Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File: Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier: KHlo9GnqnMozhaxwnKFLs/mM+DcH3vRCuk0586Mm8u8=
Subject key identifier: E8:B0:81:A4:30:F5:7C:55:9F:DC:55:66:48:54:87:4D:1C:C7:FB:41
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer: /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial: 0197827C5F94E63AA2CE067A2D331D432530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number: 0C2D
Signing time: Wed 18 Jun 2025 10:01:18 +0000
Manifest this update: Wed 18 Jun 2025 10:01:18 +0000
Manifest next update: Thu 19 Jun 2025 10:01:18 +0000
Files and hashes: 1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: P453tgi5RqPSAdCBwOr0GqpqKW9QD7lDsAOwGNjndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:5f:94:e6:3a:a2:ce:06:7a:2d:33:1d:43:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Validity
Not Before: Jun 18 10:01:18 2025 GMT
Not After : Jun 19 10:01:18 2025 GMT
Subject: CN=e8b081a430f57c559fdc55664854874d1cc7fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:b2:5a:61:06:46:a0:db:ea:56:7f:45:b5:
31:05:36:c8:47:c8:45:17:3d:d9:e5:fe:e3:6d:b5:
57:fb:fb:c4:c6:1b:f2:03:34:94:f1:82:0e:64:94:
28:29:ee:49:d6:df:8d:47:73:93:ce:5c:44:61:96:
5b:71:6f:94:94:8f:b7:dd:1a:0d:03:2c:45:e9:dc:
5a:f3:c7:29:9c:3b:8d:70:ed:16:bf:1e:ad:a3:1c:
56:80:08:fa:eb:7e:a7:93:0e:50:14:30:8d:1e:73:
4d:c4:61:9f:f8:b4:23:81:ca:4d:9c:f0:4d:e7:7b:
56:27:67:94:1f:29:33:94:0f:bd:6b:5c:27:2d:7a:
41:36:71:45:8d:a4:16:80:68:cf:4d:e2:5e:88:9a:
39:5b:88:96:5c:5d:db:d4:8e:ca:5a:06:4d:d3:ff:
34:5e:de:cb:d6:12:3f:fc:04:f8:bd:8f:52:89:b0:
03:00:cf:fc:d5:42:f5:18:c9:2d:de:60:e9:34:2a:
48:91:40:9c:11:07:f2:1d:0f:e3:7b:f9:60:8e:d0:
0b:6b:86:9b:a6:5c:1b:0e:7a:d5:c6:42:c9:b8:a7:
74:f1:04:a1:f0:39:54:f0:f4:93:c5:56:19:20:a6:
9c:90:41:aa:24:6d:b1:9b:82:28:d8:1c:79:e3:5d:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:81:A4:30:F5:7C:55:9F:DC:55:66:48:54:87:4D:1C:C7:FB:41
X509v3 Authority Key Identifier:
keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:a5:99:2a:73:b4:3a:ae:67:c6:0a:e6:2d:4a:be:42:ec:
dd:99:b7:5d:44:d2:d4:2d:77:6b:53:ab:cf:3d:a8:88:ee:c8:
c8:1d:e0:97:8b:dd:94:e3:90:1d:34:bf:2c:f7:87:f0:9a:11:
47:ac:62:c6:f0:1a:2d:52:78:22:33:b9:63:03:bc:f3:49:45:
c7:f0:ef:7d:95:55:9a:86:0d:79:3b:e5:9e:2a:9c:aa:62:d6:
d3:ab:86:06:28:43:98:07:72:c6:3f:82:5a:7e:f3:c7:90:dc:
a4:39:d1:aa:47:c0:e5:5a:59:d0:6e:4e:19:21:4b:57:91:b6:
27:72:74:a7:f4:80:fb:58:b3:60:02:e1:7a:2d:d8:35:93:61:
89:e4:ef:13:83:f2:1c:f1:09:74:9d:d8:16:c0:c5:50:c0:ad:
b3:22:b1:b0:cf:26:ab:65:2b:dc:9c:47:71:67:f7:da:ae:f6:
b3:4d:8f:29:80:7e:af:e9:ef:3f:4a:34:89:44:11:46:9e:46:
a9:80:fa:b5:d4:fc:a5:c5:2b:4c:0a:9d:36:1d:88:3e:48:62:
49:f3:4a:40:4e:bc:d0:52:2c:31:0c:0f:3d:d0:93:80:47:79:
90:1f:9a:13:d1:52:7b:a6:92:32:51:86:12:df:7d:5d:14:85:
d2:a4:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:59:19 2025 by rpki-client