Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: /sNGusa8dUev/Nzf5z4wnaXC4680h6OZwgl4dNXGIiE=
Subject key identifier: 28:92:99:AB:0F:6D:09:FE:5F:19:4E:B7:BD:2C:9F:A6:EA:B0:A9:5F
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 0197B5C4E631C1D76C9C17FFAB54D09D6CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 02CB
Signing time: Sat 28 Jun 2025 09:01:09 +0000
Manifest this update: Sat 28 Jun 2025 09:01:09 +0000
Manifest next update: Sun 29 Jun 2025 09:01:09 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: z49axFFncNXLbAUgUULTH2xwGSm24Pxb2h+fODI2bB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e6:31:c1:d7:6c:9c:17:ff:ab:54:d0:9d:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Jun 28 09:01:09 2025 GMT
Not After : Jun 29 09:01:09 2025 GMT
Subject: CN=289299ab0f6d09fe5f194eb7bd2c9fa6eab0a95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:95:0c:2d:6d:59:35:e3:38:ac:92:f5:35:
12:58:d3:eb:60:85:3b:e5:f7:42:62:71:06:74:70:
8c:f3:43:d7:35:c8:7d:2b:f4:13:f2:ab:15:ea:54:
99:1d:0a:6c:7f:8b:b4:eb:cd:2f:dd:48:cc:7e:0e:
92:41:3d:3f:99:ec:e7:03:56:d3:ed:d2:5f:a2:66:
94:b6:c2:86:22:1b:5d:ee:28:aa:96:25:73:e8:41:
31:d2:7c:e5:33:f3:d4:c8:b8:63:e3:ea:3a:8b:97:
f2:49:d6:ee:8e:5a:17:bc:d5:92:c3:a1:f2:b7:4d:
f1:55:49:0b:8c:4f:af:21:c5:20:06:de:c7:57:ea:
1b:74:e0:0b:9d:c9:40:99:0e:35:bd:da:eb:f3:33:
26:86:58:5d:4d:71:50:4c:9c:90:02:30:f1:11:52:
b2:b5:e0:2b:5b:73:6e:6a:93:bc:8a:1c:5c:c5:93:
0e:26:20:27:1c:cc:1f:12:7d:15:27:c5:06:3b:a7:
1a:56:11:f9:9d:31:71:58:60:09:14:97:c8:b2:b3:
12:eb:06:86:f1:4e:94:a0:51:09:a3:0d:cd:2e:98:
4f:4d:e1:f8:98:c7:80:b9:b5:f5:41:35:a4:a0:c9:
76:ec:2b:56:e0:9f:09:e2:2b:45:4f:8c:3a:e6:77:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:99:AB:0F:6D:09:FE:5F:19:4E:B7:BD:2C:9F:A6:EA:B0:A9:5F
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:14:24:81:cd:ed:67:bf:34:11:2e:b2:c0:09:4c:76:4f:30:
62:2c:07:33:23:93:3b:71:d3:c3:79:79:70:fd:4e:7a:3a:54:
90:7c:ef:fa:cb:2d:bc:3e:b1:7e:b4:bb:1f:7c:33:6c:61:74:
a6:9d:22:4e:07:26:f5:ca:a9:8d:9b:c4:db:29:60:d2:68:25:
e8:9d:7c:4d:1b:a2:c4:c8:1a:97:61:e1:1c:ba:d1:bc:86:ec:
50:04:f0:7c:4d:0b:5d:ab:bc:d9:39:3b:74:9a:8e:0a:30:02:
db:e7:0e:85:58:62:07:1a:05:93:01:f9:92:26:52:ef:66:81:
ce:25:d9:92:b8:a5:e1:92:30:78:13:cd:c3:30:24:af:9d:cc:
79:d0:ab:86:86:71:42:aa:4d:aa:1c:34:e0:71:44:9f:de:ed:
6e:73:5b:a9:28:63:1e:06:2e:4b:91:a4:a3:d2:aa:f6:ac:9e:
4b:40:c3:f9:ca:80:e7:2c:46:9f:72:b8:fa:42:d2:09:6b:52:
f9:55:f8:40:f1:f4:18:a7:05:6e:58:21:9e:e2:9e:b5:c1:e8:
90:0c:de:50:10:e2:d8:ab:79:bc:6c:f9:50:e2:6c:a8:9c:9c:
70:3d:68:4b:26:c5:89:ef:41:f6:20:a2:eb:ad:ad:9c:dd:87:
29:8d:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:00 2025 by rpki-client