Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: rEfuhm1C5kvgw5sZvVDSN7l1WEsErynGIZ8JV5TgPWM=
Subject key identifier: 5E:3F:0C:B6:DF:E1:12:26:F5:A9:EC:9E:78:81:77:D5:CE:8F:39:B4
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019771BF56C476E6C6E8CE4D9943DBE2E9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: F0
Signing time: Sun 15 Jun 2025 04:00:54 +0000
Manifest this update: Sun 15 Jun 2025 04:00:54 +0000
Manifest next update: Mon 16 Jun 2025 04:00:54 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: dyrMfWx9CzJfCljxxDQRnvMWw3HLYwnhS/53JtNfstE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:56:c4:76:e6:c6:e8:ce:4d:99:43:db:e2:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Jun 15 04:00:54 2025 GMT
Not After : Jun 16 04:00:54 2025 GMT
Subject: CN=5e3f0cb6dfe11226f5a9ec9e788177d5ce8f39b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:10:0f:e7:fe:7a:68:98:5c:5c:aa:5a:19:
a4:4f:dc:56:24:56:46:0d:59:17:a7:41:35:b4:52:
15:b9:65:44:0a:40:53:b5:1f:99:1c:f6:39:0c:2e:
b8:13:4c:18:3f:96:b3:d6:96:b3:1a:52:b2:34:c1:
f4:3c:5f:dd:7b:77:60:60:16:a3:1e:d7:ac:d1:e2:
de:8a:61:f9:17:22:b8:b4:d4:73:54:0e:c8:e7:dd:
29:fa:5c:4b:ef:dd:59:34:57:47:e7:32:75:59:e1:
68:05:6e:66:e5:d3:22:62:52:ee:f8:d1:46:c9:8e:
07:b0:9e:d7:45:25:15:10:a2:59:9a:33:3f:ac:80:
c6:11:6a:00:6e:90:3c:9d:62:3b:dd:96:80:dc:9a:
84:db:7e:70:95:6b:88:ce:b7:32:4d:57:ba:fb:25:
fa:88:06:3e:47:76:ba:49:dd:18:12:43:67:63:07:
60:bf:51:74:db:83:fb:74:63:10:4c:c0:46:a2:b5:
d5:4b:0c:19:4d:0b:f2:ce:42:49:c0:b1:b8:34:71:
0d:8f:04:19:e2:cd:49:8a:a3:2d:7a:40:d2:c3:54:
00:0c:d9:dd:47:e4:87:a7:24:87:a2:86:db:95:42:
9e:2d:64:0a:e2:48:c0:29:d6:d5:51:15:2f:08:6b:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:0C:B6:DF:E1:12:26:F5:A9:EC:9E:78:81:77:D5:CE:8F:39:B4
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:6d:57:29:fc:a8:5a:b3:e0:f1:1a:b4:40:09:63:f8:88:
f8:4e:0f:29:5f:23:db:e2:5d:eb:f0:65:39:7f:16:77:19:97:
e7:0d:b8:ae:1e:9e:6f:43:46:9a:90:64:5b:1a:a9:60:0c:bc:
05:cf:a8:49:c5:34:7c:24:42:f1:b1:c4:d2:da:b6:ac:79:f6:
80:da:9e:0b:51:df:26:84:91:7d:c6:44:e8:72:00:86:22:95:
f6:a7:41:fe:c7:01:fb:b4:e8:d7:f0:d6:f1:5c:78:ba:64:d8:
d8:3a:6f:4b:4c:9d:3c:96:a9:71:b1:dd:4c:4c:1c:82:71:78:
30:cc:7c:05:a9:1a:f1:f5:08:3f:56:18:d5:6c:80:b9:7b:2f:
ed:ea:bd:71:c0:87:ef:09:fe:d3:86:9a:b5:fd:be:df:2d:8d:
47:02:25:52:b8:71:bb:b5:3d:69:2f:8f:3d:6b:f0:91:81:14:
f5:a5:da:74:67:9d:87:33:62:db:26:a2:f0:ed:01:af:8d:01:
ae:c5:f9:b6:c3:59:ec:1d:a5:60:25:0a:0f:0f:c4:5e:cc:ee:
1e:fe:28:a4:96:69:a4:d8:6f:f8:7c:62:30:4e:98:1f:aa:eb:
f9:d6:47:93:d5:d7:0e:89:52:6c:34:f6:1c:c8:ce:42:70:72:
8a:c8:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:39 2025 by rpki-client