Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: nTrosRFTG4Y+G7lhNgeewcAyVEfVrSgjy5CWaFKty/k=
Subject key identifier: 82:B6:5E:52:3B:78:AD:0E:C8:42:0F:46:97:3E:13:E8:4E:51:50:30
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 0197B5FC131A52D486FE958E4EC21596FA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:25 +0000
Manifest this update: Sat 28 Jun 2025 10:01:25 +0000
Manifest next update: Sun 29 Jun 2025 10:01:25 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: XCZ8DTMDfv9EfivTAEEQW72M6rIUtbYk5G/A3Eqkkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:13:1a:52:d4:86:fe:95:8e:4e:c2:15:96:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Jun 28 10:01:25 2025 GMT
Not After : Jun 29 10:01:25 2025 GMT
Subject: CN=82b65e523b78ad0ec8420f46973e13e84e515030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:fe:40:4f:b0:33:6a:da:5a:89:71:b1:0b:
1b:05:e1:ca:54:9c:a8:9b:f4:e1:fa:fe:be:a1:d1:
8e:a0:42:05:89:b3:99:86:9f:46:72:db:6f:19:62:
e7:36:d8:22:2a:10:c0:5a:a9:1e:0a:02:a9:d4:54:
ab:1b:64:68:51:7f:1e:ca:d3:62:a2:95:7f:cf:45:
fb:73:0c:41:3c:eb:e0:08:50:80:86:87:c7:95:4c:
a0:11:71:84:32:a7:4e:0c:ca:26:ec:1e:c4:55:d8:
1a:90:31:a1:23:18:07:bb:6e:2f:3b:e9:6a:98:fc:
c2:6b:17:29:e3:5f:a6:a2:0b:4a:bc:12:6f:92:91:
3b:79:46:74:85:3c:c7:00:7f:09:54:e6:56:25:9d:
de:00:f7:10:4a:c6:e4:f5:5d:69:4f:cf:63:68:6e:
a7:c5:5f:5f:5a:b1:b1:62:52:90:5d:ce:4e:0f:26:
44:3c:be:d5:73:10:5c:e5:10:12:55:94:d3:b9:c5:
65:30:69:62:dd:15:ba:3c:f9:7b:76:64:c6:0d:d5:
e9:15:80:32:15:ed:3c:25:ed:f2:18:26:8c:1d:4f:
3d:6e:3b:b3:f4:8b:4a:a9:62:44:99:93:a8:4d:ab:
be:ea:f2:99:9c:a6:89:43:cf:5d:2a:3f:e3:e1:86:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:5E:52:3B:78:AD:0E:C8:42:0F:46:97:3E:13:E8:4E:51:50:30
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:4a:5f:42:bd:44:9e:9d:8f:08:1d:2b:00:21:5d:7e:58:
a3:c1:b9:be:71:fd:ff:7e:c7:a8:78:e9:ce:07:6a:11:ef:8b:
ce:15:25:fb:b3:25:95:4c:81:55:91:67:34:f9:8f:9a:83:48:
bf:09:6c:0b:a4:91:cd:1d:02:06:79:84:12:d0:4e:c4:31:cb:
ff:03:53:10:d0:43:2d:8f:0a:b7:ed:46:3b:f1:59:dd:6d:96:
de:2d:7b:fd:7d:b8:13:8d:ce:7e:c8:db:49:59:47:ba:9c:44:
12:7a:e2:a9:fd:7b:af:6e:41:c3:bf:a9:e3:04:94:87:3d:51:
8c:94:d9:99:08:54:89:d2:07:c8:b4:55:ed:32:eb:93:09:60:
22:22:2c:0c:72:f4:42:fd:d8:7c:03:c3:2e:ed:c8:36:07:23:
bb:83:81:95:cf:9f:01:57:0d:ea:5b:45:fe:93:51:17:4e:94:
38:96:a3:b5:5d:b6:8a:b0:4b:19:e7:51:df:2d:7f:f9:dd:ce:
97:63:0d:99:4e:21:0e:a0:04:ab:97:b0:dc:e6:9d:fc:0f:6b:
69:c6:fb:c4:44:10:85:a6:fb:e9:84:97:d8:c9:fa:4d:51:31:
b1:73:27:ba:9d:fa:a6:4b:e9:b6:3b:c3:48:a1:b7:58:6a:aa:
90:8a:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:24 2025 by rpki-client