Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: tVX+rOwvBoZVsrunv5VJef4LVzIfZb47j5FUINjhHvg=
Subject key identifier: B1:50:27:4D:13:37:66:91:39:83:73:2B:72:FA:0E:15:49:B7:DF:14
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 0197B70E52675CA5BD6BA631451637291F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 04B2
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: KXiIEBYjW6SSbBptgj20pOW/0x785s8oMpOaC2wH3DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:52:67:5c:a5:bd:6b:a6:31:45:16:37:29:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=b150274d133766913983732b72fa0e1549b7df14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:d1:93:ab:bf:62:81:cc:05:a6:54:69:6c:
1b:c7:92:c2:61:dc:e7:aa:46:41:67:b1:a5:93:5e:
fc:d9:9b:0c:21:90:b5:82:28:eb:7e:51:9c:b7:1a:
ef:f0:e9:a4:d4:ad:3a:30:19:b5:74:e6:27:ee:c7:
00:77:a7:bb:93:04:cc:f1:ff:be:db:c2:d0:c1:29:
8e:ae:c9:57:af:88:d4:fe:2b:ef:70:d1:44:75:16:
8d:8c:4e:1e:48:da:98:f9:02:ab:b1:f6:4a:de:fa:
a9:11:c4:33:fa:39:f4:b9:ef:af:8c:14:72:fd:b7:
b0:be:80:a4:c4:8e:aa:9a:f1:fc:95:93:4e:4a:13:
4b:f6:03:ec:e3:8c:7d:76:5b:58:47:8e:a3:ab:52:
0a:fc:3c:43:66:06:6d:e9:fc:8a:65:81:bd:ae:19:
0e:4b:f6:cf:94:dc:09:74:61:5e:c1:8f:19:29:64:
ce:5c:05:5d:c6:e4:fd:cc:9d:4e:16:01:c7:c4:f5:
d0:fc:0e:0b:6b:61:48:24:cf:9a:30:b3:9f:4c:6d:
fb:94:73:67:b6:52:8d:e7:ae:43:88:e1:9b:60:48:
1d:2e:eb:06:46:b9:7c:38:49:d7:5e:a4:78:19:cb:
66:c5:6b:e4:45:e4:b6:eb:ae:be:c5:2b:8b:e2:9c:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:27:4D:13:37:66:91:39:83:73:2B:72:FA:0E:15:49:B7:DF:14
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:cf:52:61:5b:74:1e:b9:c2:3a:32:31:a1:05:5b:64:f1:
5d:d1:09:75:e7:36:d6:3c:c4:38:e1:af:3e:75:ec:d0:55:eb:
7d:4b:6b:45:a8:6c:3a:20:b0:a4:0e:9c:86:18:68:a0:6f:78:
b5:45:1d:c4:df:80:fe:c5:99:42:99:b2:9d:4b:dd:37:df:22:
97:8a:43:85:08:89:94:d4:f2:ae:6c:85:0b:bd:05:fd:ba:0b:
64:37:32:74:8c:3e:7a:a7:cb:59:ce:36:94:3b:0c:e3:cb:2b:
47:e4:48:81:d2:fc:d5:80:9f:7a:c2:59:2b:09:3b:ec:26:d5:
6d:7d:db:58:df:15:f2:4d:c2:70:42:bf:87:3e:cb:90:20:06:
ba:4a:9c:fb:d0:75:0f:4d:01:ec:db:7b:76:2e:56:56:0e:d3:
03:8f:14:44:7f:f5:c8:8a:ee:75:72:cf:22:49:ce:ea:36:77:
6c:3d:ef:5f:4c:76:bb:0e:61:46:63:e5:80:20:4f:fb:a4:09:
cb:a1:66:a4:0a:e2:93:b0:64:b9:e5:88:56:24:40:f9:ee:43:
e0:5e:90:38:db:2b:a6:27:e9:00:40:5b:1c:d0:f5:39:b0:65:
f9:6f:a4:db:c4:ae:9f:32:16:8a:1a:e5:52:52:ad:e7:b1:ce:
b7:c3:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:49 2025 by rpki-client