Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: UvtRYBKzcKL4+ngqOn9ozsZetv9v1p9Oy2F3YrnybDA=
Subject key identifier: AD:5B:97:D0:A7:DF:57:72:FE:23:BA:87:E0:A8:7D:BD:86:8B:62:1D
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 01976F2C6FFADDFCBBEF7BF29D6565471F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 16:01:12 +0000
Manifest this update: Sat 14 Jun 2025 16:01:12 +0000
Manifest next update: Sun 15 Jun 2025 16:01:12 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: 4yH8xYMjmjOkgQYnkdY63UBPd/89NPQudH4jhQCXhiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6f:fa:dd:fc:bb:ef:7b:f2:9d:65:65:47:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Jun 14 16:01:12 2025 GMT
Not After : Jun 15 16:01:12 2025 GMT
Subject: CN=ad5b97d0a7df5772fe23ba87e0a87dbd868b621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:a9:15:8a:08:fc:c0:cc:14:a1:d7:ef:d2:
82:b8:be:bf:6c:19:49:fa:e9:68:0c:fb:a0:6f:e7:
73:87:77:01:4d:03:ea:cc:14:08:50:3c:4d:69:ec:
81:00:9a:b0:0b:3e:a1:9e:81:74:00:6e:2c:fa:09:
ef:59:ef:c6:9d:6c:c7:b2:3b:2b:93:e7:c7:da:db:
57:52:34:b7:3c:5c:c1:b7:29:9d:7e:e3:f6:96:29:
9c:68:95:09:39:e0:fa:78:71:a8:32:2f:a6:5b:68:
b9:e9:56:d0:9d:f9:0b:61:87:b7:65:53:d1:7c:51:
63:30:b6:fe:68:b3:be:de:cf:67:7d:50:6a:47:a2:
3c:1a:0e:cd:ea:ee:ee:65:f8:3d:9c:a5:ee:4e:6f:
86:0f:c3:62:50:77:f7:00:99:fa:72:de:17:1c:4c:
e2:7c:f4:8d:10:e4:af:5a:a2:27:4a:26:50:f3:90:
00:bb:78:f8:49:7b:60:b2:30:5c:f6:cf:39:6e:1b:
46:10:cc:7e:c4:05:49:24:57:31:39:45:01:4c:68:
67:1d:55:72:2a:b8:e9:86:fe:1b:39:88:0f:1f:ae:
f0:f1:61:7d:9a:1f:a6:93:b5:99:02:80:92:16:ae:
2c:45:4c:44:59:f0:be:f8:b8:29:ce:74:2d:f7:d6:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:97:D0:A7:DF:57:72:FE:23:BA:87:E0:A8:7D:BD:86:8B:62:1D
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:d0:31:0c:19:0f:20:c2:ac:e2:de:65:e9:18:53:cb:5a:
53:3f:89:4a:0e:f2:7c:4b:5d:ba:ed:b0:2f:8b:99:62:20:90:
ab:98:9a:df:88:78:11:10:77:31:7f:0c:c9:27:36:70:81:70:
19:fb:07:65:06:20:4e:e3:2b:d1:53:c0:fd:53:b1:82:61:29:
ac:e3:68:44:0f:60:25:9c:84:8d:5a:64:d5:2d:77:0e:0b:19:
10:fe:92:b6:1e:8c:76:23:d6:bc:99:5e:43:ab:19:ef:a5:41:
89:0d:79:af:03:23:c7:55:f7:a8:58:f3:b6:cb:45:cd:fb:f7:
8f:01:86:29:2d:87:e3:d3:12:57:20:a1:e0:06:e7:52:a6:08:
83:9f:4b:b6:e6:4c:0d:ae:2b:b0:f2:ea:c7:f0:c2:57:f4:44:
9d:81:12:53:f1:04:1e:0e:be:9b:e4:f4:69:b1:69:be:c6:59:
d5:a0:fe:7f:17:80:85:e8:25:92:92:cb:84:8a:73:14:65:ce:
ad:72:22:7f:15:f1:39:85:16:c3:28:11:56:6c:4a:a3:21:9f:
fa:b1:3f:b4:e1:08:59:51:d4:17:26:49:b8:f4:57:dc:65:00:
2f:cf:ab:47:06:d2:84:d4:9f:f9:f1:e3:da:16:5a:64:d9:62:
f2:31:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:28:19 2025 by rpki-client