Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: gstbmo5sJkFcupF5JuXxfxMDGwjFlIy8YmNBkgKtVnQ=
Subject key identifier: C9:F1:BD:BB:6D:65:3D:A4:2C:F0:1D:5C:45:29:EE:D6:8E:75:2F:87
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 01989ECC24BCB583180777288DEEFF1C3C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 14DF
Signing time: Tue 12 Aug 2025 15:00:35 +0000
Manifest this update: Tue 12 Aug 2025 15:00:35 +0000
Manifest next update: Wed 13 Aug 2025 15:00:35 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: pxLoUloH24oOOJ6NO1tAEIEsfyi1zDONVyFep7YhAoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:24:bc:b5:83:18:07:77:28:8d:ee:ff:1c:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: Aug 12 15:00:35 2025 GMT
Not After : Aug 13 15:00:35 2025 GMT
Subject: CN=c9f1bdbb6d653da42cf01d5c4529eed68e752f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:1b:5a:35:c7:5b:c3:5c:97:3c:e7:cf:b3:
cb:2f:64:43:63:e1:cc:ba:4f:16:9b:5b:50:8c:07:
5b:e6:dd:b4:53:8e:a3:34:f0:f1:b0:5a:aa:29:87:
28:e5:52:06:b2:6c:91:2c:85:03:a8:05:d8:be:88:
e0:6e:e6:19:d8:75:f5:a3:d5:fc:68:d9:bb:58:2f:
89:7f:29:da:93:92:0e:3f:45:1a:fa:61:6c:39:32:
6a:6d:5d:f0:81:df:66:50:7c:e8:1d:bb:ab:bc:af:
dd:24:6a:1e:6e:9e:61:61:28:73:6c:2d:16:ba:ef:
bc:1a:93:b5:b9:79:4b:1b:03:bf:0a:fd:36:16:7f:
ec:0d:3c:9e:40:e6:30:cc:2e:70:32:96:ed:d7:be:
48:f5:4b:c4:97:00:63:c7:ec:7b:d7:ad:3d:e1:db:
bf:99:21:7f:c6:7e:dd:52:4d:99:f4:67:e9:db:3b:
c0:c5:58:b1:70:6e:9c:f8:de:4d:62:1a:6d:61:4d:
02:48:f2:d7:07:72:2f:0b:08:17:73:44:03:64:9e:
78:2a:91:10:1e:cc:e2:f9:4e:29:56:fe:1c:4f:4c:
71:4a:f1:d2:19:81:83:5a:93:15:5c:ef:c8:2f:6a:
70:00:15:1b:c3:d6:cb:81:b9:1f:08:54:3d:72:34:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:BD:BB:6D:65:3D:A4:2C:F0:1D:5C:45:29:EE:D6:8E:75:2F:87
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:80:60:cf:6c:3c:82:a6:c3:76:9e:7a:e4:75:17:cf:da:
51:20:21:42:b4:ca:7d:8a:af:3e:88:cc:d9:37:24:5f:c4:b6:
c2:0a:80:79:84:a6:bf:7b:5f:0b:0f:b5:86:5b:49:07:c6:1a:
e4:80:da:d3:15:6b:62:57:81:8c:f8:70:42:89:2f:c3:0c:e7:
a5:9f:2b:30:87:1d:7c:52:b9:fc:40:8b:33:07:b2:78:62:47:
d2:81:f8:6e:5e:ee:e9:74:6c:ba:5c:eb:a4:5d:a8:08:70:0d:
22:bd:30:9e:2a:7f:63:1a:2a:e1:9b:52:64:5f:93:f2:01:e7:
27:1d:92:9e:79:96:6c:a6:5f:09:c8:24:0f:49:aa:7f:a0:4a:
1f:ae:ce:85:4f:cc:f9:07:e3:de:3c:64:bc:64:10:5a:f4:a1:
7f:3f:8e:67:9a:37:ee:ec:29:f3:01:98:d0:8c:c6:60:61:36:
79:79:0b:28:6c:ed:ca:35:c3:68:ff:73:b1:b5:3d:5f:58:2e:
a3:72:30:ed:ad:65:27:3b:11:b9:0b:4e:73:ba:c8:71:7d:5a:
bb:e0:0f:1d:63:27:63:fa:6e:f1:7a:cd:11:c7:2c:6a:f5:71:
d4:cd:1d:fc:ed:6a:70:91:03:9b:21:22:fb:ff:6b:88:9f:9f:
cb:79:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:53 2025 by rpki-client