Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: U3vAydMDtL/G+DRke2z734Sxva6QxohQ6TByLGly0Ms=
Subject key identifier: 28:A3:F0:78:2D:01:D1:63:68:D4:A2:D9:D2:7F:DF:C4:70:7C:FF:0F
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0197B7B36CFC913F777D087594A6F16BA34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 13C2
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: zTDwJGXv/xxb8OUuve1nM16oKIKHI7/6cR3qSKN9NE4=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:fc:91:3f:77:7d:08:75:94:a6:f1:6b:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=28a3f0782d01d16368d4a2d9d27fdfc4707cff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:f9:f8:69:ee:d8:9d:9b:80:c0:c5:30:e3:
f9:3a:e2:cd:eb:8e:e2:17:d9:ed:45:71:1c:db:a2:
0e:66:0b:6f:f3:bb:d8:05:7d:29:5d:08:fe:26:cf:
59:ab:2c:6f:4f:e5:04:7c:15:ab:bd:d3:0e:99:29:
9c:9e:59:53:bb:aa:e1:4a:8c:dd:c3:ce:e9:9a:ff:
51:f7:84:77:a3:ed:17:3b:bf:41:fe:b1:a5:a6:45:
5a:c4:0b:57:2c:12:0c:0c:b8:0b:ae:59:72:28:de:
13:78:02:06:2e:3b:38:73:e6:04:fb:26:3b:6b:ba:
d2:72:0f:40:da:ec:fb:35:61:c9:5f:98:64:bc:df:
be:f8:17:6d:e6:f3:00:40:97:d6:49:3c:26:08:2a:
93:bc:42:46:3b:94:f0:29:14:ad:6e:3b:bb:8d:f3:
79:95:1a:85:e7:f2:e2:07:2a:af:8a:33:59:05:6c:
fa:5a:59:22:57:c1:bd:f6:d1:2a:8c:92:38:7f:98:
65:48:16:bb:c4:4e:2a:ad:ab:bd:7f:3e:e2:dc:7d:
5c:a6:aa:fc:97:08:f4:2e:c0:6a:19:e0:9f:d0:15:
e2:d5:f9:8b:1d:2c:ad:0a:4c:17:c1:ea:a4:c4:3b:
8f:3c:a1:9b:91:d4:d8:e7:7f:17:72:84:2e:01:ae:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:F0:78:2D:01:D1:63:68:D4:A2:D9:D2:7F:DF:C4:70:7C:FF:0F
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:99:b2:a4:84:72:9b:9a:3c:24:59:d0:e3:b9:d8:70:bf:
d6:ac:fb:c1:90:38:96:b4:c3:11:ba:37:7a:00:b4:b4:d3:35:
ee:2c:38:c9:36:d3:ef:42:66:82:85:5b:a3:c1:1f:d3:de:30:
8b:2d:af:ad:ac:db:a9:f6:5c:d0:78:ec:3b:20:d1:59:7a:e2:
dc:cf:3d:b9:9c:2c:5d:20:ac:d1:2a:c9:de:fe:39:14:0e:6b:
87:2b:b5:0c:a0:d9:5d:56:98:6b:5c:5e:9c:68:0a:88:81:9b:
2a:2d:bf:11:90:30:96:3d:28:6f:ea:1c:bc:75:17:b9:e9:b5:
03:df:da:16:ba:89:56:db:ef:0e:f3:d0:49:d5:d9:95:2b:90:
34:6a:6a:ca:3d:9d:c6:90:8b:0e:23:61:3e:9e:fe:82:17:9a:
aa:6c:ff:54:e8:f9:05:16:8b:02:bf:8f:f7:03:7a:50:2f:66:
36:ff:48:a9:a3:a9:f6:a2:14:f8:16:77:94:01:db:0a:53:da:
78:e2:f6:bb:e3:75:bd:d5:89:c2:29:00:34:39:45:23:01:ea:
3e:65:8b:37:f4:42:ab:c6:c7:24:86:9b:25:15:bc:4c:19:49:
7a:f0:12:12:22:9e:d7:6f:14:32:32:1b:88:0c:94:33:c0:f9:
cd:95:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:04 2025 by rpki-client