Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File: NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier: WYwIA481C3oLyUJLkoNvLZVzoWto1xIzjbdDU8BCGlQ=
Subject key identifier: 61:54:F2:C3:36:A1:AA:95:EA:3B:77:CC:88:CE:42:55:E3:74:E9:D6
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer: /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial: 01976D3D8093932A75987F203CF0B9E63488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number: 0C86
Signing time: Sat 14 Jun 2025 07:00:36 +0000
Manifest this update: Sat 14 Jun 2025 07:00:36 +0000
Manifest next update: Sun 15 Jun 2025 07:00:36 +0000
Files and hashes: 1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: LQN2wPOta0h6vk8AKETyx7hr/CKn5/4QXPXLheKKOBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:80:93:93:2a:75:98:7f:20:3c:f0:b9:e6:34:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Validity
Not Before: Jun 14 07:00:36 2025 GMT
Not After : Jun 15 07:00:36 2025 GMT
Subject: CN=6154f2c336a1aa95ea3b77cc88ce4255e374e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:0b:9e:ea:37:db:82:d8:23:22:40:35:79:
19:37:0f:da:ce:7c:56:0b:5a:30:bb:2f:8d:4b:07:
60:68:97:d9:73:2b:15:b2:e4:5b:b7:66:f5:39:d9:
71:0d:74:fb:61:87:ea:e2:cc:ff:7b:3d:29:67:7a:
27:24:87:37:6b:67:20:29:67:50:08:d3:22:d2:ac:
71:cf:89:52:70:19:53:c1:5b:32:55:a0:69:af:30:
fb:38:3c:fe:0d:1b:81:24:6d:83:6f:ae:0c:2d:11:
57:6c:2e:69:31:a4:5a:9a:25:51:b6:c5:47:ad:49:
4b:d8:5a:f1:2c:c9:61:97:57:08:1b:71:90:0e:e7:
4e:0c:42:78:37:af:fc:1e:b5:65:3a:9d:0e:4b:c3:
19:13:ad:ac:02:6a:90:8b:ee:5e:8a:fd:16:6c:50:
56:b1:87:2d:9b:3d:f2:63:86:39:c5:f3:01:f7:5b:
90:43:9f:82:d4:0d:2f:76:d0:bb:1f:0b:02:8c:8f:
95:45:d0:ea:43:19:87:e3:1e:c8:46:56:9d:85:af:
4f:ea:1e:88:7a:f4:89:4f:cf:6e:c0:ee:24:26:96:
82:43:5d:06:de:63:50:fc:a1:d4:43:27:80:ad:85:
1d:3f:30:75:75:e9:f7:84:18:e5:cb:e7:57:fe:2d:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:F2:C3:36:A1:AA:95:EA:3B:77:CC:88:CE:42:55:E3:74:E9:D6
X509v3 Authority Key Identifier:
keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:9c:fa:06:05:78:52:d6:6a:89:56:7f:c3:89:24:97:37:
32:8f:c3:00:ae:32:d0:0c:3b:9d:87:41:1b:29:9d:21:05:a8:
1f:88:34:20:18:3b:9b:94:2f:4b:67:8f:b5:2a:de:4c:53:f1:
28:87:97:e8:10:b6:2b:3d:3e:4d:d7:7d:d2:15:08:59:53:2f:
82:ae:10:dd:a2:d3:f5:e4:70:48:f7:24:48:26:8a:a1:4d:a5:
c1:f5:3b:69:8e:43:50:93:20:15:19:62:d8:68:1c:03:71:dd:
e5:33:fc:01:63:26:f1:72:cb:5f:d2:88:ff:fb:a5:c5:bc:98:
e0:8a:2b:86:a3:29:41:cc:64:b8:21:08:3b:fa:9c:5c:36:9b:
a2:35:67:7f:85:7d:6f:fa:f5:b5:3f:4d:e3:d8:4f:77:ea:d6:
41:81:96:4a:30:b2:e6:1b:5b:40:f3:cd:1d:0f:1c:7d:ff:1f:
49:79:53:c0:ce:f0:34:8e:d9:41:ec:05:e9:69:d1:0d:9b:10:
2e:f4:12:29:6e:aa:e8:33:f3:ec:3e:02:81:a7:db:8b:76:5d:
e7:2c:bb:c6:46:59:d9:db:82:f6:04:ae:9d:d9:30:9a:87:ca:
aa:05:cd:0a:fb:1c:cd:a6:44:7f:c0:30:e6:45:da:0a:a9:72:
5d:13:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:11 2025 by rpki-client