Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: jIPc/wVp/7TP4NAYOqbHu3qBBTmKXTVFBTnzU2gLrbY=
Subject key identifier: 03:7E:AD:CF:80:B4:FF:F7:69:3A:3C:72:B3:0F:B1:53:9A:AF:BA:10
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019A4F62086036D99B5E831EA25CF7444AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 15:00:15 +0000
Manifest this update: Tue 04 Nov 2025 15:00:15 +0000
Manifest next update: Wed 05 Nov 2025 15:00:15 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: /yL0Z6v6ANTPWmWrlmmZsA/VAErOMy8k7GpwfRDam2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:08:60:36:d9:9b:5e:83:1e:a2:5c:f7:44:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Nov 4 15:00:15 2025 GMT
Not After : Nov 5 15:00:15 2025 GMT
Subject: CN=037eadcf80b4fff7693a3c72b30fb1539aafba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:f8:eb:9c:44:6b:0a:1b:63:f7:25:9e:4c:
d5:60:f5:0b:c3:af:b5:1e:7d:a2:4a:cf:1f:db:96:
cd:b8:f0:d8:7d:38:ba:73:55:01:14:81:f4:a7:6d:
0c:3b:c2:d5:55:42:04:93:94:7a:45:33:31:d4:62:
0d:92:f2:88:1b:bc:35:68:c2:7a:d5:ce:92:7c:6c:
05:0f:02:bf:83:61:e9:04:db:17:22:17:0b:f6:fb:
f6:01:f3:c3:56:aa:6e:1e:a1:3e:21:7f:90:ae:10:
90:08:02:1a:35:f6:c1:ad:7d:f6:07:b7:74:29:16:
40:3f:f7:6d:62:b9:cc:fa:41:c5:c0:b0:39:4e:2f:
35:fb:e7:0d:19:14:84:70:14:94:7d:f5:1f:33:b7:
79:2f:a5:e7:e0:16:d9:21:2c:1f:b7:31:0f:0c:22:
02:43:87:94:06:47:a7:ff:36:d0:d5:ff:6f:3e:34:
80:da:1f:5f:f1:b4:e1:5f:e1:fc:73:2b:4c:7e:b7:
d2:ed:48:b5:35:0c:52:5e:7e:35:c9:01:0b:40:42:
92:83:d5:39:7e:de:80:9a:95:5e:81:7f:44:cb:7e:
2e:d7:0f:4f:c0:5e:3a:b8:ed:7c:78:2f:af:84:0e:
97:d6:75:b1:e6:31:26:65:de:4f:9c:a7:12:bc:25:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:AD:CF:80:B4:FF:F7:69:3A:3C:72:B3:0F:B1:53:9A:AF:BA:10
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4d:34:01:dc:c4:43:4f:43:17:00:6b:28:36:87:29:09:81:
aa:dd:87:e8:47:1e:e5:1c:5d:08:9d:23:7b:8e:b7:e0:40:91:
a6:12:86:b9:a6:1e:98:f7:f4:92:0c:ed:ff:ef:42:42:ec:66:
fc:28:cf:b4:b4:0b:ba:c4:f6:65:b1:f7:8c:53:11:bc:6f:b1:
d5:3c:9b:23:e3:26:11:f8:46:91:05:64:d0:44:b0:58:8a:c2:
af:57:e4:fd:db:bc:4b:a6:5c:9a:17:e2:7c:1c:40:87:8b:11:
4b:3b:a3:9f:ca:da:47:d3:f7:93:5d:26:68:ba:db:3e:3f:70:
eb:da:19:d1:f6:eb:d8:dc:fd:12:7b:25:44:0d:70:9c:a9:3d:
c7:80:28:cc:7e:95:41:6e:39:1d:58:b4:ed:c4:be:5d:72:af:
b3:e7:93:77:c5:be:26:7d:7b:bf:ab:4b:6d:97:72:f6:5c:3e:
b1:c5:28:ae:fe:3b:cb:a4:3f:60:3d:78:ec:17:a5:8f:62:4a:
c1:12:15:91:f3:2b:88:3d:55:d4:a8:ea:22:ac:26:47:cf:0f:
1c:22:c3:40:56:aa:a4:11:18:55:9f:b1:06:68:69:d2:ea:99:
0d:29:65:d1:6f:18:4a:c3:16:39:c3:ff:97:c4:03:e6:a8:dd:
6c:48:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client