Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: LOdpkT4d0C6LS/LD7lRKMWDe76lC9pCbCJrLZHajXZA=
Subject key identifier: 84:0B:B2:81:52:AB:4F:B4:87:F9:7C:7A:12:27:D2:6B:36:D0:3B:17
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01976C2B3CC623E1734DD523E85D36FD7A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0C6F
Signing time: Sat 14 Jun 2025 02:01:02 +0000
Manifest this update: Sat 14 Jun 2025 02:01:02 +0000
Manifest next update: Sun 15 Jun 2025 02:01:02 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 2/b9Gg2hGpi+w24h0HicMDS7Nzo6cAKa850qRs0g4sU=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3c:c6:23:e1:73:4d:d5:23:e8:5d:36:fd:7a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jun 14 02:01:02 2025 GMT
Not After : Jun 15 02:01:02 2025 GMT
Subject: CN=840bb28152ab4fb487f97c7a1227d26b36d03b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:f3:5a:92:69:5d:54:0a:de:46:ca:63:54:
e0:0f:7a:49:be:49:bf:62:e7:91:33:74:de:4d:dd:
f7:fe:e1:c0:a0:da:ce:36:67:57:72:d8:b6:88:50:
fa:08:38:6f:79:ae:98:1a:19:f8:12:f7:79:c9:eb:
a8:2f:2e:8a:72:5f:c2:17:a7:47:9f:c2:4c:5a:b7:
f1:f0:1a:af:24:67:21:96:ae:3a:b8:05:fe:4d:57:
a4:d3:ad:24:58:a4:d1:65:9b:b6:f4:9c:b3:b4:53:
cc:ef:8b:71:d9:95:34:c4:d3:05:9a:41:52:ce:41:
ff:6e:6e:47:a2:c1:af:63:92:7a:54:0b:d2:5b:ba:
20:7f:72:4b:2e:8d:1a:b9:b1:fe:0a:e8:a6:ca:45:
6a:3b:c7:dc:a4:26:10:c5:c2:68:aa:7a:df:9b:52:
bf:4d:84:f4:f2:ab:58:2e:72:36:27:7d:1c:41:c5:
36:eb:de:ac:69:b6:05:09:57:68:7f:c1:0f:e9:28:
18:1c:b7:a9:20:ad:b0:ba:ec:59:d3:ac:84:e4:30:
e9:d5:c8:18:91:0d:16:e4:55:64:7c:42:3c:32:63:
ca:fe:52:d2:a8:95:9f:3c:a9:2a:5a:70:6c:7d:38:
52:30:5a:2d:dd:f3:50:de:f5:49:c9:92:d5:13:16:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:B2:81:52:AB:4F:B4:87:F9:7C:7A:12:27:D2:6B:36:D0:3B:17
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:76:b7:45:69:84:d5:1d:8c:5c:73:7e:ce:52:60:7d:08:46:
ad:a3:1d:d7:b4:25:50:42:fe:4d:76:78:7e:ca:f2:e5:9c:d9:
d9:6c:b4:52:dd:47:fc:90:5b:3b:3d:6c:a3:01:8f:a8:d6:b0:
41:94:f8:11:bd:b1:d7:8e:6c:73:08:16:62:03:ba:c6:f0:5b:
c7:6d:2a:d9:26:99:27:21:d5:45:9f:13:d1:4c:7c:a9:75:95:
df:2d:e4:3e:44:58:ec:96:39:bc:fa:7b:1c:2d:65:61:c4:e6:
48:c0:27:03:ed:2a:5a:1f:03:23:77:29:22:f9:ab:51:31:15:
72:d3:4c:28:80:fc:ad:e0:14:25:46:1d:f2:4a:ce:40:a0:65:
3d:50:5d:ea:fb:7c:7b:2d:72:e3:48:13:71:a6:4b:44:06:d8:
9d:ea:c2:76:dd:5f:38:f3:c0:78:41:02:81:b1:0e:4e:03:27:
b2:f5:63:bd:d4:cd:76:04:79:f0:53:ac:64:5d:58:fb:9a:6a:
e2:d2:31:d7:2e:8a:98:68:1e:bf:eb:2a:a8:5d:8a:01:e3:fc:
4f:84:75:26:70:b8:6e:32:a1:2e:2d:4f:0a:47:a0:b2:c8:3f:
b0:86:29:14:95:61:35:a7:75:ad:82:10:b6:f1:01:1d:16:0e:
3b:11:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:56 2025 by rpki-client