Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: HDxG36/dhgLLc42BaIZQw7E2zv9Jq8Vp+F0PGQeyonw=
Subject key identifier: 1D:A7:32:8C:F9:28:50:7F:B0:75:49:D2:67:2F:EB:6A:D0:0B:7C:56
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 0197B70EE2B410C834AA9E474ABB4A65DFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: 25k4SADKN86YZ7YRaRtY3U6cLcgK5rfkKlq5iD0qC9s=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e2:b4:10:c8:34:aa:9e:47:4a:bb:4a:65:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=1da7328cf928507fb07549d2672feb6ad00b7c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:5a:08:25:c8:a2:d8:f2:56:b5:a1:49:1f:
a3:0a:e0:5d:5d:d6:4d:0d:fc:d2:46:df:94:38:c1:
8c:45:a0:ce:15:a2:09:38:2f:bf:94:e1:3a:f9:3e:
bd:12:26:9d:18:83:65:08:f6:09:d1:b5:32:60:7e:
58:91:ba:70:3c:f5:25:f6:ff:0a:5e:6d:c4:50:33:
b4:85:31:7f:53:c3:c2:87:76:1f:b6:28:64:56:2d:
07:de:ce:4d:3a:66:d8:10:eb:37:94:93:c5:ca:65:
76:5b:46:2b:30:02:a4:f8:fa:b8:56:59:17:4f:a3:
ab:66:19:21:eb:c5:87:57:7d:0d:f5:ea:e2:1a:89:
ef:d3:67:cc:6a:53:cf:48:c6:67:b4:8c:32:65:d8:
32:f5:54:ff:66:5e:39:97:11:9b:be:32:52:2a:ac:
0d:41:d9:af:85:a6:d1:0a:85:4e:2e:0d:77:d2:88:
2a:f8:e5:90:24:27:e9:61:44:11:5e:49:69:75:6b:
dd:63:6a:3a:3f:28:ee:62:df:ae:0d:e9:c3:2b:e2:
96:08:91:7e:4d:46:71:0f:91:84:53:0b:d7:09:b6:
da:d1:25:38:2b:07:52:68:89:1f:9a:57:d4:5f:d5:
1d:7a:bb:d3:25:b2:db:2d:f8:a7:a6:db:e9:ee:89:
47:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A7:32:8C:F9:28:50:7F:B0:75:49:D2:67:2F:EB:6A:D0:0B:7C:56
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:2b:2f:d4:11:a6:9f:7d:9c:1a:7e:a9:a1:b1:86:05:63:
bc:cf:2b:fa:74:f5:94:11:ab:6d:2e:ac:55:42:3e:83:6f:96:
2c:a3:d6:cd:fd:34:08:8c:f1:c3:4a:f9:a3:ff:6a:97:d0:e7:
02:ab:b1:93:6d:ce:37:94:8f:5c:e7:54:e7:1b:9c:1b:f1:df:
df:ab:58:a6:82:f5:c6:2e:b9:cc:43:71:2e:7a:49:62:c2:b4:
eb:a0:da:47:4b:42:64:85:83:ed:c1:1a:93:09:3b:ee:ac:42:
d3:0c:b7:a1:bc:59:52:8c:7e:2d:5b:7b:58:72:a1:b2:3d:09:
3c:1c:39:e5:30:89:d3:f4:bd:9f:27:81:2f:2e:e1:55:59:b1:
de:e1:de:69:1a:d6:b5:08:10:6d:70:e0:d9:c8:cd:8d:bd:83:
17:a6:f9:2d:f7:b4:6f:03:36:bf:5b:81:b8:88:34:b3:3a:f7:
69:ef:a2:6b:7f:f6:3f:fe:56:18:b4:4e:e6:de:07:2c:6b:39:
4f:c5:c3:b4:2a:05:1b:bb:1e:ff:cb:7d:63:af:20:d6:bf:37:
f6:23:12:82:2d:0e:65:08:c4:1a:a0:07:8a:04:98:d8:63:bb:
d6:93:63:a3:fe:14:24:76:af:3c:e3:a9:a6:8e:ca:0a:e3:8f:
01:f3:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:51 2025 by rpki-client