Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: hdN6ZGnf7Q2HkOepLTJpBPjCcWg8ZjkelB6MHMbakNg=
Subject key identifier: D2:1C:75:56:4C:CE:CA:55:4B:CD:B6:D6:AB:B3:54:C2:54:CB:96:E7
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 0197B88ECF55D7AE43E9C0A03116A60EAA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:00:56 +0000
Manifest this update: Sat 28 Jun 2025 22:00:56 +0000
Manifest next update: Sun 29 Jun 2025 22:00:56 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: cwERcLKtdgIU/1HSHjDQ5ebrhwIQwaoZC8EIV9OwIHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:cf:55:d7:ae:43:e9:c0:a0:31:16:a6:0e:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Jun 28 22:00:56 2025 GMT
Not After : Jun 29 22:00:56 2025 GMT
Subject: CN=d21c75564cceca554bcdb6d6abb354c254cb96e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:73:a7:9f:1a:bb:e2:8b:63:be:b1:7e:8a:
a1:6b:07:18:db:5b:a9:b3:c4:31:e6:6e:3c:28:82:
f4:2a:e2:8c:7f:e6:fc:6d:8b:89:f3:ee:8a:61:25:
a9:e2:ab:58:b4:7b:66:09:32:88:98:30:dc:7e:72:
7b:a9:f9:0d:ce:6b:6c:39:bc:8f:5c:2d:14:25:1b:
93:03:c9:5b:d6:09:04:20:60:26:3f:07:5d:c2:1b:
9c:02:ba:1c:70:91:be:02:fa:41:c6:55:9a:b5:a4:
c4:52:f7:c5:23:fb:d6:7d:a1:e2:68:78:d5:4c:b7:
c5:5a:f6:d6:a8:1d:ee:ad:0f:a1:12:51:3e:44:25:
44:67:ad:b3:6d:4c:da:75:26:9d:dd:1b:9a:8c:42:
30:79:40:94:34:c1:b9:9e:5e:47:8f:d2:ea:a7:a2:
2e:b7:84:22:3b:bb:14:33:61:92:4e:26:86:c0:d2:
e9:c0:a1:74:3c:a5:2d:ba:c5:6e:94:13:2d:3a:a8:
a9:a4:7e:e2:90:8a:f2:0a:2b:a9:c4:ea:7b:7e:3c:
28:e8:c1:53:3c:80:40:05:ff:da:75:ec:03:3e:cc:
d0:aa:f9:ba:89:d2:77:d8:b9:1b:c9:cb:b4:9a:2e:
15:7c:38:c1:e5:53:78:4b:0f:fb:5e:5a:16:6f:c5:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1C:75:56:4C:CE:CA:55:4B:CD:B6:D6:AB:B3:54:C2:54:CB:96:E7
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:52:8a:d2:7c:3e:3e:df:06:fa:5b:a1:ab:f0:d6:58:b4:a6:
1e:02:82:ce:cf:0c:dd:07:0d:ba:57:a3:bc:42:aa:7a:ec:5e:
92:08:e0:87:27:18:45:63:05:1e:30:26:27:b7:fa:6d:0b:13:
de:5b:f9:7b:46:69:18:a8:e6:66:26:6a:dd:30:10:02:87:c3:
9e:57:37:3e:62:ac:7e:b4:87:de:ea:c0:ff:dd:0d:f3:7a:06:
0e:fe:a3:c4:2c:b9:d8:c3:a3:07:51:e6:fd:98:9e:59:c7:e1:
9d:7e:6c:b8:54:0c:b7:8f:ff:48:51:a6:56:19:b2:ca:67:0a:
4f:a9:2f:a2:86:e1:74:0a:67:81:28:00:96:ff:66:0b:64:3b:
f6:29:a4:6b:c5:01:20:af:97:91:21:31:91:7e:23:d4:1b:ab:
17:e4:ce:1c:13:b3:67:75:a4:95:35:23:e0:bf:54:de:17:fb:
51:14:fa:cd:c5:11:b6:93:6b:c7:7a:a1:ca:ae:dd:ef:5c:e5:
27:c3:74:36:b7:3d:cd:ec:fa:da:06:ee:dc:a8:db:01:77:4d:
15:94:b6:a8:d5:c7:3d:7e:cb:e3:60:13:e4:03:c7:ed:7a:2f:
47:d1:63:50:67:86:10:b3:5e:fd:11:63:98:ad:50:85:ba:8c:
2b:01:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:00 2025 by rpki-client