Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: nNY5OwGBPxkO1wqO96gSQ9fuVfJCysBuOUfh0rFeBHo=
Subject key identifier: 26:97:70:0C:39:4A:6F:3B:C5:0D:4F:61:6D:B7:22:6C:6C:9D:CC:AA
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 0197B7EA5BB52B64FDA305BDA008E2276EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: /JVeXhWXNwU9hSDVPBbzySv0zJerIkN1kGQT62gidxk=)
2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5b:b5:2b:64:fd:a3:05:bd:a0:08:e2:27:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=2697700c394a6f3bc50d4f616db7226c6c9dccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:e9:ff:76:2d:98:a8:80:e5:4f:a9:7e:98:
8e:42:46:9b:3e:54:a5:09:2e:c2:b4:11:81:16:d8:
df:a0:4a:16:33:5b:d2:38:27:be:59:35:62:e2:5e:
ac:c2:eb:6b:e1:f1:2b:10:b1:ec:76:63:7a:32:b0:
00:22:07:cc:55:3a:26:e7:b8:7a:95:f7:78:b7:b2:
85:be:29:1e:44:89:19:d4:f1:d3:68:3c:1d:3a:86:
eb:5c:31:2b:ca:7e:a5:83:75:f0:48:0a:56:eb:f9:
30:91:5f:d8:ee:5c:73:a9:17:57:ee:89:2a:8c:34:
b7:fc:57:f2:6a:e9:c8:dd:3e:a8:2d:e6:2a:3a:4c:
3c:44:7e:bc:59:b8:87:c8:76:5f:6f:b2:87:c5:c1:
35:b5:4e:70:a3:4e:ad:05:62:8e:73:37:3e:10:f6:
f4:e0:8a:39:db:b6:75:bf:50:d1:ca:d6:9c:50:8a:
51:53:ee:09:ea:7d:1c:d6:00:6d:5c:34:e9:f2:f5:
05:e3:a8:0d:11:00:7b:c0:5f:ed:42:68:ae:be:c4:
76:be:fe:b2:6e:a6:2e:ff:b0:e2:07:b3:61:4b:b0:
fc:56:91:6d:63:13:d4:af:db:00:3d:72:40:3f:3c:
da:45:12:f1:2e:c8:05:e1:bf:d2:a9:2f:a0:83:f3:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:70:0C:39:4A:6F:3B:C5:0D:4F:61:6D:B7:22:6C:6C:9D:CC:AA
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:29:0c:54:e9:e4:42:52:e8:c8:81:cf:b1:db:8b:ce:18:c6:
43:3b:46:a0:36:58:1a:cf:45:8a:d1:8c:be:53:bd:c0:4e:af:
3a:d5:52:5b:f0:99:8d:e4:24:ec:9c:a7:d3:59:b8:3a:71:64:
f4:17:b1:c5:b2:0a:da:9f:9e:72:90:a5:b5:d3:a8:00:6d:8e:
82:1a:9b:86:42:27:e0:6b:e3:c9:a8:c3:87:5a:3f:4a:e0:58:
60:b3:4f:68:b9:15:34:50:e1:39:af:e8:3a:d7:0a:d6:eb:c3:
f7:1e:14:09:32:24:ac:17:6f:a8:4d:e6:01:41:67:2e:7f:b6:
99:16:01:db:97:ba:b7:5f:9d:5a:5f:80:e2:d2:35:dd:d5:a1:
3d:85:2d:e2:97:84:0b:3e:61:c3:ec:b2:67:37:a8:5e:e2:a1:
9d:88:75:f3:8d:5d:83:02:b2:05:22:e0:3e:8b:56:11:b6:82:
b5:b0:2c:c4:28:10:ed:5f:28:a4:45:12:27:7d:54:a1:95:44:
68:8a:63:f1:67:8e:d9:f7:d4:aa:05:a4:c7:d2:84:66:4c:22:
56:c0:26:68:82:a1:ea:14:98:d0:08:47:7f:ad:fd:82:db:2b:
92:37:1a:b8:86:7e:88:68:e5:19:61:80:80:83:3d:5a:59:4a:
d8:63:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:18 2025 by rpki-client