Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: yli0S1OhXd45d6kG4onS1FIjhnGC2VV/vX/6yOSn/Gs=
Subject key identifier: 65:8A:27:37:06:00:B4:53:8A:90:7B:7A:16:CD:C0:07:C9:97:A7:92
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 0197B70F02163265B4F06BAFF89CE7E21C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 0162
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: augYnSdoiZxCwdhzJshl56MedljIVvxn9t3vTRbvqJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:02:16:32:65:b4:f0:6b:af:f8:9c:e7:e2:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=658a27370600b4538a907b7a16cdc007c997a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:c1:d9:97:3f:70:b5:64:43:fe:d1:b2:e3:
ef:85:70:64:1d:f1:4a:3b:05:5e:f5:c7:b6:9d:13:
1b:34:c8:20:8b:5f:31:4f:2e:17:ee:89:e0:d8:ce:
ff:4f:d7:f6:fb:17:93:73:0f:2d:70:b4:1a:95:2f:
aa:21:67:7c:cf:be:3e:51:42:05:94:31:80:e2:e0:
ea:97:22:90:9f:c8:b0:fd:9f:bb:47:0b:23:e6:5d:
99:cc:a4:e5:14:41:21:e3:f5:4d:19:2c:ad:89:32:
6d:88:49:7c:a1:80:bd:32:af:1a:2f:ca:96:9d:3c:
7b:dd:db:13:8d:55:74:b8:e2:96:55:ef:25:82:cc:
76:29:1b:83:8f:b1:f3:33:92:14:09:b6:3d:3a:e8:
a0:a0:8d:c6:3b:9c:c2:d3:69:ca:dd:fb:e6:d5:d2:
a3:a6:ab:17:7f:8e:f3:36:f0:14:00:8a:c0:67:01:
6e:50:2d:21:78:e7:da:df:a6:db:d1:02:fc:cb:d2:
82:8a:17:6b:50:9d:30:bf:94:ad:1d:bb:ab:ad:9f:
5e:dc:d3:2c:e3:fa:24:28:c2:36:f7:c8:82:a6:75:
07:1c:09:88:30:7d:07:07:f5:b1:d4:f2:80:ac:18:
c4:89:29:ea:fe:23:6f:3b:65:cc:80:d4:52:2f:e8:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:27:37:06:00:B4:53:8A:90:7B:7A:16:CD:C0:07:C9:97:A7:92
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e6:63:04:ca:19:1e:f0:fd:a7:66:da:40:37:ad:33:3d:3c:
f7:b6:ee:11:ee:07:fc:a5:b5:a3:e7:c0:ea:4c:b5:42:52:48:
8d:e7:9b:93:3d:7b:1e:09:53:b4:bc:4a:86:f0:e1:0d:14:40:
2e:ad:c9:86:ef:9f:fc:00:02:cf:1f:c8:6f:b1:9c:37:c1:6e:
b5:00:b5:ae:93:7e:b3:3f:21:c3:04:b7:1d:d6:74:9e:40:7d:
b1:f4:6f:11:7b:00:05:7e:78:87:da:68:92:38:6d:d2:00:30:
42:fe:fd:43:d3:0d:99:b0:f1:b8:7c:43:c0:b4:47:b2:ac:3b:
30:c8:84:ce:4f:82:4a:26:2b:8d:47:5f:ee:77:f1:f6:1c:b9:
06:69:26:6e:ee:bd:3c:03:13:f0:6c:68:b1:dc:b9:fe:fa:e2:
a3:ff:9b:5b:a2:f5:2b:44:18:17:18:e0:b2:04:a0:9b:88:cb:
94:4c:92:2f:98:76:01:ec:35:71:89:85:2e:71:14:ab:5c:66:
c6:7b:09:05:69:bd:dd:da:af:13:22:33:a9:4b:7e:35:4f:b9:
8b:3e:20:97:f6:e8:bc:e1:65:c4:4c:13:d3:2a:03:0c:ce:7b:
dc:1b:00:15:ec:9c:41:5a:f7:52:d3:cb:9c:33:83:81:40:01:
65:c6:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:30 2025 by rpki-client