Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: j80H9qI3HJOeNXMgDmNyuWid2pUUNWkhys9B4vXc5Kw=
Subject key identifier: A1:BB:44:F3:15:AE:59:80:F5:42:6E:65:37:2A:18:76:DF:04:34:AA
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01976C2B4C9FF0CA988378FB6BBD714DAF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: /zEwqAbidTQpmMNqUUNBRv7NSDS/YWtDmnKMcQamTFU=)
2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4c:9f:f0:ca:98:83:78:fb:6b:bd:71:4d:af:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=a1bb44f315ae5980f5426e65372a1876df0434aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:a2:3a:d1:74:3f:27:d3:36:01:bd:5b:e3:
e2:05:28:07:97:44:ae:07:6a:8e:d0:47:20:0e:cd:
04:22:9d:67:a6:0c:a8:90:a7:85:d7:aa:21:75:3d:
a6:a0:6e:f4:ee:b4:67:97:96:e8:16:fb:f9:1d:71:
01:5d:23:69:39:19:93:61:bf:60:00:08:a1:06:08:
6a:3f:fe:a3:52:5a:d4:94:93:6c:e7:1a:0b:16:de:
ea:2d:66:39:2b:5c:c6:66:a4:0d:79:e7:f1:dd:d0:
03:5d:12:cb:4c:5c:60:52:1f:8f:a4:c1:25:55:61:
4e:e9:ca:96:41:61:f3:2d:fc:14:e3:38:9c:b4:f8:
70:03:4b:c5:81:49:79:89:3d:63:4e:28:52:97:3c:
3c:73:86:53:3e:ca:9c:31:06:a6:60:cb:1c:d6:69:
60:3d:7e:4c:c5:e0:40:df:dd:e2:a8:11:59:4e:7c:
5f:1f:19:3d:0e:c1:a9:e0:1a:3b:b2:37:94:95:4e:
ba:62:13:17:63:c6:87:ea:dc:e1:8d:09:fd:fe:89:
f0:b9:29:d1:30:20:cc:c5:43:fb:26:ef:8e:e8:96:
1f:f1:ca:be:42:c6:ff:0e:46:04:5b:40:d4:6f:d4:
7b:ab:0f:4c:72:0f:0b:d8:1b:11:ba:83:73:71:3b:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BB:44:F3:15:AE:59:80:F5:42:6E:65:37:2A:18:76:DF:04:34:AA
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:0f:95:54:ed:ba:31:d5:32:a6:4d:c6:80:3f:c7:84:dd:
f3:eb:ce:b7:40:72:23:57:2e:01:b1:8f:27:24:92:45:5e:82:
32:43:89:46:77:26:4d:f6:ab:fc:cf:bf:42:d1:2a:77:3c:1d:
e3:01:b3:35:78:7f:7e:43:a4:65:20:2b:b9:31:8c:1e:a7:ea:
9e:42:59:52:64:82:86:07:1d:66:62:b1:31:d4:aa:09:7b:0f:
2c:c4:4d:73:94:dc:ff:74:3f:5c:ab:6a:e6:d6:5b:de:77:17:
35:94:5e:f2:37:00:52:b8:89:fd:3b:9d:63:09:33:a8:97:c6:
f3:97:dd:8e:76:85:5a:e4:99:71:54:ee:9f:47:ce:1a:7d:6d:
47:77:36:93:51:85:68:bf:d5:25:99:bc:83:0e:e8:fa:c6:76:
a9:6d:77:57:41:8f:7b:ba:56:c8:42:c7:5b:86:6c:b8:97:aa:
39:8b:f3:81:89:2e:f3:7d:58:64:e9:1f:ac:e3:8b:42:f2:48:
4f:b9:e1:5e:7a:d9:51:4e:69:6e:68:c2:73:16:77:63:e1:98:
f3:e8:3c:b0:29:d5:0d:c2:51:de:11:cb:5d:d1:6a:fb:da:5b:
47:9e:5e:10:8b:5b:6a:26:42:94:e3:d2:04:43:3d:43:43:46:
ec:96:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:48 2025 by rpki-client