Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: zCzeigxS5BN4RT/A4mDCCvYHu0qFzcKYeMuiuqtuJXw=
Subject key identifier: B3:D1:48:2C:78:79:3D:FD:EF:6E:A6:D7:E0:DB:D6:58:A7:D0:BB:3F
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 0197B7EA28BEA16CF2D9C884A50498D45999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 059C
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: szBV4/rUk5/BSRutwl/pYD5tN5NeZIq4bKEaOdnTf0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:28:be:a1:6c:f2:d9:c8:84:a5:04:98:d4:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=b3d1482c78793dfdef6ea6d7e0dbd658a7d0bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:20:8c:43:ae:c1:54:70:32:c0:a6:fc:95:
77:6a:a0:10:d8:16:94:51:95:da:9f:7a:ec:ba:8d:
bd:f4:3c:46:d4:a8:bb:8a:b1:a2:7b:75:5d:44:eb:
55:3d:6b:b2:82:e0:0b:f6:ea:8c:32:08:5e:34:2e:
2b:4e:d5:4d:46:f0:08:a6:1a:fc:6d:67:ba:52:71:
bd:4f:9a:7c:56:f2:c2:60:d4:9f:a1:e7:15:6d:2e:
09:c3:16:e1:23:00:6c:e7:e0:3d:36:33:51:de:ec:
74:7b:a7:45:77:57:f8:e1:1f:62:12:d8:a0:8d:4b:
f7:88:1f:5a:f3:e9:06:f0:02:75:7f:89:85:4e:34:
52:37:35:f5:40:16:b6:53:ab:11:8c:c7:da:08:9a:
c0:7a:64:d6:45:b1:83:71:b6:22:90:8d:dc:28:7a:
f9:a3:f4:0c:fd:50:cc:8e:33:27:bc:5c:f2:35:f5:
d6:56:d2:08:9c:e9:c1:1c:25:eb:59:68:5f:bb:aa:
56:33:18:b6:e3:cf:1b:b4:88:17:95:3f:50:ce:cf:
71:f6:bf:c3:5f:db:85:d7:1d:01:4a:d6:b8:a3:a5:
31:a4:7c:91:1d:eb:55:6b:db:7f:f1:3a:58:2a:76:
fe:b8:c7:c9:3b:09:7a:d7:8a:6c:a5:49:d5:4a:46:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:48:2C:78:79:3D:FD:EF:6E:A6:D7:E0:DB:D6:58:A7:D0:BB:3F
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:a5:7f:d1:e5:84:5f:7f:d3:ab:9a:61:3c:4a:50:bf:fd:
c5:19:1a:3c:91:33:5c:4e:6a:95:ec:2b:2a:b9:1e:88:0a:9b:
6d:eb:18:20:97:26:ef:63:32:08:28:bb:a9:e2:42:35:2a:d4:
96:f5:b0:18:84:70:14:f1:bc:b6:c7:87:dd:e5:65:6d:ff:64:
fe:19:56:57:67:db:84:9f:2f:f2:f8:39:5e:0b:da:d9:99:69:
eb:8d:af:a5:6e:43:16:0b:b1:89:2f:87:2e:08:72:d0:5f:a3:
21:be:d6:d7:96:1b:02:60:07:c0:da:96:5e:6e:a0:94:11:d5:
f1:38:27:11:8d:e7:27:43:38:c7:bb:81:eb:5f:77:3d:c7:89:
0f:3a:26:c7:a3:9a:42:ba:2a:4b:9d:4e:2e:13:2d:f9:19:b6:
aa:c0:f5:ee:97:49:ef:2c:d0:5e:aa:d9:56:4c:fa:3c:16:b2:
ed:cf:54:24:e8:b0:a4:96:f9:43:ad:58:5f:4e:2e:76:64:3e:
70:c6:73:fd:d5:d5:82:3a:b1:08:67:79:72:36:2b:9d:c5:94:
fa:21:34:04:76:01:38:1f:24:57:9c:d2:51:56:4d:29:47:e7:
c4:81:30:da:82:34:d1:4b:2a:cd:02:6c:5e:25:16:4b:c9:d3:
11:de:2b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ii+oWzy2ciEpQSY1FmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjUwNjI4MTkwMTA1WhcNMjUwNjI5MTkwMTA1WjAzMTEwLwYDVQQD
EyhiM2QxNDgyYzc4NzkzZGZkZWY2ZWE2ZDdlMGRiZDY1OGE3ZDBiYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9YgjEOuwVRwMsCm/JV3aqAQ2BaU
UZXan3rsuo299DxG1Ki7irGie3VdROtVPWuyguAL9uqMMgheNC4rTtVNRvAIphr8
bWe6UnG9T5p8VvLCYNSfoecVbS4JwxbhIwBs5+A9NjNR3ux0e6dFd1f44R9iEtig
jUv3iB9a8+kG8AJ1f4mFTjRSNzX1QBa2U6sRjMfaCJrAemTWRbGDcbYikI3cKHr5
o/QM/VDMjjMnvFzyNfXWVtIInOnBHCXrWWhfu6pWMxi2488btIgXlT9Qzs9x9r/D
X9uF1x0BSta4o6UxpHyRHetVa9t/8TpYKnb+uMfJOwl614pspUnVSkanoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPRSCx4eT39726m1+Db1lin0Ls/MB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9Wlf9Hl
hF9/06uaYTxKUL/9xRkaPJEzXE5qlewrKrkeiAqbbesYIJcm72MyCCi7qeJCNSrU
lvWwGIRwFPG8tseH3eVlbf9k/hlWV2fbhJ8v8vg5Xgva2Zlp642vpW5DFguxiS+H
Lghy0F+jIb7W15YbAmAHwNqWXm6glBHV8TgnEY3nJ0M4x7uB6193PceJDzomx6Oa
QroqS51OLhMt+Rm2qsD17pdJ7yzQXqrZVkz6PBay7c9UJOiwpJb5Q61YX04udmQ+
cMZz/dXVgjqxCGd5cjYrncWU+iE0BHYBOB8kV5zSUVZNKUfnxIEw2oI00UsqzQJs
XiUWS8nTEd4rQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:59 2025 by rpki-client