Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: i5OOHSZ7Ig1UOdmiPLAvj5MbFhun+v0d2wzJHaswCQ0=
Subject key identifier: 6D:20:56:20:5B:E6:C8:F2:10:08:C6:F4:BC:98:11:B5:9E:59:9A:FF
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 01987C093F4BFCDC0F5848E4B56EE27AAB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 03E6
Signing time: Tue 05 Aug 2025 21:00:37 +0000
Manifest this update: Tue 05 Aug 2025 21:00:37 +0000
Manifest next update: Wed 06 Aug 2025 21:00:37 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: u4OZKiCz6ht76llxpEmzpz+tWy/N5T2wnJAErK4GAMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:3f:4b:fc:dc:0f:58:48:e4:b5:6e:e2:7a:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Aug 5 21:00:37 2025 GMT
Not After : Aug 6 21:00:37 2025 GMT
Subject: CN=6d2056205be6c8f21008c6f4bc9811b59e599aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:9b:26:9a:d0:ed:c4:ae:70:63:3a:f5:d1:
e3:e9:67:55:9e:57:b8:b9:35:00:56:d7:f3:f9:63:
06:d4:04:62:c8:6f:80:63:61:01:fc:4f:b7:a2:25:
10:93:40:3f:d2:5e:f3:50:72:4a:c5:79:7d:eb:cf:
b3:71:38:27:6b:87:b9:f6:36:ea:4e:64:ba:c2:9f:
96:a6:0c:2b:73:30:9e:16:8e:74:79:fe:dc:6d:6a:
70:e8:5c:49:a2:1c:63:b4:e4:79:ba:a5:a7:a8:43:
36:e7:64:88:7e:4a:36:5a:2f:d1:45:9f:05:2a:14:
bd:af:2c:27:2f:07:59:fd:94:7d:d2:67:65:52:06:
5b:f8:fb:96:fd:26:41:49:b0:f1:9d:ab:e4:56:86:
48:c5:9f:81:f1:7a:5e:f3:12:00:09:57:5c:f0:46:
c5:15:20:24:db:76:86:1f:b1:44:9e:4d:8d:16:ee:
bc:7f:9c:c4:3f:37:6a:b5:65:cd:1d:5a:8f:1e:d9:
ee:69:06:10:2f:a8:f3:62:99:15:d7:09:46:cd:9e:
33:8b:ad:8b:a3:3c:c8:0a:47:a4:85:36:39:9f:fa:
88:da:1a:84:a7:ad:92:8f:e3:f1:da:d3:24:7e:94:
50:7e:b1:f9:8f:51:b2:cb:2c:67:51:3d:7a:65:aa:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:56:20:5B:E6:C8:F2:10:08:C6:F4:BC:98:11:B5:9E:59:9A:FF
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:3c:6c:bc:3c:7b:e7:da:2a:de:59:4d:80:80:f1:f7:1a:
ef:65:af:7b:62:90:32:2e:4f:38:96:34:16:b3:52:45:24:65:
d1:8f:da:9e:b4:53:f0:bd:aa:2f:6b:c5:e9:35:bb:da:27:07:
53:7a:2a:c5:10:8c:bf:04:56:15:53:b3:fd:b4:22:70:25:e6:
be:e5:2f:0f:c8:aa:fa:23:20:42:bb:e5:aa:bb:5f:b7:d4:32:
80:5a:65:fc:00:f5:c2:e2:0c:6c:14:dc:79:a3:4b:2d:5e:9a:
eb:b5:6c:67:42:70:46:5a:45:ae:cd:0d:b4:13:e3:a8:92:a5:
46:09:06:c9:3e:88:42:7f:31:1e:83:b0:fb:09:c1:26:69:4d:
00:ce:c1:12:3d:68:3b:49:8a:20:1f:86:58:b2:c5:41:3e:08:
a1:cb:07:30:13:d6:75:df:02:42:84:00:4a:6f:45:8a:36:0e:
8a:90:9b:4f:94:92:e9:ce:09:b2:ee:2d:97:81:17:8a:5c:ac:
be:de:2a:b0:bc:44:ae:b1:d6:42:f2:70:b4:25:09:2c:ea:a6:
fe:b3:f1:b6:ed:b9:e4:45:f7:91:82:d9:45:df:63:0e:56:5a:
eb:18:34:e9:17:2f:71:55:2d:7c:cc:34:98:f5:0d:17:56:96:
16:ea:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:04 2025 by rpki-client