Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: dxfGeR5ki+EN5tRafCSxWAub1Gl7UR7KiRAyZAMijio=
Subject key identifier: 9A:B2:19:37:E0:B7:00:BF:BA:C4:16:43:0E:38:CF:08:7F:7B:64:DC
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 0197B9D90B835535EA10C1A4EC8D855042CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 159D
Signing time: Sun 29 Jun 2025 04:01:38 +0000
Manifest this update: Sun 29 Jun 2025 04:01:38 +0000
Manifest next update: Mon 30 Jun 2025 04:01:38 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: uXwTKXkzmyMIYZzHH2MiZccLyrl+20gFXMqmQlgsvdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:0b:83:55:35:ea:10:c1:a4:ec:8d:85:50:42:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Jun 29 04:01:38 2025 GMT
Not After : Jun 30 04:01:38 2025 GMT
Subject: CN=9ab21937e0b700bfbac416430e38cf087f7b64dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:48:44:54:86:83:e0:fe:20:3c:bb:99:4d:
14:bf:60:5c:80:8d:cf:fb:21:52:d1:03:ba:73:ff:
66:a8:37:9e:8c:67:25:3b:25:64:8f:0a:ed:b3:54:
ae:a3:b3:e5:99:e3:ca:5c:af:f4:23:a3:b1:47:29:
08:d6:ef:b1:66:69:b3:eb:02:61:1d:75:1c:59:43:
a7:4f:ba:cd:86:0b:ed:e2:b1:63:09:12:2e:48:e2:
76:bc:21:52:53:8a:ca:ce:4a:d0:fe:e4:77:f0:b8:
1c:c2:c7:86:7a:0c:30:f6:5b:92:8a:84:8c:63:ff:
02:2f:96:2a:a7:e2:b2:1a:2a:86:d5:55:68:47:37:
62:e7:61:48:22:3d:22:e3:be:db:f8:b8:b7:33:0b:
7e:3a:d2:83:d7:12:89:8d:e5:10:19:c0:81:b0:a7:
8d:c0:07:25:63:ad:f6:47:74:3b:d7:68:c7:fb:36:
26:b1:db:e3:06:9c:e2:39:bb:76:aa:26:c9:61:5e:
2b:15:b9:c7:0c:77:e7:f3:20:7d:a7:23:5b:b5:00:
1f:4d:95:29:ee:bf:ef:a8:96:ef:a5:9c:2a:1e:6a:
29:f0:56:ff:70:aa:d4:d9:b3:9c:2f:5a:42:02:cf:
48:4f:37:11:28:68:93:f6:6f:22:6b:ff:91:fe:55:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:19:37:E0:B7:00:BF:BA:C4:16:43:0E:38:CF:08:7F:7B:64:DC
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:63:9e:a9:37:62:ba:bf:67:c2:63:51:d1:e4:f4:4f:93:
fb:f4:41:47:c3:ea:01:67:d8:56:46:33:09:c6:48:e2:ba:23:
c8:07:76:d5:0c:06:85:16:3f:9c:f6:5e:d1:82:9f:62:68:0f:
09:77:1c:7b:fc:66:80:a1:19:1b:0c:3f:9d:09:88:a2:27:e8:
05:42:37:67:e0:e5:f6:af:29:f3:2e:ec:88:95:82:70:f3:95:
cc:e5:a9:6f:a9:7a:bb:14:78:f1:c1:07:f6:db:45:36:2f:fe:
8f:59:c4:33:fd:cc:b9:86:0d:43:9c:1d:06:d4:ea:45:d0:e6:
69:0a:66:fd:7a:58:de:74:ea:2a:0e:21:10:ac:8d:6f:b0:c0:
20:df:a7:83:48:1f:0d:99:7f:5d:de:08:07:c3:02:de:6d:92:
6c:c2:23:41:83:45:a3:cb:f6:27:1c:0f:70:97:ec:b3:3a:10:
b4:e6:60:5a:f8:6f:1b:18:b7:cc:43:67:b1:d6:dd:f4:e8:84:
68:a7:87:90:c5:d6:db:43:b3:13:3f:d3:c5:fd:ae:0e:32:7f:
67:47:c5:27:76:c9:85:a7:58:aa:a9:19:28:46:89:69:59:f5:
ff:b6:0a:ab:94:bf:36:e1:4b:99:8b:e0:b2:b5:92:7e:8a:b1:
d6:c5:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:48 2025 by rpki-client