Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: MIDcffsqGglmF+gDa4urwBN8dV0BjYScIlpkq2y1/nQ=
Subject key identifier: 2F:9B:E8:AC:B1:0E:5B:41:A1:F5:B1:08:09:62:F0:D6:06:CA:3A:52
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0197CA9550A6C08CDC46B94F3BAD68357B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0F0E
Signing time: Wed 02 Jul 2025 10:01:12 +0000
Manifest this update: Wed 02 Jul 2025 10:01:12 +0000
Manifest next update: Thu 03 Jul 2025 10:01:12 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: c29OuQlncHW1ppN4ZZKNm0i8Kzv9H1LYD3kEIbnOosw=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:50:a6:c0:8c:dc:46:b9:4f:3b:ad:68:35:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Jul 2 10:01:12 2025 GMT
Not After : Jul 3 10:01:12 2025 GMT
Subject: CN=2f9be8acb10e5b41a1f5b1080962f0d606ca3a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:32:43:7f:ac:fc:3d:84:99:2c:ca:51:d2:
49:e4:b1:15:e4:5c:8e:af:03:af:4c:ad:29:bc:4a:
37:78:e4:bf:6c:fa:57:2e:b6:74:28:ce:7b:f9:6f:
99:99:9f:d4:bf:9f:19:72:1b:95:c4:36:32:4c:7f:
ed:9b:95:9e:83:5c:8f:86:c2:15:bf:38:e6:94:77:
73:c1:49:d0:79:f9:e5:26:22:30:7c:d3:32:a2:86:
50:50:87:30:2d:2c:df:2f:bd:01:a1:80:47:f9:e4:
c6:46:c6:e3:28:f6:03:c2:0e:19:9b:d2:12:6d:59:
d9:1a:28:fa:80:a1:03:af:25:2f:54:f2:36:1a:4b:
a1:c4:d4:3a:de:62:eb:7c:07:f7:18:85:7b:e4:ba:
dd:66:5f:15:fd:25:a9:a7:c2:95:03:f3:6c:dd:c3:
cc:a8:4e:8f:3f:52:10:79:da:a5:38:5a:2d:8c:bf:
cf:a9:60:34:ef:18:d0:ea:4e:a9:d8:e1:93:39:c8:
9e:b2:da:11:53:da:58:c2:a2:ad:71:e0:28:68:c7:
33:68:b5:01:e8:f4:25:db:f4:47:e9:6e:34:59:8c:
4a:b4:c8:a3:92:14:d3:1a:f7:23:a3:2e:7f:fc:38:
f4:8f:05:53:fa:d4:d2:76:e4:94:aa:3f:fc:83:5e:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:E8:AC:B1:0E:5B:41:A1:F5:B1:08:09:62:F0:D6:06:CA:3A:52
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:74:5b:d0:fc:d6:aa:57:31:03:fd:81:43:dc:ab:12:cc:
67:c3:96:0f:ef:32:1b:de:56:da:c0:3a:66:7b:20:36:d3:1b:
f8:a6:07:04:14:75:af:7a:c3:f5:95:5b:21:de:06:db:f1:02:
54:7b:b4:43:bf:a1:aa:fd:09:fa:f0:f7:9f:c7:51:ee:89:d8:
ee:38:c0:da:aa:bc:67:7b:dd:29:33:f2:31:6b:59:13:ea:db:
3d:09:2e:df:ff:4a:c6:9e:14:60:28:ac:34:08:61:8b:b9:9a:
3a:a5:6f:9f:e4:a0:7a:5d:5a:86:34:46:c5:f7:58:b6:78:ab:
ba:e5:78:34:84:9f:a4:a1:f4:be:52:ee:be:1c:99:ae:cc:8b:
ed:12:43:21:66:07:52:f4:a4:79:fe:79:0d:a0:ad:44:66:50:
0d:ad:67:f2:ce:c9:5c:bc:a0:ab:45:83:f0:ad:b8:5d:d5:1c:
d3:90:fd:44:ec:b2:98:38:9e:c2:c5:42:45:74:c5:0f:f1:fe:
e6:d6:dd:d3:78:42:4c:19:b7:46:dc:4b:06:7d:e3:57:73:ed:
73:5e:79:27:f2:a3:98:b4:ee:90:d1:ca:91:36:3d:3f:1b:40:
4c:f6:e7:c1:20:2d:a5:b3:a6:11:81:38:8c:ed:22:27:7e:0f:
65:d2:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:34:23 2025 by rpki-client