
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier: Y62LgwMRimhAMXB0oVIsv4HwCXXQltqrXQzGA/Y95UI=
Subject key identifier: B8:A3:58:AD:70:9B:C6:A6:15:DE:9C:F3:9B:B9:D5:66:38:73:21:1D
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial: 0197B7456F41EB92DBA966A3420607809A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number: 01DF
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: 2GoNX+783TYYn/AvVWlmcCWF3XPVAUTKZZMCHOnP1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6f:41:eb:92:db:a9:66:a3:42:06:07:80:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=b8a358ad709bc6a615de9cf39bb9d5663873211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:a2:8b:2a:a3:50:ba:f5:9d:28:81:1d:ac:
8a:b9:5f:c1:ed:14:15:ca:56:39:0d:a3:73:a4:7d:
29:3c:f3:36:db:1e:2f:a2:d0:62:0c:37:92:f6:36:
9b:21:47:00:88:9f:a4:aa:a3:c6:8a:b7:27:61:0f:
1a:03:3f:ce:81:2e:91:6c:c8:ad:9c:59:77:4a:6c:
5f:89:d9:03:5b:21:69:27:e3:c7:b9:32:ae:db:c0:
43:cb:83:1f:83:47:0d:f3:c8:af:73:bb:26:ee:7d:
0f:fe:50:7c:71:47:2b:47:7d:b4:0c:db:62:8f:d9:
2b:cf:b5:a0:2e:46:7c:4c:3e:c5:c3:5c:35:6d:0f:
c0:1d:54:21:eb:f5:e0:29:cc:84:58:28:b3:38:57:
ff:5d:7f:a9:51:10:db:dd:bb:76:b0:ca:07:27:44:
2e:b6:3b:50:52:a0:ff:0e:69:38:e3:fc:1b:6d:97:
03:6e:c3:9a:06:71:66:f2:88:d0:a5:14:a5:4b:44:
a9:0f:8a:bc:44:0b:31:71:63:d5:c4:71:24:17:9f:
24:fe:b0:39:35:0c:d7:6e:22:28:da:eb:7a:12:65:
55:ae:13:f1:58:f4:af:2e:2f:d1:0f:11:11:9a:fa:
73:0b:42:64:e0:79:d5:57:8b:d0:cc:a7:59:59:23:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:58:AD:70:9B:C6:A6:15:DE:9C:F3:9B:B9:D5:66:38:73:21:1D
X509v3 Authority Key Identifier:
keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:c5:41:a1:b1:39:7a:22:07:f6:dd:37:9f:42:89:d0:93:
be:7a:26:31:c5:75:d6:37:ff:cb:20:2e:61:85:87:20:08:55:
08:26:22:57:fd:67:71:0e:34:0d:ae:b7:e3:e8:9b:4c:75:ba:
02:d5:43:c9:5c:dd:df:18:d7:ec:2a:55:65:f8:22:f9:dd:ed:
34:47:ef:4f:77:b1:6a:b4:06:d1:ce:16:a2:8d:bc:30:ac:ef:
63:f7:6e:04:91:97:e5:17:fe:8c:a5:93:5c:2f:25:7d:36:75:
61:2f:00:49:83:f5:29:e6:c8:e9:fa:31:c0:76:84:4e:97:6c:
5d:4e:39:fd:4f:b0:5f:c0:6a:3f:21:c4:d4:d4:00:2c:f0:6f:
d5:c6:7e:d8:d9:88:85:ce:c9:26:bf:ad:ce:2d:52:d3:29:32:
66:9a:7b:ea:0a:9a:ec:a7:90:19:1c:ec:72:ab:6d:e6:36:ca:
21:cd:2a:54:f6:92:45:40:3d:5a:01:70:c0:4a:1b:0d:60:89:
8b:d9:42:8e:8f:b2:85:a0:4e:6c:c1:50:d0:b0:fa:ef:07:a3:
d0:24:37:c8:18:ca:0c:fe:84:52:b4:5c:33:22:a0:ce:60:94:
35:66:6f:29:ca:2b:01:2d:9d:a7:8e:4c:5a:66:2e:75:11:8c:
04:40:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:32 2025 by rpki-client