Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: zChXMfmHmZzZLau51d8Iydk/qwfTZH3JK0C13p0Dui8=
Subject key identifier: B3:68:11:3B:19:F9:FC:C8:5A:86:2A:2B:8B:6C:14:DE:20:5E:2C:AC
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 019795CCD53CE533D2324945F6B47C724198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 0F7E
Signing time: Sun 22 Jun 2025 04:01:58 +0000
Manifest this update: Sun 22 Jun 2025 04:01:58 +0000
Manifest next update: Mon 23 Jun 2025 04:01:58 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: K9xomWGJW+lqI1L4kEzOfqC62AQfr4a3hDrBnM8vHpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:cc:d5:3c:e5:33:d2:32:49:45:f6:b4:7c:72:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Jun 22 04:01:58 2025 GMT
Not After : Jun 23 04:01:58 2025 GMT
Subject: CN=b368113b19f9fcc85a862a2b8b6c14de205e2cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:01:9b:ad:eb:25:82:b4:39:06:d0:01:28:
3c:a4:59:74:5a:23:10:15:fa:58:f0:26:c7:2d:dc:
05:bd:12:ec:0c:f2:ab:0b:61:a9:d4:85:a6:2c:29:
ef:8c:68:64:43:d7:d9:d5:90:da:eb:6a:e7:17:8e:
9c:59:bd:78:13:1c:49:10:42:14:87:bd:3d:21:c2:
55:9e:fc:f9:17:49:a4:ae:b6:6a:a7:46:0c:f0:44:
fe:83:02:b7:a8:71:a1:36:bb:5f:21:dc:92:7e:e7:
2f:49:63:a3:b8:9f:40:49:82:09:9a:8e:aa:33:7b:
31:20:b5:d5:43:0e:f2:35:ef:50:9a:2e:80:1e:7f:
34:19:f2:34:dd:fe:be:a0:3e:28:cd:a2:22:fe:38:
73:c4:95:83:a0:70:c6:27:0d:a4:dd:05:18:93:4e:
c5:bd:8b:95:bb:99:5b:e7:bf:c2:a1:22:b5:b9:b4:
b3:3c:48:6b:ba:90:9f:fc:16:e7:9e:86:89:04:7b:
78:2d:81:55:30:be:13:d7:0b:2d:a9:1a:f6:cf:ec:
ea:45:64:26:61:8b:73:72:64:46:82:db:17:d5:e1:
44:be:0f:a6:39:4a:2b:16:f8:52:78:d4:56:c8:3c:
1b:db:a3:f7:86:08:ae:43:16:39:6b:48:b1:d7:97:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:11:3B:19:F9:FC:C8:5A:86:2A:2B:8B:6C:14:DE:20:5E:2C:AC
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:c4:e3:9e:0f:7b:a0:25:7b:f2:ba:8d:b4:be:31:5d:f7:
f4:a9:96:85:8c:8a:f5:19:8d:de:35:ef:bc:9e:3c:01:e1:be:
cd:48:02:48:39:c2:89:45:75:93:bd:65:f8:c3:1d:2e:52:d3:
e8:5a:88:3e:e8:d7:0a:b7:d9:da:c0:53:9c:47:55:1d:1e:2f:
c5:f2:6b:5e:54:ec:da:bb:f5:a3:f8:be:78:50:16:94:da:45:
35:50:68:65:1b:17:be:dd:17:bf:a1:d4:66:84:4d:06:60:24:
c0:75:f4:d3:1e:58:90:73:21:36:aa:89:b8:d2:a3:f9:ec:eb:
0b:dc:42:29:35:4f:b7:a6:bd:fa:1c:0f:18:14:7b:3b:b0:cd:
a4:21:7f:90:b9:bb:53:ef:9d:05:44:66:e7:6c:d8:9e:4f:75:
8e:1c:50:7e:ab:67:b3:e6:7a:b5:c9:16:de:26:d7:a4:2f:67:
2a:43:09:2f:1b:c2:57:c5:cd:a6:2c:f8:8c:eb:94:a3:9a:30:
7d:db:aa:b9:61:87:9d:a1:fa:20:41:4a:22:96:ad:78:20:eb:
d0:ec:fb:1b:e2:3b:ff:03:29:0e:f4:71:f8:93:bc:25:5f:88:
4e:1c:02:df:1a:3d:a2:6e:c2:b5:10:7c:38:70:a8:9e:78:28:
86:ea:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:18:47 2025 by rpki-client