Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: gCzn1OU6UgUuqjNZr2xMtcKR3v/nUCEukz8L5Zhp8XY=
Subject key identifier: 4D:0E:45:C4:8D:36:D9:82:CD:EE:A2:D9:C6:08:EB:3A:8F:D9:70:A2
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 0197B9D931DD9F636DA4064FEC0376471421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 04:01:48 +0000
Manifest this update: Sun 29 Jun 2025 04:01:48 +0000
Manifest next update: Mon 30 Jun 2025 04:01:48 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: wF2MYNf/nRKZ3AzZq3Mm1akox2O4i1gOn64psz/f8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:31:dd:9f:63:6d:a4:06:4f:ec:03:76:47:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Jun 29 04:01:48 2025 GMT
Not After : Jun 30 04:01:48 2025 GMT
Subject: CN=4d0e45c48d36d982cdeea2d9c608eb3a8fd970a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:27:6e:46:f9:81:18:50:03:e9:d4:d4:1c:
f3:ce:9a:32:ed:b7:c5:91:da:3a:80:43:ca:97:00:
ac:7e:64:54:38:4a:50:8f:35:d6:2c:d3:09:75:42:
33:02:ea:3d:66:e2:b9:00:a9:15:7d:30:aa:d6:7c:
69:3f:6b:7c:0a:3b:1e:92:5a:d7:50:42:88:0c:0b:
bc:6d:0e:c1:16:d1:29:6b:d7:ba:17:96:0c:23:61:
b1:f7:7a:c2:9f:f1:8c:90:ec:d3:4a:18:f5:43:ed:
71:8c:0c:a8:a9:9c:d0:13:04:f9:a2:20:fe:1a:b6:
b5:a7:73:ff:b1:3a:0c:43:a4:3f:a6:42:ab:af:75:
33:16:92:3d:dd:6b:24:1c:df:a5:59:96:99:8a:ac:
45:ed:5c:86:80:69:c3:85:d2:eb:9a:a9:41:84:00:
62:81:c4:7f:81:ae:f8:58:8c:d1:db:e6:16:a0:e4:
3c:8d:e9:18:94:58:7f:84:fa:ba:85:8e:58:fb:36:
af:7b:af:ea:f7:11:57:c1:32:ce:f0:98:4b:c2:d8:
60:70:d4:0a:08:b1:9b:c2:63:44:32:c2:c0:64:13:
bb:73:ec:c2:78:f3:95:c2:1d:d3:d1:a5:f2:6f:40:
18:a3:10:30:46:2f:ce:86:ba:a5:15:8a:c5:ba:2a:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:45:C4:8D:36:D9:82:CD:EE:A2:D9:C6:08:EB:3A:8F:D9:70:A2
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d4:c9:27:8c:fe:4f:6a:1d:84:35:5e:d1:3f:13:2a:ea:29:
72:1a:cf:54:7d:95:24:ed:19:66:7d:5f:a0:da:b3:6e:31:97:
54:d5:0a:fa:88:01:1b:e0:52:f1:01:e3:35:0b:c9:de:1c:c5:
98:62:10:1e:f9:d4:49:f1:c6:d0:c9:bd:c3:01:d5:44:53:3e:
c1:f7:af:4c:32:a9:00:14:6b:3f:6f:c4:8f:eb:4a:71:fa:5b:
0b:d8:0a:e4:b7:f5:43:3c:c6:f1:c3:3c:d4:54:17:59:38:86:
00:f7:be:08:b5:24:1a:16:c9:d0:21:30:30:1a:95:e7:5b:28:
8f:1d:cf:5a:9e:78:fa:ac:0d:98:ac:86:a8:8b:2b:84:b6:97:
86:37:90:3b:bd:55:32:a6:f4:96:4b:47:f5:8c:30:1e:05:bd:
1f:e4:80:6b:64:57:5d:95:62:c1:9d:d3:cf:ac:57:f7:11:f0:
78:3c:4e:0b:40:09:76:d4:de:ea:62:9d:99:21:d7:12:3b:db:
2c:f4:87:67:14:ce:97:23:bf:6d:30:b0:08:ea:58:27:fb:eb:
7f:38:f1:b9:fc:e3:5e:95:c9:0d:9b:ff:e0:aa:d8:12:b7:b5:
52:66:0a:73:97:f9:27:bc:a4:0f:95:e9:42:8d:e9:1a:13:6a:
97:79:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:45 2025 by rpki-client