Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: 6JzUOAaswd0FVIhhrNBaFQY+nD1cFcDADjB9Cec+C1s=
Subject key identifier: DE:B6:32:36:01:A6:FD:03:D4:CF:89:4A:6D:D7:4E:EF:15:DA:4F:27
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 019769608D2F9FFFFC2F9AD9E02D5DFB0EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 151D
Signing time: Fri 13 Jun 2025 13:00:24 +0000
Manifest this update: Fri 13 Jun 2025 13:00:24 +0000
Manifest next update: Sat 14 Jun 2025 13:00:24 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: UtAnTPWHmnv5odvJ6ud8zZXD6NTlD7Z4MoHdDFO9qzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8d:2f:9f:ff:fc:2f:9a:d9:e0:2d:5d:fb:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Jun 13 13:00:24 2025 GMT
Not After : Jun 14 13:00:24 2025 GMT
Subject: CN=deb6323601a6fd03d4cf894a6dd74eef15da4f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:d0:6d:2e:0a:17:4c:be:9e:99:48:cc:42:
e9:e6:66:00:3b:46:a0:03:d8:56:df:f6:46:2f:43:
5c:59:14:c4:cd:8f:35:85:10:9c:ee:8b:ed:75:eb:
ee:41:10:7f:46:af:47:6a:da:27:78:c8:7a:30:cc:
9a:da:c6:e6:b3:ba:c6:d6:b0:59:1c:5b:29:4e:ff:
63:cf:5d:31:af:0d:ce:74:1b:ba:a4:f7:d6:3f:fc:
ba:cb:4a:ce:0b:5d:48:14:7d:54:7a:e0:a7:03:b0:
bd:64:2a:a2:6e:ff:8e:24:67:42:6e:40:70:05:3b:
50:4c:20:43:07:47:08:80:58:ca:8a:f0:c1:a8:76:
4d:0e:6c:6a:89:3a:cf:26:a7:6d:09:ef:db:89:b1:
b7:b8:22:a8:f6:05:3e:e7:51:73:e3:c3:c6:4f:8e:
75:d2:44:ae:e2:5e:a9:03:06:de:aa:4b:8e:b2:cd:
31:8e:05:13:b5:20:3c:69:8b:8f:c2:2a:4d:ee:45:
e4:49:22:74:22:ec:f8:9f:2a:66:b3:e3:1c:bb:cd:
05:f5:57:12:4f:72:f5:57:b4:4c:92:1b:45:37:dd:
6d:16:39:28:59:10:61:24:62:b9:13:eb:e3:bf:95:
43:5a:bb:7b:db:59:77:ae:bf:e0:7f:51:6f:05:37:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:32:36:01:A6:FD:03:D4:CF:89:4A:6D:D7:4E:EF:15:DA:4F:27
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c5:22:9a:ce:ae:b1:d3:eb:3e:b0:c3:38:1a:b7:40:4d:22:
37:44:22:f3:4c:f8:ee:01:6c:1e:e5:fb:66:7a:d0:d2:03:e6:
d6:bd:9a:86:ed:21:cf:ed:f5:4a:88:0f:e4:96:c8:3c:e0:a2:
d8:7d:e1:81:87:52:55:8f:c4:3c:02:19:dc:1a:7f:b9:67:9d:
55:a4:22:a3:2c:dd:a5:0a:ad:39:cd:bd:8b:6f:c7:ee:40:86:
56:ff:ff:45:19:09:ea:a5:43:a4:7c:ce:f6:cd:3d:1d:f9:6d:
20:af:aa:b9:67:0c:ee:94:88:e3:aa:22:db:f8:14:4b:f5:03:
07:84:9a:5b:44:79:9e:d1:60:77:d1:22:d5:6b:84:c6:f4:9a:
f6:89:05:55:f8:11:1a:ea:27:37:31:64:2a:11:dd:49:e7:ff:
e9:c8:e8:17:17:11:fe:e0:5d:fe:93:d7:76:9e:a8:78:b8:02:
a7:85:19:b0:4d:a4:d2:75:31:68:a6:a0:ab:70:e7:6d:1d:f7:
f9:39:6e:e4:aa:cb:48:ec:b6:07:85:d9:33:f7:fd:ca:b2:ff:
5a:66:a5:a4:22:f1:b8:22:18:80:6e:62:24:72:d2:61:a1:58:
79:e0:39:29:69:03:2d:bf:56:0c:86:d1:2f:f0:0d:b3:7f:93:
c0:47:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:13 2025 by rpki-client