Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: JNsYkMvUOHOqPzDNXG1dyq9LD8Bmr6pDjwZHvYpbPk8=
Subject key identifier: 89:20:32:17:F0:91:32:F6:9B:2B:DB:6C:9D:F0:7F:23:56:F6:C3:DB
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 0197B6A07A5777420967C3AA625CEE35644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: kvk78858F38T4vLCB5GFTy6yQ8m0MnLEfmEkKPTcY8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7a:57:77:42:09:67:c3:aa:62:5c:ee:35:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=89203217f09132f69b2bdb6c9df07f2356f6c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:70:e2:06:e3:51:e5:6e:48:c5:c0:01:7c:
fb:bb:54:ca:32:4c:6d:02:e9:c5:9d:a0:eb:5b:2f:
4f:c4:48:a7:aa:b2:e1:3c:b9:0b:c8:32:84:90:4c:
e6:31:3b:f5:16:d2:cf:8f:4f:ec:3e:66:0f:7c:45:
80:a5:5c:82:31:47:d9:96:43:96:45:34:94:7d:6d:
33:ef:0d:25:e6:ca:6a:5c:0e:75:2b:58:7c:9e:97:
7b:7d:33:c7:8e:7a:09:82:3f:ff:d7:4e:51:22:65:
9f:53:51:b5:84:14:f4:96:75:86:61:0c:2b:0c:2c:
d9:68:86:66:3a:84:ab:93:a4:26:59:a4:cd:cb:c4:
a8:f3:b7:6c:16:07:d1:aa:cc:9e:6d:de:97:7d:f0:
1b:fe:55:04:ab:bc:69:b9:71:89:06:e1:0b:ed:e4:
5e:2d:a0:7d:bb:e1:d9:b7:0a:4d:a5:f2:1f:d2:fe:
33:f0:04:de:01:c9:4e:d6:60:b4:94:26:0c:5a:f7:
1f:fd:6c:ba:e1:1b:bc:1f:84:eb:3d:89:d6:75:97:
f1:a2:79:ad:9a:47:e9:60:b1:84:00:aa:70:91:1d:
5a:18:84:c4:42:1c:72:62:f9:16:fb:e5:fa:f0:fa:
04:16:0c:a2:02:cc:88:d5:6b:c0:27:90:60:ca:9b:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:32:17:F0:91:32:F6:9B:2B:DB:6C:9D:F0:7F:23:56:F6:C3:DB
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ec:d7:c6:ff:78:03:e2:82:5f:1c:e3:7e:8b:01:e7:89:6a:
2e:23:70:5e:41:af:65:3a:cb:42:c0:47:b5:96:55:c6:4b:f9:
ff:64:78:2b:8e:97:e0:29:74:73:5a:20:d9:ef:62:54:b6:2c:
21:7b:92:d1:3e:a3:e2:bc:fa:a6:c5:89:ed:53:98:0b:f9:67:
13:84:34:83:f2:00:de:0b:0b:29:56:9c:e3:aa:59:d0:ad:db:
d2:57:3b:d4:2c:9b:88:d2:dd:ce:d9:ec:34:4c:59:f0:03:bf:
0e:c9:e0:19:dd:ca:45:86:31:f3:05:1a:13:13:7a:df:f0:7b:
7b:28:6c:d9:06:9e:a3:11:e2:c9:e8:16:54:4c:7e:c6:6f:fe:
11:c8:0c:55:59:88:1f:e9:31:10:8c:09:1c:c7:4c:21:29:76:
d5:f1:eb:43:46:c2:f1:8e:dc:30:e7:eb:24:10:aa:85:e7:76:
61:98:c1:83:08:fa:9a:72:e3:cd:79:71:a0:0f:b7:9d:12:e3:
cb:d1:40:7e:be:11:6d:a0:8f:7a:05:34:e0:9f:30:e8:0d:d5:
11:9f:8c:59:61:6e:b2:55:df:00:fa:75:82:e6:9e:21:d6:9f:
f0:f8:f1:bd:a0:e9:cf:69:04:30:62:11:e8:18:4d:f1:58:b6:
0d:20:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:37 2025 by rpki-client