Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: ePBH1h0V4Ie0SN5oZPwy450qnJhnyun323bjXquiE4k=
Subject key identifier: 81:41:DF:8E:9B:25:B2:AF:56:23:E5:B8:DF:CA:CD:B9:AD:DE:3A:9B
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 0197B6A05E003FF173D860E82B2306408C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 0663
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: yGSbEqg6wdZJpnoWcZHNnyfNwkn5nS6LtKupiYNFTMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5e:00:3f:f1:73:d8:60:e8:2b:23:06:40:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=8141df8e9b25b2af5623e5b8dfcacdb9adde3a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:60:41:89:be:32:7a:dc:30:55:1a:ad:57:
80:ba:8a:73:12:4c:4f:13:e1:d0:4c:0c:6c:0c:6b:
ae:10:52:a7:0e:f7:a0:2d:11:7c:14:89:94:79:4d:
16:50:cc:76:e4:bc:c5:d0:b0:60:6d:0b:ce:a7:22:
21:c7:e8:1c:76:25:fd:d7:de:16:a2:c3:2f:86:fc:
09:66:e8:4d:35:9e:71:f9:d5:de:b4:20:5c:03:15:
f0:fc:ad:60:a1:8c:61:f9:36:25:3d:12:7a:93:d8:
41:f4:c8:05:5f:ce:65:f7:f2:49:30:8f:2e:08:73:
e2:bd:c9:15:af:71:6b:56:60:cd:d8:ad:e7:0d:0a:
90:d7:c5:9d:97:3f:7e:d0:bb:07:3b:3b:83:32:1f:
42:27:c6:d0:dc:54:75:6a:4f:6f:e1:ac:ad:46:2f:
06:37:2f:7d:48:0c:ed:64:92:99:55:8a:d3:92:f5:
37:7a:a1:f0:e0:69:15:0e:f0:d6:f0:23:44:bd:d1:
77:92:4c:86:0c:2a:bf:32:d5:23:5e:c2:2a:89:e4:
d2:09:38:f8:a1:73:3e:e8:f6:ba:48:ef:7e:52:fb:
95:b5:98:9a:5c:09:86:00:06:61:3d:81:3c:ee:ef:
99:3f:bc:f5:35:6c:dc:1e:b1:0d:60:c2:da:8f:d5:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:DF:8E:9B:25:B2:AF:56:23:E5:B8:DF:CA:CD:B9:AD:DE:3A:9B
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0b:27:e0:ed:be:2b:c6:2e:9a:57:28:7a:73:ed:42:e6:65:
91:ff:c3:a4:4e:62:b9:4f:97:ea:21:85:e4:60:0c:9f:0d:76:
dc:61:64:aa:90:3a:09:11:9f:ba:45:7d:cd:38:cf:41:66:e2:
bc:c9:bd:3c:ce:ba:06:e3:ed:66:78:f9:10:8e:0d:5d:89:32:
78:bd:19:83:aa:13:c6:67:33:e3:58:b1:00:77:dd:89:6b:90:
db:3a:d5:1f:93:c9:52:54:1a:b6:34:be:68:20:94:18:30:cd:
1a:3f:ce:39:41:68:1f:d8:46:8e:e3:9c:d7:cb:1e:ee:11:85:
a5:69:dc:9a:00:7f:cf:8a:a2:6d:d7:ca:6e:aa:83:f8:5a:51:
11:df:45:e7:e0:77:27:e3:4c:03:8d:bc:3a:9b:8e:b4:17:f5:
f4:e0:16:e2:16:59:0d:8f:06:25:b1:86:30:a3:cf:42:78:07:
e1:cc:bb:0b:e2:43:27:d5:01:aa:7b:6d:f9:65:dd:b5:13:74:
51:33:c9:19:9f:17:92:5f:67:eb:92:aa:ac:7b:3d:d2:21:0a:
dd:d3:16:f3:fb:5e:af:fd:ac:7b:11:4f:2a:dd:e4:36:07:12:
36:72:dd:83:e1:d2:0f:c0:84:9c:4f:e5:a1:ef:38:ff:be:0e:
4e:f5:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:02 2025 by rpki-client