Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: 6FEhVAgVTPlKNFVMSUdKsNRz4IMnxWgBQ+O0unDl4A4=
Subject key identifier: 4B:6E:55:36:53:60:A7:E9:16:59:58:BF:F6:E7:90:AF:12:D7:94:E6
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 01976BBD403FC4B59F9C434C6D0F7802C603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1589
Signing time: Sat 14 Jun 2025 00:00:54 +0000
Manifest this update: Sat 14 Jun 2025 00:00:54 +0000
Manifest next update: Sun 15 Jun 2025 00:00:54 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: JIoSm4deLNUOQNVAARubopmNauzoQUIk9+z0m90NNn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:40:3f:c4:b5:9f:9c:43:4c:6d:0f:78:02:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Jun 14 00:00:54 2025 GMT
Not After : Jun 15 00:00:54 2025 GMT
Subject: CN=4b6e55365360a7e9165958bff6e790af12d794e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:0a:05:f5:cb:93:ef:75:d8:86:14:6d:c2:
f3:e2:08:89:d8:fe:dd:8f:91:4b:ad:a3:69:31:49:
98:82:c1:75:9c:79:bd:7a:f9:16:60:c6:fb:7a:f3:
31:de:bd:40:7e:51:84:16:58:da:83:57:31:a6:0f:
29:40:bf:f9:ef:6f:1e:09:09:9b:1f:31:71:c3:66:
c0:33:17:a5:00:78:83:c9:41:fb:67:f2:e9:ad:25:
8b:46:dd:54:c5:4e:30:cc:5b:30:9b:5f:32:c5:cc:
72:7c:a4:e5:2f:4f:7e:7e:57:f3:2d:1e:c2:af:f6:
15:ad:68:86:d1:9e:7c:1e:a9:c3:c7:ca:a2:c0:cf:
0c:c7:00:2a:de:5e:fe:5e:fd:d5:60:66:40:00:26:
b7:9f:cc:40:60:62:40:c2:9b:05:b0:b2:32:6f:a7:
6e:48:45:a3:fa:78:04:4a:e4:c3:f4:60:db:8d:8b:
e5:88:d6:1c:d8:e4:6f:cc:5a:63:d2:78:ad:fd:18:
06:84:8e:7e:1c:a9:1e:16:78:cc:d5:01:63:c9:52:
cb:00:e9:9b:e6:e8:69:c8:d0:e4:38:97:b9:d7:e9:
7c:1a:de:f1:cd:a4:ea:f0:76:8a:f1:88:25:63:77:
70:13:2e:60:1f:49:96:8b:fa:ef:fa:b2:a9:f2:e4:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:55:36:53:60:A7:E9:16:59:58:BF:F6:E7:90:AF:12:D7:94:E6
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:18:72:29:bd:7c:38:59:65:a2:86:04:a4:81:b7:85:99:43:
5a:71:ef:0f:e5:6a:84:96:44:92:4a:41:6e:90:70:f6:b3:4b:
55:f2:36:c1:c5:fa:dc:4d:b8:23:d2:37:7b:65:5c:3d:81:45:
83:77:5a:6e:a0:cc:7e:02:88:e4:83:1f:8b:21:17:6e:ce:e8:
be:2b:4d:43:8d:a5:dd:8d:4c:0a:e5:2a:1e:dc:b2:89:4d:3b:
d7:bc:0a:de:e9:9a:54:89:e3:49:b4:4e:8d:a0:98:98:51:40:
0b:8b:84:2a:55:52:f6:d3:12:92:e6:10:de:de:83:4d:c7:46:
5b:98:13:f0:ae:3a:86:e0:c9:7b:22:31:f7:fa:ce:d4:b4:b4:
6a:fc:cd:f2:ea:9b:c3:3e:4b:53:8b:da:5f:f3:63:bf:58:62:
fb:09:04:5e:00:c8:d5:37:1f:bd:40:b9:eb:e3:9a:a5:2d:bf:
7e:cc:fb:ce:07:34:ef:b8:31:a9:6c:03:82:a1:49:30:ee:8f:
4d:59:59:e8:8d:1e:bd:22:9e:86:58:7c:f4:18:ad:fb:d9:c8:
09:f9:33:68:cc:20:67:44:fd:dd:2f:a4:3b:fb:9d:6c:db:c5:
16:16:f8:10:c6:a8:a2:94:ee:e3:f9:5d:e7:17:14:6a:2a:e7:
ed:df:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:43 2025 by rpki-client