Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: Qcjs80fdbIonsHp8CUY77/S/aEkZg+CPaA3VxWK+yEA=
Subject key identifier: 1B:9B:4F:7B:BD:8B:73:83:CA:4B:22:66:82:99:B1:FA:9D:2B:BC:97
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 0197711AD8D6A1D5F1B0FE265DE9000B1AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:01:14 +0000
Manifest this update: Sun 15 Jun 2025 01:01:14 +0000
Manifest next update: Mon 16 Jun 2025 01:01:14 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: 2SY0bOe9m7eFW7Z2CtIXXO507dzJehR92qObOimt5T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:d8:d6:a1:d5:f1:b0:fe:26:5d:e9:00:0b:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Jun 15 01:01:14 2025 GMT
Not After : Jun 16 01:01:14 2025 GMT
Subject: CN=1b9b4f7bbd8b7383ca4b22668299b1fa9d2bbc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:bf:bd:21:18:7f:27:72:1a:84:e4:9e:90:
95:24:71:41:5e:54:1d:0b:ba:6c:6a:bb:9d:23:73:
5f:a1:73:26:d4:c7:41:3b:34:71:f2:87:48:84:b2:
a5:99:d0:7f:97:66:d3:c9:59:a7:0e:b4:38:2a:d9:
c2:3d:0c:9f:40:92:01:9d:fd:3e:f5:cf:60:78:f0:
f4:3e:8b:d8:8e:e7:de:d9:3a:ed:14:e1:51:52:1e:
a0:7a:31:36:4b:ac:e4:e7:07:78:79:f2:31:5a:a3:
dc:ef:67:83:77:30:0c:64:f7:37:f1:b5:fc:7f:51:
a6:9e:7f:e3:9f:14:df:b0:fd:f2:39:26:33:16:14:
b8:60:3c:e1:28:ae:d3:1e:a9:5c:68:97:e7:0b:8f:
cb:47:ad:44:52:71:ab:9f:0f:11:f9:93:42:c4:e1:
37:e9:4a:c1:6a:f7:52:6f:8b:9d:9b:16:e2:a5:d5:
2f:41:6b:00:a3:08:3e:b4:a9:9e:63:4c:9b:83:d7:
eb:c2:c2:e8:27:1a:ca:92:a2:f1:8a:23:74:91:ce:
79:c8:33:1e:f2:a6:8f:af:90:0b:2e:ae:c4:10:b2:
17:03:81:49:c4:be:c7:63:42:63:88:b9:8f:8d:24:
20:30:bd:81:7f:b1:ae:cc:36:29:17:7e:82:18:6b:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:4F:7B:BD:8B:73:83:CA:4B:22:66:82:99:B1:FA:9D:2B:BC:97
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:36:6f:ec:6b:7f:3d:16:3c:9f:52:a6:70:70:f1:4b:74:
e7:fc:fe:af:a7:1f:28:25:fd:a1:c3:7f:ef:88:b4:a1:45:cf:
02:e6:71:71:a9:15:24:70:ca:38:74:6e:76:32:bc:9b:cb:21:
a8:04:e9:99:df:c9:c3:3f:1e:f3:4e:cc:e4:81:4c:55:02:5a:
86:06:98:41:5a:cf:e1:12:eb:8e:f7:6e:74:dc:ab:b4:5e:bd:
55:ce:4a:f7:83:3e:25:4a:d9:8d:a3:fc:3b:1c:fe:8e:e4:c5:
f5:aa:f1:32:23:b4:14:53:28:3b:0f:68:eb:95:61:d6:12:64:
bb:47:1b:75:24:7d:61:35:b0:cc:c3:90:74:cd:f8:10:2b:15:
63:6a:bc:7e:7e:12:21:36:50:27:37:69:91:1c:fc:a6:9c:10:
c6:b5:89:be:c4:37:ef:1e:b1:2e:e5:ef:30:3a:48:c7:7b:09:
fd:13:fc:24:a1:04:ba:76:fc:23:69:71:67:73:a2:a5:6c:87:
c6:41:00:50:e2:8d:7d:36:e8:ed:b3:0b:06:6b:da:57:1e:8d:
ca:b7:75:8b:ad:25:4e:9f:6b:21:a7:9f:f4:5e:22:8f:20:74:
28:87:94:9b:f4:4c:3b:99:f6:a4:49:47:66:83:49:00:3d:c8:
71:64:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:31 2025 by rpki-client