Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: jHVz+sOCaHW1ZRbdmkCp2H3MopUnNMdAvZJYXjqSDTQ=
Subject key identifier: FC:06:CC:68:38:AB:0D:23:A3:B2:73:49:2F:AD:D6:34:9B:23:AB:65
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 0197B7B35A1CB43AFDA27EA682283950458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 02E4
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: +uR+2OYijtD0gvATWg6tYHXLNLGrIYaV7RBIknmIMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5a:1c:b4:3a:fd:a2:7e:a6:82:28:39:50:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=fc06cc6838ab0d23a3b273492fadd6349b23ab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:9f:63:dd:d0:94:ed:94:6d:2c:d8:be:3b:
8f:7d:c2:1d:c8:a9:48:9c:23:4a:41:36:81:bc:4e:
a6:63:95:2f:00:43:09:ab:80:6c:0a:73:86:00:76:
a7:d1:c8:85:3e:d4:b1:3e:b3:02:41:f1:90:24:fe:
12:71:80:cb:60:17:56:38:c1:73:65:ee:fb:ca:3f:
8a:8c:35:ba:09:76:4f:c0:cf:e9:6c:c0:19:fd:73:
3f:97:70:45:15:a0:e7:62:1f:e6:67:ea:a5:e9:50:
cf:be:87:7d:28:48:8b:61:1f:84:8a:92:81:b6:f6:
97:ff:7a:e3:ee:57:b4:45:b4:14:1e:7a:8c:3e:33:
65:b4:09:4d:26:f6:20:f1:3c:d8:c0:50:3c:e4:da:
c1:f8:91:65:72:d9:40:c2:27:f2:31:2e:8e:65:3b:
3f:2e:44:bd:d6:09:c6:4d:84:ee:56:a8:d2:e1:ca:
01:d6:83:dc:67:74:2e:03:56:ad:64:69:e6:b7:84:
e0:27:98:cf:d8:22:bd:f4:fd:29:33:2e:d1:2b:22:
92:24:97:cc:e4:b6:2f:05:16:b6:32:30:45:a0:d2:
05:91:1b:53:ad:e0:b7:f8:e1:aa:bb:b4:90:62:bf:
b3:57:5d:42:93:61:44:52:93:da:59:ba:60:01:be:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:CC:68:38:AB:0D:23:A3:B2:73:49:2F:AD:D6:34:9B:23:AB:65
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:58:13:c9:9c:91:5c:f2:d1:20:62:ff:f5:b9:4b:e0:87:
58:73:59:b0:27:85:0b:b6:30:7a:66:1a:75:e4:ea:00:c8:66:
c0:70:6a:3f:77:0c:cb:06:ff:1d:c8:a6:b6:86:8e:76:12:fc:
6e:cd:f8:3c:c1:03:04:59:e2:6d:d7:1b:5b:2b:c9:c9:90:3f:
4c:54:38:61:66:dd:35:26:b3:2c:5c:16:7b:0f:3a:dd:7f:1d:
ea:01:7c:6e:9b:a2:e1:b6:24:91:a0:7e:7f:77:0d:82:f1:6e:
ec:f8:a9:6d:ed:e6:5b:5c:86:40:15:26:93:21:56:66:32:5b:
37:05:24:97:8f:b5:36:ed:0c:47:ed:78:37:13:31:b0:60:41:
48:a9:3e:66:05:1a:4b:6b:57:9e:22:2e:70:ba:11:1c:33:35:
b1:2d:30:e4:13:1a:e1:8b:27:63:6a:31:21:b3:55:82:11:a0:
bc:ca:31:20:b5:4f:9e:2a:b6:a2:8c:22:bd:1c:3b:ba:6c:40:
55:57:34:53:46:a6:9a:f3:a8:fb:da:06:c9:66:80:a4:c3:93:
04:b9:fe:66:2c:3c:e2:11:3f:86:7b:88:07:91:5e:76:a3:18:
75:de:ea:d8:18:4d:d9:14:cb:84:b5:e4:55:00:aa:2b:5f:1a:
83:7d:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:54 2025 by rpki-client