
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: 1O5jlCO/uKj9ONwdHW95R1rB94phqwQWMhx6OYm3Xwc=
Subject key identifier: 16:6B:F5:75:ED:13:B0:A5:C8:A1:AC:E5:73:24:5C:E5:05:EE:D3:15
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 01988BB34DC6B8E868D1B673F7D14222F742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 10CB
Signing time: Fri 08 Aug 2025 22:00:40 +0000
Manifest this update: Fri 08 Aug 2025 22:00:40 +0000
Manifest next update: Sat 09 Aug 2025 22:00:40 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: lkX3CrAC0+a55isO0kW82nAYFCyVCqyKHxNk9UlCbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:4d:c6:b8:e8:68:d1:b6:73:f7:d1:42:22:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Aug 8 22:00:40 2025 GMT
Not After : Aug 9 22:00:40 2025 GMT
Subject: CN=166bf575ed13b0a5c8a1ace573245ce505eed315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:22:89:e2:4e:40:a6:69:f5:c8:b5:f0:d4:
19:97:36:ac:18:88:f5:7f:c5:ef:ee:a5:87:b1:f9:
d1:74:28:5b:92:a8:53:8a:c2:2f:05:e6:41:a0:3a:
0c:2c:a4:a6:88:7b:78:40:6a:3a:56:ca:4b:fe:cb:
eb:cf:ce:73:05:ec:85:a5:e1:aa:ce:28:74:69:06:
07:e9:4a:f7:03:bb:8d:96:49:9e:ad:cc:5c:5d:da:
b0:43:6e:06:c1:96:e2:bb:7f:8a:2e:2b:13:f2:3d:
b1:ec:c1:f9:4e:4c:f0:35:84:d0:61:e4:c2:93:24:
9d:75:f5:5b:42:8a:a1:51:19:c7:6b:1e:26:c6:c2:
aa:94:c3:41:18:d7:db:40:7f:39:f8:67:2d:b5:43:
c3:a9:b3:ce:e6:d7:15:c9:2f:d4:5b:c4:b0:8f:a2:
2f:3d:17:9b:91:16:5c:2f:d9:0f:29:4e:a0:bb:cb:
65:ae:61:d1:d4:86:37:6f:d5:16:7c:ca:bf:d4:74:
8f:04:4b:ed:af:0d:3a:2c:04:7a:41:cc:d3:d6:a1:
b7:26:b1:c9:86:a0:a7:eb:1d:71:b8:82:82:de:4d:
28:be:ad:f6:b7:b5:e8:ed:c6:da:78:ff:cb:83:38:
40:94:89:fc:0c:d2:17:ac:72:8e:3a:d9:6f:b4:ff:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:F5:75:ED:13:B0:A5:C8:A1:AC:E5:73:24:5C:E5:05:EE:D3:15
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:72:39:50:4e:92:97:03:67:fa:32:45:27:96:a8:a0:48:
6b:bc:68:80:69:78:c2:4a:91:ef:01:ca:04:b4:f2:fc:4e:43:
aa:72:5f:79:b0:50:be:d7:8a:20:4d:92:6a:0b:09:10:7d:9e:
cf:73:5c:86:9e:f4:fb:07:a1:99:f2:ba:99:5d:4d:b8:6f:c4:
43:f6:e3:53:3b:75:60:6c:9f:bd:0f:27:e6:1d:a9:c9:01:d8:
86:07:b2:40:20:ad:6b:38:80:1e:2b:65:a4:03:61:66:74:ec:
bb:ab:00:76:25:b2:34:62:21:22:dc:dd:26:a8:7c:f8:d7:e7:
15:d1:b5:da:7e:c6:1e:5d:34:74:81:6d:f2:c0:5c:fd:3a:74:
8e:f1:7c:d4:48:6c:1c:55:63:70:10:25:38:c9:20:78:95:11:
9c:c0:e8:25:f4:fd:a5:95:50:5f:09:99:40:56:a5:81:3a:b6:
23:d3:9c:81:3b:f4:c3:0c:86:64:3b:16:40:e0:3e:0c:2a:99:
a4:60:a4:a3:ab:5d:d3:c6:eb:50:2e:05:b5:f3:e0:81:99:69:
05:db:91:6f:5f:60:19:5e:ba:34:0d:f3:ee:e0:a2:44:f0:db:
a5:02:c6:23:69:f4:69:94:d2:a1:e2:b4:7b:bb:f2:58:b3:7c:
b8:bc:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:08 2025 by rpki-client