Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: 4jKtNVWTF2wDhAH6KnQGXgoKOGFrQ6O/ZB5NAUU5TRM=
Subject key identifier: 23:31:9D:4B:BA:BF:98:36:EE:CC:76:3F:7E:3F:2D:27:85:C6:54:56
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 01976E87422B85F74F644600A411FEADECAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1192
Signing time: Sat 14 Jun 2025 13:00:47 +0000
Manifest this update: Sat 14 Jun 2025 13:00:47 +0000
Manifest next update: Sun 15 Jun 2025 13:00:47 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: Z3SBdig2T5fvm3d9zCdYIOTPV1wAzlkh9q8dlBdOA+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:42:2b:85:f7:4f:64:46:00:a4:11:fe:ad:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Jun 14 13:00:47 2025 GMT
Not After : Jun 15 13:00:47 2025 GMT
Subject: CN=23319d4bbabf9836eecc763f7e3f2d2785c65456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:cb:2e:d7:83:78:86:d0:59:68:87:1a:be:
90:b0:eb:66:de:e4:25:23:d2:5f:2c:c8:20:54:e4:
1d:2f:bd:ce:5d:de:c0:df:bd:7b:3a:d8:87:94:29:
98:fe:f6:ab:dd:2d:56:2a:1a:b4:56:1e:52:38:0a:
a8:3f:fd:d3:ac:e2:15:cb:54:09:fb:9c:68:e3:76:
6f:5b:4a:23:29:3e:3e:c9:3b:09:26:61:b1:79:94:
46:58:37:9f:fb:c6:d3:77:36:d0:7a:2e:03:da:75:
b9:28:cf:3f:d2:16:86:9f:57:db:35:26:c1:ef:9a:
12:d3:98:bf:e1:0a:70:a2:d9:4a:f7:11:05:3c:fa:
23:d7:fb:d8:1c:ae:52:3c:c5:c7:44:c7:3c:c2:2c:
02:8a:a1:92:3e:64:84:01:3b:13:eb:9d:88:98:44:
6b:e5:c1:d7:66:32:d7:fe:f0:c8:e0:02:86:13:75:
c2:71:ea:d3:8d:be:9d:97:c6:b8:d9:d8:24:c1:d4:
2d:cd:2a:77:2d:d2:ad:0d:aa:f8:6d:c9:55:7c:b8:
20:c7:05:d6:1b:3f:98:71:e4:a6:70:1e:46:53:51:
8b:f1:cb:47:3b:45:da:08:e6:ee:41:e8:f3:75:bd:
96:41:41:01:15:ac:9b:aa:8c:d7:9b:11:31:c1:89:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:9D:4B:BA:BF:98:36:EE:CC:76:3F:7E:3F:2D:27:85:C6:54:56
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:cf:23:3b:9e:c6:a6:c7:2c:b5:9d:8c:6e:5b:2e:b4:89:
34:27:ef:15:93:c0:02:e2:78:bf:37:a5:9a:da:6b:e0:fd:8d:
2d:92:22:98:c1:1f:0c:0c:54:fe:af:9c:72:4d:4f:32:9b:35:
fc:82:5a:9e:03:fc:c1:68:a9:6f:55:6d:08:00:2c:4f:00:77:
70:5c:c6:18:60:ae:14:5f:fd:92:11:d0:12:b2:f2:22:df:f4:
a7:65:37:73:45:43:88:95:37:d6:77:3a:e6:bd:6b:d4:b5:34:
c9:8f:f4:57:01:bf:c2:77:17:31:82:6d:9a:4d:30:7f:4a:d9:
c1:08:91:54:d1:af:bd:f6:86:43:16:f7:e0:bf:06:e3:39:b1:
ef:5a:5b:ca:52:26:02:a0:f8:31:a1:14:c4:00:39:85:20:2f:
e0:ec:78:41:7a:a3:b4:22:b1:56:30:f5:0a:a0:8a:9b:33:db:
53:87:31:ea:39:76:17:82:1c:84:da:be:cd:a5:f1:8f:4a:e3:
83:f3:b2:24:ff:30:93:6f:e7:06:d8:c4:0e:e5:38:ab:7c:02:
1b:ce:d3:e2:7e:53:a7:74:9c:9d:1e:b9:85:ab:41:26:98:4f:
b4:c5:46:13:26:6e:dc:31:b3:b1:69:1a:6c:98:67:d8:4d:d7:
8d:17:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:56 2025 by rpki-client