Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier: n8Mlv4dXK7b8zBoVwOJaVs6szGPQ02afbWTGHDVl7RI=
Subject key identifier: 50:23:F5:D4:48:7C:6E:5B:4A:0B:02:56:94:67:12:CB:5E:BE:24:80
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial: 01976DE2520392C76367325E9C2F28D3F6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number: 041C
Signing time: Sat 14 Jun 2025 10:00:38 +0000
Manifest this update: Sat 14 Jun 2025 10:00:38 +0000
Manifest next update: Sun 15 Jun 2025 10:00:38 +0000
Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: OwpFNvu2KbIgMqWEVfRpGUFP5aoAe2FRm86NweNxw9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:52:03:92:c7:63:67:32:5e:9c:2f:28:d3:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Validity
Not Before: Jun 14 10:00:38 2025 GMT
Not After : Jun 15 10:00:38 2025 GMT
Subject: CN=5023f5d4487c6e5b4a0b0256946712cb5ebe2480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:02:bb:76:f5:d5:5a:87:44:2d:27:f8:0b:
7d:9f:3d:bf:57:3d:e1:dd:74:17:7f:77:af:27:d2:
a3:f7:42:22:72:5f:a1:fc:e9:86:5d:7d:a5:82:53:
fe:ec:fa:57:93:28:cb:45:05:38:86:27:24:c9:0b:
88:7a:7b:a1:d1:3c:50:e0:c8:06:0a:42:8c:97:f5:
94:af:93:49:87:5b:da:18:de:f1:a3:bb:0c:51:97:
93:e6:57:6f:b6:80:93:ac:7c:bd:44:dd:b6:f9:8e:
f3:40:e1:16:00:c5:c2:32:ed:a7:b7:96:77:9a:aa:
d1:c0:20:3e:a9:53:d6:e4:51:a2:67:b0:f6:9e:59:
f2:51:bc:19:9b:06:bf:b8:c8:ee:b9:cf:c3:f1:78:
34:2a:28:4a:69:dc:23:c6:ba:00:7a:49:3b:d8:aa:
f6:cf:19:4e:f8:ca:3b:5d:51:ea:38:84:84:f3:6e:
1c:23:c1:0c:c9:36:e9:43:01:ed:71:cc:86:0e:08:
60:6c:d3:c3:6a:7d:ff:7c:4e:33:e5:56:6c:1a:02:
d4:a3:5e:24:a9:14:31:ee:59:56:2f:a6:58:2d:1e:
67:2b:1d:e6:8b:48:85:c9:ab:79:90:9c:ab:83:0a:
8a:3c:0f:15:f6:08:74:d2:05:17:ea:34:20:82:96:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:F5:D4:48:7C:6E:5B:4A:0B:02:56:94:67:12:CB:5E:BE:24:80
X509v3 Authority Key Identifier:
keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:46:4d:20:25:7d:c0:17:8c:7e:2b:8b:54:e0:2e:69:4c:
fc:59:2e:bf:04:5d:52:05:45:f7:9e:13:c8:29:ac:af:87:4d:
a1:74:5b:8e:d3:0a:1e:aa:96:52:3f:7b:6b:c2:8f:21:c5:85:
68:51:22:3b:3a:05:ec:b4:a1:79:c0:a3:e2:a4:db:fb:96:c8:
92:34:7a:78:64:c4:37:0c:9b:65:ae:4f:65:16:8e:89:56:a7:
f3:99:d2:31:39:0b:d9:31:f8:0f:e5:9c:7b:28:bb:23:e9:f5:
2d:17:a9:0f:ae:1e:9c:af:10:5a:ac:4e:63:78:e0:f8:f6:98:
27:10:23:1b:6b:79:3c:ac:96:dd:8b:3a:bf:6a:99:c3:c6:c9:
a0:a6:28:75:70:9e:d6:cc:03:8b:a6:91:69:a8:de:4d:29:91:
8f:d5:c3:6b:7b:ed:46:74:4f:1b:69:c3:c9:25:1a:61:7f:bc:
fe:5f:a8:41:25:96:25:21:c4:22:ce:30:b6:67:9f:92:98:f4:
58:93:c9:93:6a:ba:2b:9f:79:91:26:38:34:48:6e:a3:a9:d1:
f1:45:26:58:c6:22:dd:e0:ca:46:34:fb:27:e8:5f:c0:f5:58:
21:e9:23:dd:db:25:38:1d:89:f6:48:7a:db:3e:fb:f9:8a:e4:
80:2f:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:24:38 2025 by rpki-client