
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: 3JMbq1N9cWvUobEZe++wjNp578jKHS2JWsay0Qiwg0g=
Subject key identifier: D7:9E:95:D5:D4:E5:58:9A:38:55:6E:A1:42:F2:41:85:E4:85:B3:24
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 0198745040824A1293D8F1B42059860E2D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0B23
Signing time: Mon 04 Aug 2025 09:01:12 +0000
Manifest this update: Mon 04 Aug 2025 09:01:12 +0000
Manifest next update: Tue 05 Aug 2025 09:01:12 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: L7c4MzdmBEMRqfm/PFnr82LbDmTar2uzANCLr+fVknI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:40:82:4a:12:93:d8:f1:b4:20:59:86:0e:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Aug 4 09:01:12 2025 GMT
Not After : Aug 5 09:01:12 2025 GMT
Subject: CN=d79e95d5d4e5589a38556ea142f24185e485b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:40:57:d3:7c:b8:0e:58:63:0e:7f:fe:7f:
4e:35:6d:58:09:8b:42:7b:c9:bd:2a:5d:ab:d6:89:
9a:0c:85:77:46:92:a4:f1:8b:e4:47:b3:2f:6b:70:
41:2d:32:8a:ff:9d:46:3f:38:fc:31:fd:aa:bb:70:
40:16:dd:3f:d2:be:7f:69:5a:3d:c0:b7:08:13:ba:
ea:a2:61:25:0d:22:16:c7:80:cd:c7:f4:d4:92:9e:
0f:84:51:cf:23:b2:27:ed:78:c5:4d:2c:29:db:e3:
d8:e5:f9:15:61:c7:0d:f0:4b:8f:ac:d9:be:40:80:
f8:34:91:fd:1a:41:05:f5:47:a9:18:68:f9:ed:0d:
54:d6:57:5e:e1:6a:10:c8:7b:58:7d:d9:b9:61:74:
e7:0c:5d:81:d1:90:84:c6:e0:de:6d:22:ca:1b:3f:
ed:ca:70:2f:8c:09:a2:16:b5:3d:27:f3:65:17:60:
66:b5:30:7c:9e:b3:dd:c2:5b:c1:ac:af:19:91:0f:
dd:ec:69:8e:69:43:1b:67:7b:57:5e:9e:41:09:e6:
a3:70:9d:3e:89:22:c3:5a:8c:e6:b3:a0:ac:99:8e:
8d:99:f5:77:97:af:0b:53:d5:34:5d:9d:c5:df:13:
9b:a2:f2:cd:ea:27:6a:b3:ba:a7:aa:74:55:7f:c7:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:95:D5:D4:E5:58:9A:38:55:6E:A1:42:F2:41:85:E4:85:B3:24
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:0a:85:75:67:39:85:94:7c:8f:6f:92:de:43:95:ab:cc:
19:6f:6a:86:e8:05:0d:9d:03:e5:a5:8b:23:68:4e:ac:7b:c1:
06:d5:91:79:7d:f7:5f:9e:aa:ff:ab:59:61:7f:85:11:13:40:
85:98:55:d8:c5:b4:36:c1:ad:99:bd:52:d3:b1:2e:8a:c5:33:
b9:be:34:5e:ab:9a:84:5b:50:7d:d8:81:0a:b6:e4:3a:7f:b9:
2a:7c:a9:ad:92:b9:65:b2:2f:ea:f8:b6:e9:8a:4b:f2:11:a7:
0b:6c:a4:1f:2d:3f:76:dd:1e:4b:3d:24:86:26:a0:fa:25:90:
84:77:54:f3:0c:e4:19:da:3c:c9:0a:eb:85:27:8d:4b:af:c8:
ef:77:11:a6:49:f4:f7:1e:3d:76:ee:0c:ce:06:50:bd:8b:f9:
94:6e:69:ab:cd:48:ab:90:88:6c:92:6b:7c:34:4f:75:5d:6a:
b4:1c:d3:f1:52:8e:65:fc:e1:ba:d9:fa:11:f9:a8:d7:30:55:
3e:45:6c:02:12:cf:58:f9:23:22:2f:db:d4:2a:d4:75:3e:de:
63:14:40:31:64:92:78:25:45:e7:0d:f3:00:0d:30:76:51:7b:
30:7f:f6:30:81:c5:ed:42:b6:1c:e9:fb:d0:5e:4c:cb:0a:c9:
2d:1e:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:43 2025 by rpki-client