Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: +AEjggMTXAwfKZAi5Tj7DDKA31tHaHxUpNGK3Pn6ndY=
Subject key identifier: 5B:0F:E3:A5:B9:31:A8:1B:DB:52:8E:87:D7:03:BE:62:C5:C3:23:E1
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 0197B70F112E8F2869DE17E839DFFEC1621C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: D3
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: 84HcSt7TNRku9lZ95nBLXEwwnocDDSyGfURi7PZPohk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:11:2e:8f:28:69:de:17:e8:39:df:fe:c1:62:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=5b0fe3a5b931a81bdb528e87d703be62c5c323e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:80:d5:e3:fb:fb:af:f8:cc:38:ea:e6:5f:
d6:97:68:b0:77:a1:fa:13:b3:6d:f2:fe:cb:a3:76:
7b:06:49:21:d7:c9:e0:fa:37:eb:02:11:07:40:fc:
de:28:d4:85:0f:08:e0:a3:82:3b:5b:89:c8:51:c8:
01:88:e8:64:8b:33:a5:39:06:bd:48:ef:ac:c1:0f:
ce:80:29:46:20:79:98:52:06:1b:22:b2:a8:3f:e3:
d4:01:af:c7:84:6a:60:89:f5:1f:9a:ff:d5:56:b0:
fc:7a:75:e1:a1:19:74:41:fd:8e:ad:90:d8:74:67:
f5:be:1d:0f:a7:92:ad:a1:39:ea:18:c2:6e:46:3b:
40:c2:73:f1:18:60:5d:a0:97:32:b8:e0:aa:85:29:
fd:75:6d:6c:0c:04:f3:1d:a6:71:02:e8:58:e8:32:
00:d8:e4:b1:ef:5b:78:4a:1f:93:43:25:b0:2e:1c:
a6:69:e0:a5:f5:b8:88:c9:2c:9b:d5:61:d3:e2:2a:
f5:f2:9b:2d:ae:ce:30:17:53:45:78:54:54:9d:4e:
52:b8:a3:0c:ce:2a:3b:3d:1b:36:eb:94:38:e2:21:
f7:1a:d2:0f:5f:a7:19:16:07:4d:31:0c:bb:7e:e4:
38:15:f3:8e:38:29:b7:00:43:d7:97:f9:30:c8:0c:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:E3:A5:B9:31:A8:1B:DB:52:8E:87:D7:03:BE:62:C5:C3:23:E1
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c0:40:f6:30:0e:15:43:e6:85:4f:32:59:c9:3e:34:fe:9e:
96:05:61:d1:c4:bf:a7:17:70:05:44:99:ac:01:16:fa:71:b8:
4b:4b:b1:0c:d7:7a:45:c5:80:db:15:6a:03:47:40:2f:7a:d8:
f9:f6:02:c3:ab:07:b5:d7:c9:78:a5:a8:de:a6:38:44:a5:11:
e6:14:6c:6d:ec:23:d6:ba:a4:01:72:07:65:b1:62:8d:55:86:
bb:1f:58:1c:87:aa:80:39:60:3d:60:65:e3:64:31:36:51:b9:
22:42:db:3e:8d:68:a3:af:8f:20:d5:e3:26:a7:cb:77:56:86:
79:8e:34:ec:e1:6b:b6:04:52:8a:a1:84:24:f6:d4:b2:ea:31:
f1:f8:60:cd:a8:8b:7b:2d:51:eb:d9:39:00:01:d9:d0:a4:c7:
cd:5f:5f:1a:f7:20:cc:88:1e:4c:02:11:0d:0c:2f:07:dd:16:
0c:6e:3e:66:76:82:a0:92:ae:35:5d:23:64:2c:aa:ee:fa:1c:
f3:dd:e8:19:63:f6:45:03:f3:f1:40:fb:59:dd:1b:ba:13:6d:
47:0d:49:f7:91:a5:da:7a:e9:4a:c8:23:05:99:9f:05:40:ca:
3c:f5:46:d4:b9:60:b7:6c:7b:05:37:9e:95:16:26:04:b9:b3:
c0:17:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:20 2025 by rpki-client