Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: HnTVxVRnnaePTwL8CPTJqvFZgLgSLo3mo+akTKeQ6AE=
Subject key identifier: CE:55:CA:3A:95:3F:02:BC:0F:72:D6:8A:53:48:02:2F:20:8A:33:C7
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 01976DAC0EA1972DF5B4117295A630C2C306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 09BD
Signing time: Sat 14 Jun 2025 09:01:21 +0000
Manifest this update: Sat 14 Jun 2025 09:01:21 +0000
Manifest next update: Sun 15 Jun 2025 09:01:21 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: oflWy9nJcfjZx7x8gCn52HEimwrPUuieemYyvZW7yYg=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:0e:a1:97:2d:f5:b4:11:72:95:a6:30:c2:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Jun 14 09:01:21 2025 GMT
Not After : Jun 15 09:01:21 2025 GMT
Subject: CN=ce55ca3a953f02bc0f72d68a5348022f208a33c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:5e:9b:d6:bb:ff:1c:9a:54:33:d2:98:10:
2e:05:1a:3c:77:aa:86:60:41:d3:65:08:16:9d:4b:
2d:dc:c3:11:a2:bf:a2:67:a5:e0:73:6e:b5:d2:ed:
4a:c0:3e:f9:a6:20:87:bb:de:44:3f:17:8e:37:30:
8f:6a:f0:a7:0f:2f:53:36:2c:2e:0e:41:66:0c:40:
b4:85:89:88:b2:36:ad:a8:e6:38:23:7b:5a:6a:15:
59:c1:75:de:1b:44:df:71:87:f4:12:61:87:72:6f:
54:59:e7:68:ab:0d:10:91:c7:e1:a5:85:56:11:6d:
ca:52:84:dc:ca:b8:d4:40:fc:a3:ac:8b:e2:f9:13:
e0:b6:b8:91:38:96:f1:bc:0b:56:1e:59:5e:31:91:
cd:54:89:35:81:91:38:87:d0:77:85:c4:51:64:47:
79:40:2a:c6:ab:17:dc:6b:d2:e1:02:1d:70:5f:99:
71:d6:76:c3:68:7f:bb:6a:e6:4a:e2:09:89:e8:c0:
dd:c2:42:4f:00:be:fe:6a:8c:c1:ff:8a:b3:e9:97:
d3:8d:21:43:09:78:57:1c:41:2e:15:63:66:de:c3:
e4:af:1d:dd:95:8b:60:5b:19:37:3d:b4:66:70:eb:
64:6f:8d:8c:7e:f7:67:81:66:8f:a7:c4:99:14:49:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:55:CA:3A:95:3F:02:BC:0F:72:D6:8A:53:48:02:2F:20:8A:33:C7
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:4d:00:3d:9d:a4:3e:d6:ca:4f:58:e7:4c:08:39:66:cd:
54:2b:fa:6b:97:9a:01:cd:88:dc:a1:14:56:ff:06:3f:c2:af:
49:03:6e:6d:52:04:e3:84:02:3d:28:40:7f:78:9f:f9:13:ff:
a1:d6:a6:3d:c4:7e:4d:48:46:9d:62:d6:25:46:6a:d3:50:3f:
fc:6c:f6:b7:62:61:33:9e:94:e9:43:3b:22:9e:2c:0c:fe:c9:
3e:5f:5d:05:98:e3:db:a1:3d:75:b7:90:fb:33:b9:a7:13:03:
6d:93:4d:57:6c:9f:ea:ad:0e:93:32:81:cc:8b:17:60:dc:87:
90:b3:54:d8:6d:c7:57:cb:38:42:d2:f8:19:84:f0:e4:a7:ec:
8b:ee:1d:67:13:fc:b8:5e:e9:a5:4f:0d:07:a2:d1:54:e3:ea:
8d:f6:af:bb:12:24:c6:5f:96:7e:24:b3:f9:2c:99:28:49:e9:
8a:c6:94:0a:eb:48:ec:24:d6:5a:0d:8d:43:f2:27:4c:15:91:
89:3e:5b:48:b5:7a:41:56:a5:c1:d7:8a:f9:06:09:c7:de:ea:
7c:e9:25:20:84:66:c9:e0:73:ed:c3:6d:c7:d6:f8:b6:e7:02:
ab:94:0f:98:e8:43:03:5f:39:45:71:10:b5:03:e5:a7:8b:c1:
6f:79:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:43 2025 by rpki-client