Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: NI+I7C051teF2Q1TUrhNZ6NE5lVcqdugc/cFxKkmGMI=
Subject key identifier: E9:D5:3D:50:D0:41:C8:10:07:68:8E:19:94:CA:AE:2B:6C:FA:36:AD
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 0197B7EA734528D92A8A64342C3BE9875463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: SfGFcQIVuAUaUcrSXFWbGrMNGdXTGrKGx55pL/Z4iCA=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:73:45:28:d9:2a:8a:64:34:2c:3b:e9:87:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=e9d53d50d041c81007688e1994caae2b6cfa36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:cf:95:f0:df:7a:55:1c:73:9c:91:aa:7a:
24:5b:11:ab:ad:1f:e5:18:af:e8:a0:c4:bd:d2:a1:
9e:63:4d:9b:87:b8:2c:63:67:e2:08:c7:ac:ac:15:
2a:f5:5e:cf:ec:44:ba:5b:1b:98:35:13:98:1e:ae:
32:3b:f7:a5:33:b5:4d:b0:40:4a:77:48:19:a0:52:
3b:ae:97:12:0f:6f:c6:ce:e7:e4:9f:79:84:3b:7c:
c7:a8:44:bb:c8:ac:5e:a0:ec:33:22:ac:79:7a:49:
0f:f6:cd:e7:e5:32:b1:12:96:b0:15:d6:de:6a:c1:
6a:48:d6:ff:d3:41:ad:6c:6d:62:db:20:30:5d:de:
23:2e:d8:5a:55:c6:b2:59:5f:d4:2e:49:78:69:64:
70:92:20:d5:fa:16:8d:57:a2:ac:80:1f:32:1c:bf:
4f:c9:50:2e:cc:82:b1:e6:86:a0:09:29:c9:6b:5c:
9d:98:ae:60:dc:08:9b:5d:cd:e4:6c:2d:53:cc:2b:
36:6c:44:89:f8:04:0d:e1:95:cb:f2:9a:de:3c:ed:
ae:d7:1f:58:45:9e:3f:4f:51:dc:65:a6:99:28:b7:
55:dd:e9:c1:e6:b1:ca:66:e0:09:f8:83:02:b1:b8:
da:57:1c:a9:4b:b3:96:55:5f:f2:cc:46:c4:c2:9c:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:3D:50:D0:41:C8:10:07:68:8E:19:94:CA:AE:2B:6C:FA:36:AD
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:29:84:f3:e6:22:77:7e:ca:56:cd:77:e4:d3:33:66:5a:d1:
33:a1:a0:7c:3e:84:f0:60:56:1b:fd:af:c4:db:45:b9:81:0c:
1f:e7:a4:53:64:69:76:e9:30:96:fa:e4:a7:9b:18:37:65:f9:
93:17:11:17:ee:de:63:00:d4:6f:fd:5f:b5:7f:d5:a8:4a:14:
48:8e:03:35:db:db:5f:f2:d1:aa:24:04:57:f7:c3:e2:a5:cc:
c7:45:c7:ed:ab:15:a7:24:68:6c:68:4a:3d:75:4d:eb:e5:76:
c6:37:a3:f1:b6:8b:96:a7:0b:44:5f:9f:e1:25:84:92:25:cd:
6d:e2:1a:15:f6:83:2a:a0:a5:8d:e0:00:29:67:3a:fd:13:7c:
be:bd:e6:cb:7f:34:98:3f:c3:80:1a:df:8f:9f:42:f9:da:b5:
5a:5c:31:b7:fd:b5:e2:ce:71:c9:fa:50:e2:66:26:6f:f6:3d:
22:b1:d2:24:75:55:94:2f:ce:a9:20:0a:4e:86:50:b7:9d:e5:
31:7e:1c:0e:08:bc:0a:1c:19:d8:ca:3f:1d:7b:21:3a:d4:18:
03:92:87:96:a5:5c:a3:18:28:ee:e9:ce:b7:e7:c2:68:a8:41:
9a:5a:3a:10:98:61:0e:4c:91:d0:39:25:da:7b:32:07:ba:94:
07:e6:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client