Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: fYgL3Z26gtgViVN69wSrTmwWtAbVUCC9BE9aIllPRDg=
Subject key identifier: CB:AC:16:C0:83:0E:E3:BA:CD:3A:B7:CA:EA:E7:EF:3D:E5:C0:85:22
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 01976A05CD6ED008FBFAF0B2C06D6D2D51C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 1035
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: 1eUOhgAiv+e9q6HojlqR1JnoEo7gDYW5kfLkVpqpYDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cd:6e:d0:08:fb:fa:f0:b2:c0:6d:6d:2d:51:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=cbac16c0830ee3bacd3ab7caeae7ef3de5c08522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:a0:84:a8:dc:a0:da:e5:eb:31:ed:e3:89:
1f:e7:84:45:e9:72:ae:c9:f5:44:14:28:44:94:31:
9c:03:37:1f:13:19:41:f0:46:74:0d:d2:15:99:b9:
01:80:77:7f:8d:38:5c:0a:62:ff:c1:c8:0a:6f:c2:
a4:f0:6a:0c:55:ff:60:9e:1a:67:d5:19:70:18:fd:
ce:20:21:ad:ea:29:26:df:f8:b5:31:e6:02:d5:de:
21:95:2d:c2:d2:54:ed:d9:fc:d6:26:4e:7d:89:c1:
56:01:a2:bf:f1:9e:47:d0:b3:1a:16:ad:7c:21:06:
fa:01:d2:61:38:e8:a6:0c:94:7b:e2:f7:65:18:15:
4f:c9:3d:c2:48:88:e8:0c:de:f0:80:ca:1d:46:70:
7b:70:4b:16:86:f7:4e:1a:dc:91:b8:f8:e1:52:b3:
3b:51:2d:65:85:68:09:9b:2c:62:c2:53:a3:26:c7:
34:0e:52:54:75:a1:4f:c0:26:a1:c3:9a:fa:a9:c6:
3c:21:ee:2f:8a:cd:21:33:2c:3c:5a:44:cb:df:1b:
c2:87:03:41:f3:6b:68:35:04:88:e8:03:2b:ee:f7:
9a:68:ee:2b:07:ef:fe:fa:c8:6d:7f:02:bf:a2:f6:
ef:64:a1:11:be:c5:6c:96:56:51:d1:74:9e:0f:7a:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:16:C0:83:0E:E3:BA:CD:3A:B7:CA:EA:E7:EF:3D:E5:C0:85:22
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:d4:64:d4:db:5d:0a:68:10:7f:41:3a:4f:f2:03:4e:8d:
c4:61:29:3c:31:23:f4:b8:59:fb:3d:80:8e:26:c1:23:9d:18:
ae:ad:42:e3:b1:90:76:30:70:d6:bf:0e:5b:9a:d6:cc:cc:6d:
ee:78:5e:2e:b5:e4:83:84:50:a5:2b:e6:32:c6:b1:c1:d5:ad:
63:82:21:e3:62:be:c3:dd:e1:81:69:11:5b:ae:18:67:30:12:
de:84:4a:84:16:03:84:a1:70:c7:70:5f:5a:1d:af:1d:bd:fb:
02:bd:22:5c:24:3d:c7:bc:f6:fd:13:19:ac:5c:65:2c:d2:3b:
d9:e2:8e:fd:6c:f6:95:a8:cb:79:d9:43:2f:d3:45:c3:f8:00:
1d:e6:77:58:a6:4b:ca:65:4e:4e:f9:bf:cc:f5:0e:31:b5:e2:
50:84:8d:95:7a:f0:e5:54:fa:0e:ab:0c:12:38:98:52:94:81:
79:e1:76:e9:58:82:58:05:bb:66:9a:20:12:af:16:2c:8e:15:
a6:73:c3:69:3f:4a:3f:ba:49:2f:6a:cc:3c:c5:79:a8:2a:61:
30:2e:7d:c6:8c:a9:6e:0a:4f:26:cb:b2:59:f5:41:de:0a:8c:
6a:52:5f:f2:fb:b2:1b:9e:6d:2d:a0:13:1a:1c:4a:b5:cb:d5:
a0:81:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:17 2025 by rpki-client