
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: zFl91zQt0KBH4amrkjS1OJ7imI8zKefQAdk2CUStkcE=
Subject key identifier: A6:1D:7A:0F:64:C7:EC:64:A3:70:6F:00:B5:F7:A3:3E:85:6E:DA:38
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 01987450C419D97730F9B9F0E461F551843C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 09:01:46 +0000
Manifest this update: Mon 04 Aug 2025 09:01:46 +0000
Manifest next update: Tue 05 Aug 2025 09:01:46 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: gXXfTqxbwqGBeSBy8zM77gWFKQbKF9MvMt6UtlxdUCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c4:19:d9:77:30:f9:b9:f0:e4:61:f5:51:84:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Aug 4 09:01:46 2025 GMT
Not After : Aug 5 09:01:46 2025 GMT
Subject: CN=a61d7a0f64c7ec64a3706f00b5f7a33e856eda38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:7f:ea:ec:31:21:a0:f4:58:7c:0f:8e:52:
ff:70:fc:e3:ac:4b:c0:d4:83:30:18:a4:d1:c4:fd:
e5:e9:f9:d7:31:eb:87:d9:69:66:3c:0c:66:eb:fb:
0e:97:cb:78:20:a4:c1:bb:92:0b:12:52:1d:bb:f4:
72:01:9d:9f:70:42:09:f3:ee:e7:8d:a0:71:a0:2a:
62:e4:48:3f:d2:46:41:de:3e:77:95:ac:24:2a:61:
77:bc:b4:6c:22:71:ae:16:9b:d1:bb:ac:4e:91:5b:
e7:0b:ba:a2:9c:3e:d3:fd:95:fa:29:05:49:85:dd:
74:60:d0:1b:1e:1f:7c:60:8d:5d:13:dd:19:f1:08:
ff:c2:9a:9f:8a:04:3c:b1:56:3f:05:f9:9b:bb:7f:
55:61:2c:91:d2:ec:4a:69:ec:ac:2c:6f:8d:d3:72:
ca:35:8a:08:d1:b2:11:61:1d:d5:f3:b8:2f:67:9d:
65:8f:6b:01:9b:94:06:a9:b8:d1:23:d1:77:62:91:
f9:89:85:61:12:41:5b:c7:18:da:67:77:81:21:f0:
5d:d0:1b:13:aa:a5:f2:64:04:ba:0d:65:5a:38:2a:
50:50:a1:7a:04:3e:b6:83:d5:0e:f6:14:62:6e:8d:
dc:8d:f9:66:b4:d0:e2:88:9c:b3:49:ee:fb:07:b0:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:7A:0F:64:C7:EC:64:A3:70:6F:00:B5:F7:A3:3E:85:6E:DA:38
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:48:5d:51:7d:f8:ab:1f:68:b4:03:62:aa:5d:18:b7:1d:49:
84:95:d1:2a:b1:d0:ab:71:2e:a5:7d:5a:d8:24:91:5e:17:47:
78:26:bc:33:c1:66:e6:b1:9a:9e:52:e8:56:9d:ea:f4:8c:cc:
a5:36:fb:01:40:39:33:22:09:ca:f9:8a:31:ee:d4:dd:67:a8:
1b:91:9c:41:19:79:84:98:58:1e:0c:fe:48:7e:6f:74:43:3b:
13:46:1a:a5:94:8d:df:57:1a:3f:9b:21:f4:63:c8:b2:6d:10:
dc:14:6d:e2:bc:2c:52:6c:ba:c0:ac:8f:f1:06:63:27:7e:fa:
c7:3a:4c:7e:1a:35:5d:c8:f7:db:79:7f:ca:08:47:46:a6:a1:
19:60:07:f5:31:1a:8c:6c:10:15:94:04:8c:a1:3a:8f:2a:fd:
a8:1e:66:15:91:2f:2a:34:85:37:4a:b5:f7:e9:5e:b8:6d:a1:
cf:2d:b6:12:30:7a:84:f8:51:3f:11:9b:2d:65:80:80:80:c7:
f3:5b:bc:c7:dd:b3:92:83:8b:77:58:8c:17:0d:ec:42:bb:bf:
c7:cb:3c:2c:7f:2d:04:ac:0c:a8:20:07:5f:14:2f:0a:9f:dd:
31:bd:4d:bf:fb:3e:16:24:26:3b:28:1c:22:19:88:fd:8a:a2:
c6:a8:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:44 2025 by rpki-client