Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: bM2zOCmWATQv2ovjKHkPkwT8n+CgpY0PFrrZY34ETD0=
Subject key identifier: 06:43:0C:65:D8:93:B8:17:B0:B0:15:BC:7E:16:2B:95:A7:13:18:E2
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 01987ED419467B7AA1CCEBB42A65520B9F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 09C9
Signing time: Wed 06 Aug 2025 10:01:25 +0000
Manifest this update: Wed 06 Aug 2025 10:01:25 +0000
Manifest next update: Thu 07 Aug 2025 10:01:25 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: 7BbL0BwfUCU3J/Zx2tjknEyrPNBjEyhEDUMhqpuat1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:19:46:7b:7a:a1:cc:eb:b4:2a:65:52:0b:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Aug 6 10:01:25 2025 GMT
Not After : Aug 7 10:01:25 2025 GMT
Subject: CN=06430c65d893b817b0b015bc7e162b95a71318e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:4b:4e:36:d4:81:36:aa:8d:bf:ba:19:d6:
e1:aa:d0:a7:e5:94:53:a6:3f:c0:27:bc:89:fc:8d:
80:9f:2d:a7:76:cf:15:96:6d:69:8b:5a:84:37:31:
48:e9:98:aa:da:9a:bb:64:41:88:96:27:e9:6f:5b:
06:8d:06:8f:fe:48:6c:03:f8:ba:af:43:f1:67:37:
0f:87:3a:84:41:d6:78:1b:61:7e:e2:d1:5b:39:7c:
54:16:27:df:75:50:5d:53:10:03:e0:5a:db:27:c5:
60:a2:59:02:df:cb:78:a0:9a:fe:fa:97:f7:3c:6b:
49:84:44:96:4d:67:ab:cc:fc:02:26:0c:73:38:67:
a5:4f:20:88:d2:23:91:48:73:af:ed:7d:95:31:01:
2d:11:21:d2:e4:02:2d:dc:92:75:15:ae:4c:c8:63:
b6:44:d5:6b:da:1e:48:da:f9:fe:43:b1:1b:dc:7f:
9d:82:88:61:95:58:ce:a2:c2:6f:d3:e4:e9:e8:65:
31:73:e8:e2:63:4f:f8:87:8c:3f:17:5f:8d:9b:1b:
41:33:1a:17:cb:bf:95:7b:fc:15:28:83:60:d1:b6:
c6:42:23:93:c0:b4:2c:1f:9a:ce:2e:82:85:bb:27:
85:92:73:82:02:c6:4d:1e:ca:22:11:f0:ae:21:cb:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:0C:65:D8:93:B8:17:B0:B0:15:BC:7E:16:2B:95:A7:13:18:E2
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:88:17:59:49:93:2a:8e:39:2c:69:6a:78:bf:ff:49:77:57:
3d:eb:ae:42:ac:c8:03:a3:cd:ff:b4:0e:25:a3:07:8d:24:15:
61:28:e3:86:cf:bf:1d:cd:cf:48:fb:fb:9d:65:38:a2:a1:e2:
e6:d9:ca:02:4c:2b:3b:f2:60:80:6a:e8:7d:95:8e:b9:d1:9b:
8f:83:c3:12:e3:e4:43:40:dc:32:82:25:2a:50:4f:44:27:3e:
a4:ee:b9:d0:8d:5e:05:38:be:90:43:73:5b:10:22:65:20:a2:
3d:9f:50:eb:4c:15:8a:c6:10:37:d1:80:e8:ef:9d:d4:b6:71:
b6:63:33:9e:30:4d:66:a9:01:70:89:24:43:b5:8a:a1:24:69:
57:11:43:c2:56:10:cb:f9:3a:b4:3f:ed:7a:2f:dd:a2:47:56:
85:c3:3c:f0:0e:da:1f:3f:6f:ce:0a:b8:c9:58:89:34:ea:57:
ee:bd:8d:9f:d7:3c:bd:2b:c8:79:73:f1:63:46:57:1e:c6:f4:
23:b4:91:fb:9c:8e:34:58:ad:0b:7f:2c:93:65:49:b0:85:82:
3e:eb:d3:d2:8d:01:5e:0c:a0:d0:03:cd:87:93:e1:a7:37:ae:
e7:15:03:d2:87:80:02:95:32:e0:99:9d:a1:c2:e7:d2:e4:6f:
15:b3:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:41 2025 by rpki-client