Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: gPH2CUMIxpXrI0vT9EPYQFcnpq9CdaI6TQ8xx/Pu2jw=
Subject key identifier: B8:DE:23:29:49:7A:E4:0F:D1:55:EE:79:20:1F:B7:BA:F5:89:DF:23
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 0197B6A22D21F91540971746A2872B283F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 0298
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: gYqLD7uKQTacugJjLjn2R3TP5gqwGzLg7rHkK4m7qII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2d:21:f9:15:40:97:17:46:a2:87:2b:28:3f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=b8de2329497ae40fd155ee79201fb7baf589df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:3b:ad:b3:7f:d5:c7:8d:88:36:5c:f7:76:
0a:11:59:13:09:b7:66:b5:c8:8a:0e:0d:c7:e3:0e:
f2:bd:9e:75:93:41:20:ed:c4:7e:08:fd:df:8f:99:
9c:b2:e0:b1:ac:69:2d:9a:a8:d3:6c:29:f3:9f:74:
a4:2c:a1:f8:65:93:11:73:08:4c:95:6c:d9:39:5b:
7d:fe:6c:69:58:9a:f7:45:f9:7f:61:e8:21:25:7b:
b4:d4:9a:3d:3f:72:07:0e:17:76:3e:cc:ac:59:8d:
08:6e:11:6a:1f:36:6d:fc:06:cc:b8:46:1a:30:58:
c0:5a:aa:51:13:83:20:9b:89:12:0f:68:a1:b2:2b:
58:3f:4d:e3:a4:8e:55:2b:52:10:4c:f8:66:f5:fe:
65:01:2c:38:4d:b7:98:8d:c1:bf:19:5a:79:20:1a:
8a:c2:c0:b6:d0:3e:14:47:9b:d8:7e:e2:91:e5:52:
46:8c:d2:47:09:ad:81:8e:80:21:14:63:1c:49:7a:
4c:04:b7:3f:99:61:16:80:2c:0b:7b:7c:08:64:e6:
6a:27:79:dc:c8:d7:57:97:76:54:3a:93:1f:85:d6:
9d:43:78:6d:70:02:bb:da:65:c0:25:94:fa:dd:12:
29:ab:6b:6d:0c:d3:24:6f:a7:64:4e:43:f1:e6:b9:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DE:23:29:49:7A:E4:0F:D1:55:EE:79:20:1F:B7:BA:F5:89:DF:23
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:53:78:4b:a8:d4:08:bd:97:cd:c3:5e:9e:82:35:70:df:8d:
f2:77:1f:b4:ae:0e:81:cf:a6:ad:eb:a7:79:55:cc:50:77:28:
42:35:2e:bb:5f:bf:6e:a9:03:c6:1c:cd:96:5d:11:f7:3f:e5:
08:43:3e:2c:94:7c:a7:54:ae:82:3b:14:82:6f:e8:8d:aa:1d:
07:15:c8:17:7d:a6:0e:b4:ae:2a:dd:99:b6:bd:52:72:dd:7e:
b4:df:28:e6:e1:ea:fe:0b:10:7b:26:68:4b:16:6b:b0:74:a2:
c8:3b:a1:78:13:8e:6e:60:8c:06:13:42:45:7a:95:b2:20:f5:
fe:29:26:b1:b8:60:3d:b1:3e:5f:24:d9:2a:8b:aa:e7:02:75:
0c:c4:2f:1c:d2:6d:67:3c:67:b4:0d:39:9a:b2:5f:3e:b4:59:
cf:70:d8:ff:ad:04:a5:83:d5:26:11:57:f1:14:a0:ba:79:92:
b1:36:be:8c:33:06:f1:d0:61:49:dd:0e:74:8c:62:7f:05:ac:
d9:fe:c7:49:17:1b:e7:31:04:0d:eb:c5:3d:82:68:61:18:38:
fa:49:ec:b8:95:4e:f1:8a:67:71:c7:d7:2f:ec:ca:10:c6:bc:
17:2c:dc:c6:ed:cf:47:58:d6:3e:e2:e6:ba:9e:72:7d:0d:ce:
7f:74:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:03 2025 by rpki-client