Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: pGH1JmsFe7WUX9R6kiBzIwvUidQNlZxIFmbBM5/Fm2U=
Subject key identifier: AA:6D:9A:AC:24:1B:31:BC:58:70:D8:A5:C6:B1:15:D2:E4:EE:0E:DF
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0197B77CA1DC4726310EBC363AC3781E3267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 3/KO0bO92mMCJAX/kF6dfyrpydI/NOrZP0t/JUYT/Zo=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a1:dc:47:26:31:0e:bc:36:3a:c3:78:1e:32:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=aa6d9aac241b31bc5870d8a5c6b115d2e4ee0edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:ec:05:db:fd:56:07:37:f4:ed:4d:8d:05:
06:07:c7:0a:7c:3d:12:d4:a8:48:d5:43:6b:38:0a:
d6:b7:dd:92:c2:0a:44:58:c1:32:a9:2f:8f:eb:ab:
b9:e8:e7:e9:fb:a7:d5:9d:3f:00:6e:26:f1:89:03:
b1:f6:25:e2:86:14:37:ff:f1:a1:4f:4f:62:62:34:
bf:84:cb:e7:0e:05:49:e0:9d:5b:0b:1d:49:d3:c3:
1d:d4:4f:bf:45:eb:85:3f:e4:4f:e7:7d:da:2f:ea:
79:54:50:0d:4b:60:e6:bd:33:96:49:8a:29:1d:95:
fb:09:fc:0b:3d:44:f4:1e:61:02:8e:51:25:d9:fe:
6e:86:fc:f2:4b:81:2c:08:66:77:a4:06:fb:ce:04:
34:86:78:c0:bb:91:cc:1b:2a:29:c9:77:33:8d:04:
a2:1d:6d:53:0a:8b:4f:ec:44:36:2d:26:7b:c3:0f:
42:74:64:35:e8:25:9d:6d:96:5f:16:f5:cd:84:a4:
fc:1a:df:55:93:86:6c:6a:36:7d:a6:e8:d2:b9:8a:
f4:9f:76:23:50:f0:93:79:23:cf:f2:9a:fb:eb:d8:
4d:f3:f3:ed:91:7b:32:9c:21:3d:ec:80:fb:39:b8:
43:ae:b7:53:ea:14:09:ab:c5:e6:3f:be:6b:8f:b5:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:9A:AC:24:1B:31:BC:58:70:D8:A5:C6:B1:15:D2:E4:EE:0E:DF
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:44:cc:9f:bf:97:d3:26:ab:5d:39:52:ca:38:d7:ab:fe:df:
ac:63:dc:87:ad:1e:22:4f:9e:72:87:49:32:34:21:20:7e:6e:
4f:23:52:e7:96:69:36:d6:d9:6f:a2:19:fa:7e:4b:5e:c2:80:
69:ed:03:41:ee:c0:32:93:92:2e:ae:6e:59:02:c8:22:bc:10:
c0:14:38:2e:d8:39:3c:40:2e:d3:89:8a:9c:7f:63:91:33:1e:
d7:43:0b:9e:72:f6:12:c1:c1:a3:d1:60:97:33:60:14:96:65:
c0:5a:86:a1:89:07:af:27:06:a7:7f:71:52:d0:b1:95:ef:0f:
2c:ec:62:88:96:2d:a4:a5:c9:33:73:61:6d:47:ad:5a:b1:30:
5a:7c:1d:a5:49:71:76:37:e9:d7:6c:d3:3b:73:80:45:78:fb:
a5:23:43:ea:79:d2:95:21:d1:19:9a:1b:3d:c6:24:47:d4:79:
aa:43:06:98:cb:5b:b6:fb:3d:76:32:c1:ff:a1:96:94:02:61:
a8:d7:6b:19:01:8d:3b:2b:11:59:18:f1:00:25:63:12:ef:e0:
eb:11:8a:f3:7f:28:91:2e:24:05:9e:e4:a8:ce:a5:85:86:25:
5a:c8:88:ca:5e:6c:36:ed:de:ac:e5:30:87:db:4f:5a:b5:af:
3f:62:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:43 2025 by rpki-client