Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File: nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier: P5OByOGpJ3l3N0U0y5FOgQn5ZDt8FTFZmHta4aOCICw=
Subject key identifier: 3C:66:33:57:03:E0:1F:29:D8:7E:C6:87:DA:98:69:AC:DF:6C:74:4E
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 01976F99A1622EE1575B308104BF2C711D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number: 0C61
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: n17VKFaIbeVaCBjElXMYoXjtl7Rx3vHCecarvVW9cOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a1:62:2e:e1:57:5b:30:81:04:bf:2c:71:1d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=3c66335703e01f29d87ec687da9869acdf6c744e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:24:4a:11:c8:c0:6b:8d:51:50:a7:eb:30:
00:5b:af:eb:e1:fa:4d:8b:94:c9:0b:c1:56:6d:10:
d5:e8:10:25:d3:ae:24:4b:d3:de:bb:72:fc:77:b6:
61:d1:0e:00:ff:4c:4a:87:7f:6f:db:2d:20:ba:54:
b6:e1:c8:ee:35:a9:24:f4:86:de:08:50:fd:0b:61:
01:54:81:e1:df:dc:84:17:a3:5a:2d:0c:46:52:82:
c7:ab:52:5c:b0:d5:e7:dd:1c:85:38:7b:07:e2:7e:
dc:87:28:2a:03:9c:61:19:7c:44:46:f5:76:7c:c6:
72:d0:b2:d0:57:e3:4a:91:71:5f:aa:99:a0:53:91:
08:03:f2:70:d4:4d:53:bc:ec:04:57:01:0e:d4:87:
62:23:ac:1f:d1:40:74:15:67:14:a6:01:b6:36:b1:
18:3a:8a:c2:1f:f7:ae:dc:73:23:c8:94:3a:13:1f:
51:99:36:d5:35:de:6b:0c:b3:06:3b:8d:70:8c:e4:
61:26:43:4e:fc:1b:28:fb:6c:e7:91:42:eb:a6:3d:
10:64:22:9e:18:25:f2:7a:c4:3e:a1:ee:49:81:a5:
86:a9:06:39:36:09:4f:fb:11:c2:96:f9:fe:86:73:
b8:a9:0d:e7:83:ad:a0:b9:c7:67:5d:47:b8:19:f4:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:33:57:03:E0:1F:29:D8:7E:C6:87:DA:98:69:AC:DF:6C:74:4E
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:2b:b8:c3:e6:2a:16:f0:72:55:f9:8e:28:c0:2d:99:4c:
29:15:38:c4:1b:41:d4:b6:41:cd:7a:7b:31:c7:4e:44:0c:56:
46:66:3e:a4:af:50:6d:da:6b:e3:2d:8c:d2:59:57:ef:7e:c9:
42:47:32:d5:eb:66:60:16:0f:e2:6c:ba:eb:55:7b:21:2c:06:
10:ec:64:c5:9e:56:ee:9f:4c:da:d0:62:d4:96:0d:ca:8b:44:
bb:d7:06:28:fc:b4:16:09:c8:0e:1c:0d:f3:e9:3d:7b:88:cd:
4c:e4:7a:0d:1f:2f:c4:34:eb:38:20:5a:0d:6a:0f:29:08:84:
26:87:bf:4d:9f:c1:e8:f5:46:d5:53:4a:73:42:06:17:d6:50:
f9:90:fd:28:32:89:f7:ea:79:ca:b5:23:61:51:e2:f3:bf:03:
d4:59:ac:18:a4:3f:e7:5a:66:bd:af:b9:24:fe:ec:e9:01:0f:
e2:79:9d:93:3b:2a:57:96:3d:d5:ce:3e:bb:79:ce:05:4c:aa:
f0:d4:09:c7:45:a3:cb:9d:d6:61:c7:09:51:25:b4:a6:ae:f1:
53:b5:b0:5c:d4:ea:50:03:f6:6c:b8:f9:e3:40:63:b9:f2:b0:
98:ca:6e:62:f0:6f:d3:d9:ed:2e:5e:ee:df:29:b0:21:78:c2:
56:97:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:55 2025 by rpki-client