Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: bgl4EqwCLtpsXrlQheII79wKkhlpBh0JqvJVGRcfHDQ=
Subject key identifier: A4:85:5C:CE:4C:DB:FA:A3:CA:50:95:67:CA:78:DF:3D:23:0E:6F:9D
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 01977A1D5AAC6587055EB421578E5F37F2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0FE0
Signing time: Mon 16 Jun 2025 19:00:33 +0000
Manifest this update: Mon 16 Jun 2025 19:00:33 +0000
Manifest next update: Tue 17 Jun 2025 19:00:33 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: t0Xh6BdhcW/d8yenMU+75EYdXFP7cbYpFAGR0oucfmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:5a:ac:65:87:05:5e:b4:21:57:8e:5f:37:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Jun 16 19:00:33 2025 GMT
Not After : Jun 17 19:00:33 2025 GMT
Subject: CN=a4855cce4cdbfaa3ca509567ca78df3d230e6f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:27:a5:47:f7:97:69:aa:76:f2:d0:9e:c6:
76:57:ec:3f:05:04:5f:70:3e:c5:00:f0:2b:17:98:
13:d1:f3:db:c1:d3:67:7c:14:41:d1:4d:5d:4d:75:
96:d5:d3:43:b6:05:a5:a5:ee:71:78:ed:53:cc:49:
93:00:78:46:3a:b7:e4:22:4f:c3:2b:f6:7b:29:d8:
69:63:44:c5:27:88:38:21:37:5b:d4:d4:0c:40:80:
6b:76:6f:22:36:af:7e:cc:91:62:93:49:5a:99:5e:
ce:86:64:6f:98:07:36:c7:8d:6c:89:c0:66:4d:b8:
e5:88:90:80:d2:d3:38:3d:9e:99:b1:e1:69:1b:f9:
c2:56:56:e5:37:f4:a8:81:52:31:a9:24:c1:23:4c:
86:a4:ff:bd:8a:cb:ac:62:27:e6:63:bc:d3:fc:e3:
36:9e:f5:62:80:f6:18:f9:b8:57:fa:65:ea:9e:f2:
b2:5b:b6:f3:78:86:d1:0f:44:c6:b3:7d:6e:9f:0f:
97:cf:cf:cb:dd:c3:2c:e8:af:06:e2:4a:bc:a7:58:
de:65:a9:69:32:cd:65:da:2a:04:1a:df:29:c9:06:
d9:f5:a2:2c:3a:7f:74:52:c3:2c:e7:49:10:0b:9c:
be:0e:ee:fc:9d:ac:90:70:3b:18:17:ec:40:c5:ca:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:5C:CE:4C:DB:FA:A3:CA:50:95:67:CA:78:DF:3D:23:0E:6F:9D
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:75:0e:22:31:46:fb:3a:f0:b4:f0:0b:5e:de:ed:72:e9:86:
2c:e5:08:ce:48:59:14:33:4a:2b:a7:e9:1d:93:df:7f:95:3f:
5c:9c:e3:39:d7:95:ef:c9:42:d8:f1:96:bc:5b:1a:72:a5:71:
95:75:20:94:86:f5:a7:c3:3c:24:1b:20:f9:c7:ee:3c:aa:3f:
0e:3a:f7:01:ff:34:61:ca:fe:c4:b8:a4:4b:e3:3f:70:6f:8a:
c7:40:c6:71:d9:9f:3e:be:1a:32:81:4d:7b:a2:fd:e0:3d:17:
c9:40:0c:93:35:2d:c2:ce:95:f5:0c:c3:28:b8:1c:8a:cd:b9:
3f:75:fe:0c:94:42:06:c7:27:46:1c:2b:98:79:b6:63:35:15:
fa:2f:3d:02:e8:d0:d3:71:94:78:f3:19:4c:77:f0:ab:ef:23:
1f:ad:29:10:ed:dc:bb:f7:93:ca:d9:2b:53:d1:cd:7d:d4:7d:
68:23:e3:5a:39:aa:9a:64:96:fb:2b:29:f4:27:b3:35:8c:35:
49:7d:b2:8d:7d:3e:82:9f:9c:6f:16:83:57:dd:dd:28:35:f1:
df:10:f3:92:86:0f:d7:1c:df:c0:ae:c8:c8:57:4c:30:ca:31:
ad:71:52:af:ab:01:e3:b6:7e:64:fc:bd:e7:b1:36:65:15:6c:
77:1b:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:17:13 2025 by rpki-client