Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: 5NQEYXvLApW7FO9eANPR+4EW9FqpaBEov6YKeHXzp+g=
Subject key identifier: E3:6D:E1:44:1A:B7:D3:9F:D3:7D:82:FF:97:58:1B:ED:19:93:6B:91
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 01976D3E519894C5048BE678C4ABC8C6B379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:30 +0000
Manifest this update: Sat 14 Jun 2025 07:01:30 +0000
Manifest next update: Sun 15 Jun 2025 07:01:30 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: 9MxseDGo2uNFIJb/A4OTNRFR2mLGYrLvzayhQytzSz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:51:98:94:c5:04:8b:e6:78:c4:ab:c8:c6:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Jun 14 07:01:30 2025 GMT
Not After : Jun 15 07:01:30 2025 GMT
Subject: CN=e36de1441ab7d39fd37d82ff97581bed19936b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:75:5f:44:5e:40:41:ef:a2:2a:03:f0:ed:
96:a2:b2:0f:63:e0:5b:d5:60:7b:be:33:f6:30:8e:
9a:35:58:ac:91:31:26:c2:3a:ec:bc:f3:6e:8a:87:
47:2d:29:33:4c:76:43:24:e8:6e:d6:18:02:86:88:
aa:40:88:c8:2b:2c:58:b1:f4:a0:79:72:e0:e2:95:
f6:ae:28:9e:0d:6d:3a:a1:31:6d:21:a3:13:fe:c2:
29:75:cf:c7:73:02:ec:65:43:0a:98:c8:38:df:79:
7c:2a:c0:92:ef:ae:72:af:0d:0b:da:37:7c:f2:f8:
5f:f6:2e:6b:30:02:d7:36:55:ee:5b:70:6a:fe:8e:
f2:5c:ab:09:c0:87:86:31:d9:36:1a:f4:63:e8:98:
c5:44:16:72:f8:27:22:dc:05:4a:6a:6c:06:cc:7c:
1f:27:26:55:b5:f0:e7:19:75:5d:7d:d2:c2:74:a1:
fd:4f:59:03:31:34:1e:42:d9:c5:a1:7a:07:18:b7:
47:28:07:5d:e1:6c:5c:fc:27:21:2b:9b:65:96:52:
3e:e8:e6:cd:39:35:1c:f4:86:3b:9e:09:e8:ee:04:
49:26:bd:a0:9e:bf:65:61:a3:14:e3:2c:ce:5b:04:
6f:e8:7a:ea:48:8e:5e:a9:ee:17:36:09:b4:da:64:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:E1:44:1A:B7:D3:9F:D3:7D:82:FF:97:58:1B:ED:19:93:6B:91
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:8b:37:0a:f5:30:bd:c9:3f:b7:94:99:d4:4b:25:6d:e8:
ac:f5:08:4b:29:98:fe:52:75:6f:d4:53:87:ec:0f:16:93:81:
86:90:47:ac:69:18:89:d9:06:8c:8e:f0:36:9d:03:6d:38:11:
d2:e2:9b:3e:be:51:ec:44:1a:fb:06:a4:73:d9:68:ac:5c:45:
37:32:95:39:ec:eb:b4:b3:3a:a8:e7:f7:0e:6c:5f:a1:cb:de:
db:73:3b:9e:7a:08:38:14:6c:a1:fe:28:74:f4:41:aa:11:de:
1c:1b:d0:cd:6d:33:6d:9e:ce:07:7a:e2:2e:a0:c2:c3:0c:66:
6c:0e:ca:41:a5:55:75:19:af:d8:1d:58:bd:25:73:f6:63:55:
1c:5a:97:68:d3:34:5c:92:6b:3c:d5:53:60:18:80:73:2c:05:
2f:b5:63:f3:66:36:a1:6a:67:2a:22:db:03:a5:a1:07:7e:bd:
22:29:85:0a:6b:22:4b:f2:d1:21:0c:26:f3:2e:fe:8f:e5:bc:
c3:ae:b9:8d:ea:e2:77:e9:a5:42:07:1b:40:4e:1d:60:64:7a:
e4:2a:e9:1a:d9:0d:18:cf:1a:58:16:49:31:e1:c8:27:55:a7:
26:b9:88:22:75:fe:a4:0c:b5:cd:2d:ee:e3:d0:83:61:a5:30:
9c:e9:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:17 2025 by rpki-client