80:e3:36:60:8b:e0:be:6c:30:e1:26:0c:af:a9:9c:e0:
f2:3b:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:04 2025 by rpki-client