Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: bGn7mAKoXpouMChRutRquM3zyUqWyFrsfky8f21nPyw=
Subject key identifier: CA:55:78:18:9B:FC:96:E2:FF:1F:C3:76:3A:A9:CA:A9:AD:00:46:0B
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 0197B7455FB908C5F3CA206CA3B0036B693B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 0614
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: zGyLbfy+dqPaCZD8ZLw8GkkzEKqgBOLY41heaWtkZd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5f:b9:08:c5:f3:ca:20:6c:a3:b0:03:6b:69:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=ca5578189bfc96e2ff1fc3763aa9caa9ad00460b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:39:8a:60:d5:9f:58:5c:73:75:c3:1f:e5:
26:66:e5:8d:9f:6b:b1:5d:69:ca:4b:6c:d3:9c:fe:
71:52:79:91:90:50:b0:65:8a:9d:3a:97:eb:ce:66:
bf:12:39:91:a2:05:34:c3:39:4b:4b:8f:bd:ff:90:
fc:c2:cf:f7:37:5b:14:62:c6:5b:a6:33:71:b1:fc:
4a:b6:12:1e:53:2a:29:27:3d:16:5c:ff:b0:c2:91:
a9:a3:44:9a:af:dd:f2:03:07:7e:00:8c:02:2e:62:
d4:4d:9e:6f:ab:4b:bb:19:ae:fd:a7:91:66:c0:46:
1f:b3:82:2e:54:fa:d5:2e:9d:dc:c6:2f:1c:9c:cb:
90:7e:a9:0c:80:81:e0:c6:82:a7:7f:e1:41:bc:0b:
51:6a:08:ae:a9:05:a3:91:46:4f:dd:ca:2a:8e:35:
cc:68:d7:aa:5e:e4:fb:c8:37:92:a3:cd:00:bb:66:
ab:31:e7:ac:19:db:8e:3f:0e:1f:99:d3:94:a2:c9:
03:d2:66:ad:56:63:ff:95:f4:94:d9:5d:c8:b3:25:
ec:8f:58:85:cf:19:7b:ed:e8:12:10:83:67:d5:05:
cc:4b:c0:8e:b0:24:68:55:48:3b:8b:16:3c:07:7d:
cd:26:57:d6:4d:94:10:a0:bd:d4:88:8d:7f:b8:64:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:78:18:9B:FC:96:E2:FF:1F:C3:76:3A:A9:CA:A9:AD:00:46:0B
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:15:db:ff:de:7a:9d:bd:55:3f:ab:83:f4:4a:ee:d4:49:
7a:7c:95:fe:16:2b:4d:f5:56:9b:ad:8f:24:6e:d6:f4:16:2f:
b0:28:32:de:1c:35:a8:f8:bd:2a:70:08:dc:9b:30:6e:16:78:
49:e6:5c:ee:f7:6c:c2:44:b5:4d:42:d2:ee:2b:b4:a6:89:f0:
18:57:3b:c7:1a:44:54:e4:27:e2:a9:1a:7b:d5:f4:a1:bc:7d:
af:58:5c:32:4f:fd:4b:57:47:69:a5:1e:ca:c9:ac:44:45:fa:
f0:ad:cc:16:d0:95:6e:42:a8:1b:80:2e:a8:d2:66:fa:de:3d:
23:d5:59:6a:f8:f6:5a:b5:d2:7b:85:a4:fb:74:d4:be:cc:b3:
bc:a0:20:ba:31:7f:da:71:ca:8c:5a:0e:e6:d1:e7:62:e7:47:
22:b9:7a:90:27:3d:8e:55:b3:8a:bc:18:f7:3b:64:57:0f:16:
f3:a5:48:c1:ec:01:c7:90:34:89:f2:57:1d:1b:3a:2b:36:c0:
3d:c9:27:26:28:18:e5:3a:84:40:55:51:f2:96:80:fb:00:cb:
1f:82:74:c2:fa:21:c8:62:d2:8c:83:34:4a:43:a9:e0:b7:31:
a0:22:17:b0:73:14:68:90:d2:43:8f:81:b4:35:61:b6:34:c1:
23:b0:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:48 2025 by rpki-client