Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: RFWZbA848erIisTqTNR9lqAe+RnQNzymTTP6cgnaxbQ=
Subject key identifier: 5A:20:DA:BA:5E:99:8E:51:38:D3:BB:A0:4E:F6:1F:EB:BF:2C:96:E0
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 0197B70E8744147EA4710BC89623CA7C0B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 0766
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: uRNemFjCzdg38ruF9vtkq0+U3Q0o6WN29H9Y9bkkmG0=)
2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:87:44:14:7e:a4:71:0b:c8:96:23:ca:7c:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=5a20daba5e998e5138d3bba04ef61febbf2c96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:46:dd:75:22:5f:43:0f:eb:cd:a8:22:2e:
76:64:d8:4f:1a:02:ad:95:5e:81:28:47:51:51:05:
7c:9a:c4:fc:57:8a:dc:75:75:f8:e3:dd:f1:7f:62:
81:3e:32:9d:a8:8e:63:48:25:5c:d3:1b:51:25:8f:
51:08:d9:cb:99:76:1c:cd:ba:89:be:ee:17:e2:48:
15:6b:f3:0a:37:57:19:34:60:38:0f:1f:35:97:db:
a4:fe:b4:75:64:6a:6f:7b:04:8c:c0:91:1d:a0:88:
65:4d:2d:e7:5e:a8:4d:e3:30:9c:c0:05:46:76:1e:
5d:d8:f8:80:de:de:1a:c6:20:78:29:ae:11:31:6c:
7b:99:ba:fd:4f:6d:e1:8a:f1:52:7d:25:e4:29:64:
02:50:8c:e5:71:cf:9e:24:ca:73:39:79:64:7f:9a:
23:88:82:d2:c6:0b:e5:fc:cb:0c:56:32:6d:4d:79:
85:be:9e:96:5e:72:8b:e6:14:76:b4:44:15:ef:2a:
55:e5:d0:b5:00:21:2c:19:5f:f3:e7:43:c8:7a:f7:
60:38:ac:79:b4:ff:a9:a2:bf:ad:ba:8c:e3:29:2a:
f7:e9:4c:76:8c:17:e0:fa:7f:d3:65:32:49:36:eb:
fd:dd:e3:e3:4f:61:b8:b1:e3:a7:f2:71:ea:80:bf:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:DA:BA:5E:99:8E:51:38:D3:BB:A0:4E:F6:1F:EB:BF:2C:96:E0
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:b8:3e:3a:0d:a5:15:03:4d:bb:b1:59:aa:4e:7f:f8:0c:
51:c7:04:0e:39:43:e2:32:bb:cf:4e:c4:f1:1b:24:84:91:af:
bc:29:7d:23:d6:59:5c:39:86:6b:f1:42:a6:e5:4c:a0:6c:64:
f6:92:76:39:61:c9:de:a5:4d:3d:71:18:ee:74:67:78:fd:21:
a7:28:81:a3:03:74:fb:5e:2f:f5:de:3d:98:ed:14:a6:ca:af:
f1:5a:01:33:4a:b8:fa:4a:d3:a2:0a:0f:74:f8:c4:59:d2:aa:
44:f8:d8:28:8f:64:99:18:24:59:28:fb:5c:98:65:a3:b4:ed:
5b:6f:77:c2:73:52:77:dd:41:8d:21:be:fa:b7:d0:a3:f2:83:
60:cb:44:12:e6:07:34:14:32:55:9d:c9:ad:a2:47:fe:51:92:
e4:81:ae:28:6d:57:f1:63:d7:58:39:e3:df:8e:55:11:91:dd:
35:43:fa:db:c7:fb:67:de:4c:4d:18:55:16:48:2c:85:66:a5:
53:a6:d7:6c:a5:b9:5d:1b:fe:20:a6:42:cd:fe:8b:04:33:8e:
eb:3d:be:9c:fb:a7:1c:f6:3f:46:6c:15:76:bb:c2:4b:df:8e:
61:00:08:33:53:94:15:3b:41:9c:2d:b2:2e:c8:27:76:39:8f:
52:6c:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:45 2025 by rpki-client