Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: kjBtyzpvgTuB987rUqHsMZ2Km0iXIpv3tJ/k7WEUjEI=
Subject key identifier: 70:6E:91:4C:1B:F2:A3:E5:1C:21:2C:8C:67:2E:49:07:C8:68:B2:A3
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 019774F737666FA376837D55F094F52C5A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 0841
Signing time: Sun 15 Jun 2025 19:00:47 +0000
Manifest this update: Sun 15 Jun 2025 19:00:47 +0000
Manifest next update: Mon 16 Jun 2025 19:00:47 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: ZnZYCt0/HxbOts/FSsOHvtDfqBCp2A2H2+A+jOZcDAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:37:66:6f:a3:76:83:7d:55:f0:94:f5:2c:5a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Jun 15 19:00:47 2025 GMT
Not After : Jun 16 19:00:47 2025 GMT
Subject: CN=706e914c1bf2a3e51c212c8c672e4907c868b2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:bd:f1:80:f7:9b:48:f1:ee:c4:e6:a1:b8:
2b:ee:ce:35:54:fd:be:25:3e:61:03:9b:ce:31:18:
1c:d4:73:de:43:5d:11:0f:bf:37:6e:86:7f:91:4a:
2c:7b:dd:77:6f:c8:72:2c:86:f1:17:86:ba:f4:6e:
bc:74:e6:45:7e:60:7c:fb:de:89:e5:1d:24:66:6a:
be:ef:56:d3:f3:ed:8d:34:24:7d:3f:77:1f:17:20:
24:2f:d7:a4:a7:f1:5d:a8:38:e8:4a:4b:58:63:e3:
ce:42:0b:ec:01:7b:ac:4b:b8:85:ce:e7:83:d4:5c:
52:1f:7f:97:41:c9:2e:d6:de:18:e8:68:73:bc:d8:
c2:bd:72:1a:aa:24:43:8b:a8:69:83:4a:05:54:2f:
fc:89:b0:71:83:3b:c0:2d:59:d2:ae:3c:08:1a:be:
93:d3:7f:3d:20:e8:97:8d:4a:28:84:e9:78:28:66:
70:c8:b5:46:d7:0c:00:25:5a:6e:fe:bb:51:4d:a1:
db:62:b3:75:47:f0:ee:dd:bd:fe:e5:f9:29:f9:d1:
4a:9a:08:c8:2c:4d:a1:a4:50:3a:73:91:55:ff:03:
76:46:e8:b9:5e:d3:6a:57:9f:12:28:b0:c1:0d:cd:
84:c7:fc:aa:11:d3:9c:e5:70:70:a5:3d:83:12:ba:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6E:91:4C:1B:F2:A3:E5:1C:21:2C:8C:67:2E:49:07:C8:68:B2:A3
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:c8:39:ea:21:de:90:80:db:91:af:f9:62:e7:fc:00:d4:
5d:97:81:1e:e2:6a:d7:8a:c8:06:a7:5e:04:ea:fc:6b:f7:ac:
8f:d7:6e:2f:77:e3:f3:80:e5:ce:78:e9:d0:4f:11:4b:4b:55:
90:8f:aa:40:0d:55:c1:4e:0e:77:45:e4:bb:e4:de:ea:dc:45:
94:ea:59:4d:2d:f8:c1:dc:40:3e:2a:28:be:97:25:b9:e7:88:
4c:f1:53:b6:d5:28:43:49:1e:5a:6c:66:54:84:ca:75:9d:16:
6f:13:96:0d:72:11:e5:1e:03:ac:4f:8e:82:cd:af:b7:1e:7a:
73:bd:ac:38:b3:e4:af:38:ef:08:1a:e3:6d:b8:19:22:54:1f:
48:99:40:61:9a:5a:88:19:3c:7a:54:72:a8:04:a2:23:25:9c:
65:11:3e:c5:cd:a0:94:4c:8b:b5:91:85:07:2c:32:5f:72:ae:
ae:fa:44:dd:71:72:0e:30:a5:0d:de:dd:7b:fd:58:39:21:d9:
93:77:f5:65:1e:0f:a0:27:ea:28:f8:56:4c:4b:b3:b0:6a:de:
3a:ad:99:02:e0:4a:5c:91:65:3b:75:96:4b:c1:64:6a:45:96:
2c:e1:d2:78:80:10:10:a4:2d:74:19:5e:51:b1:d0:fc:6c:78:
cc:9f:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:19 2025 by rpki-client