Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: ClLUW5Wvo5WrCqQmIz2DaHWhyBZw1ZqVEqifXoeQ11k=
Subject key identifier: 73:5F:D2:A4:96:2C:65:88:66:AC:76:14:40:68:1F:61:DC:5F:80:33
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 01977007A02BE641E6C208912DC8D710ACDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 0EA4
Signing time: Sat 14 Jun 2025 20:00:37 +0000
Manifest this update: Sat 14 Jun 2025 20:00:37 +0000
Manifest next update: Sun 15 Jun 2025 20:00:37 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: 13qxfkSdYzsFSqy2CiLTw5Suxn/mGt4+7hq2IoqwEFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:a0:2b:e6:41:e6:c2:08:91:2d:c8:d7:10:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Jun 14 20:00:37 2025 GMT
Not After : Jun 15 20:00:37 2025 GMT
Subject: CN=735fd2a4962c658866ac761440681f61dc5f8033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:6a:05:40:40:ec:49:7d:42:4e:f5:e8:69:
fe:96:ed:21:e5:72:e1:a8:51:6d:fa:73:d2:b7:9a:
de:1b:a5:f3:19:79:15:2d:7a:98:37:68:1b:aa:59:
19:70:7e:63:26:85:70:f7:69:0a:05:bf:5c:dc:ab:
fe:22:b8:33:3f:21:e9:82:ee:46:ee:65:46:08:37:
0b:ea:74:8c:a1:4a:ad:8b:2f:89:1e:51:b6:92:fa:
2e:87:f0:1f:5c:06:02:81:86:ac:b2:94:65:ed:3e:
36:af:95:99:ac:f6:f2:b1:49:c0:24:cb:d1:91:09:
0a:9e:b2:ee:e9:6a:40:00:cb:92:6c:af:f9:ba:cc:
00:1f:ad:f8:23:53:db:6f:fd:fa:97:f3:5d:8e:37:
37:28:f4:20:40:67:66:a0:31:09:d1:66:cf:a4:f1:
51:2a:73:1c:3e:a2:5b:4a:94:e6:db:2a:17:66:37:
a1:2d:c3:15:7f:49:f3:a6:ff:b9:be:e9:6c:7b:1c:
9b:ed:0f:cc:8b:5f:b1:e1:ad:cd:50:ab:a5:6e:8c:
53:08:0f:d5:30:a2:3c:41:4d:2f:c0:ee:be:46:62:
c3:5d:be:e5:95:e4:bc:a1:cc:ed:b2:0a:1d:28:db:
a7:04:0c:e9:63:4d:6a:2f:4a:d0:b4:b5:f8:ed:c9:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5F:D2:A4:96:2C:65:88:66:AC:76:14:40:68:1F:61:DC:5F:80:33
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:6d:f9:f5:bb:dd:33:13:45:2d:05:63:42:c0:cd:3d:9c:
f9:c4:cd:60:a1:e3:6c:4a:01:f5:3c:5a:f3:94:94:fa:b0:7e:
5a:fd:ef:42:b2:07:b3:37:c8:1e:e9:55:3f:1c:54:ca:a0:85:
45:7e:c1:7c:ec:b6:db:7b:72:7e:ab:fd:cd:c0:76:2f:71:0f:
7f:a7:7c:ce:98:77:b9:73:30:1d:97:30:b4:b2:74:ac:7a:f1:
62:c2:4f:8c:75:9a:20:cc:1c:85:72:ed:a5:42:26:c3:af:86:
04:7e:de:7e:2d:5d:42:62:b2:dd:f1:af:fb:19:0f:c6:3c:df:
a3:12:4d:59:be:f0:d7:a6:83:cc:0d:5f:a4:5f:11:65:91:57:
c0:c1:57:30:ae:f2:f9:e3:80:aa:5f:ec:9e:07:87:b3:cd:c9:
ff:99:83:91:90:2c:55:0b:3f:95:fb:cf:4a:13:64:8a:74:d5:
c3:31:cd:aa:4b:73:8b:59:43:12:50:ac:99:95:47:70:05:b4:
4b:3b:fb:4a:2e:d8:df:86:e0:74:3a:af:29:03:f1:b6:b8:47:
5a:34:9d:52:6a:5e:f1:24:2f:6c:16:68:44:42:af:7b:29:f5:
3d:a5:ba:02:a5:7f:d5:96:bb:9d:e5:7c:7c:54:5f:25:cd:58:
b9:9e:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:33 2025 by rpki-client