Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: Rf2hDxkpJ3X0fr1HyEAJJIeuCN8qrPKz6t/0S2MEjgw=
Subject key identifier: D9:88:82:EE:75:54:FB:7F:61:44:61:07:09:92:6B:9F:BA:D2:C7:97
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 01976F9995719E62AB94BF4AAC16B4AA3ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 027E
Signing time: Sat 14 Jun 2025 18:00:25 +0000
Manifest this update: Sat 14 Jun 2025 18:00:25 +0000
Manifest next update: Sun 15 Jun 2025 18:00:25 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: EPd4KFuFDB2o+7Aak8s3fLHeefJhlTEAYkzlLHvKDfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:95:71:9e:62:ab:94:bf:4a:ac:16:b4:aa:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Jun 14 18:00:25 2025 GMT
Not After : Jun 15 18:00:25 2025 GMT
Subject: CN=d98882ee7554fb7f6144610709926b9fbad2c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:c3:db:8c:f0:ce:2a:5c:62:3d:cd:9c:52:
75:51:3f:72:80:67:3a:33:2b:20:8f:22:9f:3a:18:
ad:78:6f:62:43:c0:9b:3d:8d:ec:d5:fe:a9:60:57:
dd:4d:f3:b1:5e:24:5f:95:2c:a9:a2:12:c1:c1:f0:
64:28:3e:a2:4a:2e:4d:88:9e:cd:7f:dc:c5:8d:11:
ee:92:51:c2:9a:14:f8:21:e9:78:73:27:31:b5:4b:
fe:0f:ae:d1:f1:77:fe:e7:de:8a:3b:de:e0:49:d1:
13:ac:7e:00:5a:74:ab:94:04:ee:6e:0f:d0:e6:12:
2e:e9:81:d7:2d:84:f4:aa:19:76:03:ac:45:8d:6d:
61:e3:6f:eb:3c:85:39:fb:34:36:52:e4:c9:04:06:
4e:74:20:8b:b5:d5:b3:33:31:cb:c6:90:0e:26:13:
e2:6c:aa:00:9c:a6:2a:da:57:be:1a:c2:d4:1e:06:
07:aa:fb:94:94:86:9e:9a:2a:e2:f8:0f:8c:f5:32:
90:c9:04:1d:da:58:8c:58:b7:41:26:2c:d6:8f:a1:
66:9f:82:50:15:8e:12:58:2d:7e:92:ef:c5:be:77:
0b:a2:e1:93:f5:95:be:ed:be:78:61:88:a2:18:9e:
85:cb:fa:f8:9f:72:ee:20:56:e4:f2:8f:c4:8f:ac:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:82:EE:75:54:FB:7F:61:44:61:07:09:92:6B:9F:BA:D2:C7:97
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:fd:ae:6a:9f:47:0b:2f:1a:7d:c4:8b:21:2f:f0:91:7d:
94:2a:c0:f8:a1:b9:70:c7:c4:a3:41:bb:6b:5a:2e:ad:71:fd:
45:24:cf:b6:61:0f:b1:f3:6e:ea:e6:d3:a0:38:c3:55:72:0f:
66:59:3d:b0:13:45:91:0b:19:58:62:c7:58:27:f6:00:dc:c9:
ec:69:1c:91:20:52:64:99:7d:d3:69:5a:14:2f:ce:26:d8:73:
f7:63:ab:f0:29:3e:81:79:08:ce:5e:1b:e3:9a:38:ff:17:37:
6a:76:a5:15:fc:3a:4c:39:bd:eb:b6:d5:8f:b6:87:6a:77:43:
66:a6:e8:d8:e5:95:33:8c:b1:bd:26:69:cf:c4:72:dd:8d:f4:
f6:f1:03:3d:48:cb:2d:f1:bd:48:29:9e:27:15:b4:da:86:e8:
cb:9e:44:e9:9a:2c:2f:54:94:7b:68:80:8a:c5:21:14:05:df:
97:c4:ab:3d:81:21:9d:90:84:0b:6d:15:4d:6d:c0:f2:87:3a:
63:46:69:8c:54:82:e5:22:d6:12:43:69:eb:0a:6b:db:cc:53:
96:e2:12:1b:2e:d6:81:9c:92:8b:25:b9:a3:1c:10:ea:2c:1c:
a7:d1:92:15:28:00:8f:7a:83:2b:9e:59:1e:89:a8:74:48:46:
bf:e9:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:37 2025 by rpki-client