Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: lRe/+0PVAB8bd/auSxzFYyrQwkwl89CjSE/D6iE/jjQ=
Subject key identifier: 2C:1B:62:87:72:15:AE:BF:31:C1:CB:AF:66:09:4D:56:E0:30:5C:D4
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 0197B9D8DBC0C99D215351319B5A255ED157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 1001
Signing time: Sun 29 Jun 2025 04:01:26 +0000
Manifest this update: Sun 29 Jun 2025 04:01:26 +0000
Manifest next update: Mon 30 Jun 2025 04:01:26 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: M2Vb6R9rf2aYYQwRG/Tmj6LWsgTNtl61+s5yhu8TTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:db:c0:c9:9d:21:53:51:31:9b:5a:25:5e:d1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Jun 29 04:01:26 2025 GMT
Not After : Jun 30 04:01:26 2025 GMT
Subject: CN=2c1b62877215aebf31c1cbaf66094d56e0305cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:cd:96:3c:c9:68:9a:b6:c0:fb:98:84:ca:
fb:ff:79:07:28:ca:21:da:ae:09:59:a2:ab:b5:d9:
bf:59:93:5f:80:54:c0:1e:24:a2:ad:d9:a6:8c:67:
95:01:78:33:23:49:14:71:8b:93:80:80:91:b0:03:
63:3d:a9:ac:13:71:45:c4:f7:8d:8c:dd:87:6a:d5:
1e:5e:1b:f6:3f:f3:1e:2a:4e:08:7f:07:e9:93:3e:
93:03:31:0e:2c:e5:90:09:85:a5:00:47:b2:a8:f6:
02:9f:38:74:db:37:0b:66:69:d4:3e:0a:50:91:3a:
f6:38:8d:12:1c:c5:22:70:7f:26:6e:ce:11:b2:0a:
7a:6f:8b:93:4e:df:9e:85:c6:4b:91:c9:69:e9:0f:
44:be:7c:4d:b6:79:e2:67:e2:35:d5:a2:26:af:0a:
51:b6:bb:85:3f:f7:93:68:74:2d:bc:17:7e:a3:7e:
d4:16:b8:56:b5:2e:d5:e7:5b:05:f7:57:b9:6c:98:
11:dc:c4:1c:c1:4e:5b:fe:73:6f:dc:35:2c:38:94:
dd:6c:1e:c4:f2:5f:b3:c9:8c:b2:80:f9:1a:7b:ba:
97:ac:37:0c:9b:5e:8c:5c:a6:5a:1f:b1:fa:63:1c:
b7:7c:2d:c3:12:2d:82:36:7f:67:76:c7:e9:22:de:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:62:87:72:15:AE:BF:31:C1:CB:AF:66:09:4D:56:E0:30:5C:D4
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:b5:da:75:fc:f9:52:ed:86:81:0c:a6:a2:f8:10:e3:33:
08:83:00:eb:ca:93:40:a9:11:9a:f0:d3:40:43:73:a1:49:e0:
87:e5:66:30:31:39:97:06:cb:ba:7b:aa:9e:76:53:b1:9a:03:
9d:9c:4b:e5:6e:78:ac:64:87:7f:9d:34:6f:91:24:eb:1f:40:
ee:c7:12:2b:bf:61:ac:6e:c1:1b:83:3e:86:f5:d3:25:0b:6a:
ff:b4:34:eb:07:cb:d0:39:3d:54:99:7f:d1:25:db:26:96:93:
f7:78:da:64:88:f5:44:6c:b4:b9:54:92:58:dc:48:0e:ea:47:
66:c9:32:73:41:7e:ed:d8:f9:c5:86:ab:f8:03:d5:24:14:29:
2a:e0:7a:59:3d:75:b8:71:30:df:ac:76:08:fd:83:0f:2a:5c:
64:49:3e:b0:34:0b:36:ba:f3:cc:39:d4:ff:64:40:e0:2c:d3:
f5:7c:a0:af:a5:bc:93:36:b4:4c:2a:68:56:b6:32:29:9b:19:
9f:72:10:ca:bb:46:9d:f2:bd:00:ab:11:58:11:f0:92:f7:dd:
10:85:9f:8d:9b:87:73:42:5c:97:40:ba:2e:0e:93:fc:46:e3:
68:bd:c9:0d:dd:b5:ad:b1:4e:05:eb:a9:a0:a0:35:0c:6b:c8:
a8:02:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:45 2025 by rpki-client