Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: WfHtluuJ2zrxK8rZYOz6IqjLppU229PZc8/qDahN2mc=
Subject key identifier: 1C:C5:68:F8:D2:94:5C:0A:B9:8B:67:99:C6:68:F5:F6:C0:3A:96:16
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0197B933B59C0C7AD23CA094E1AA96332F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 0115
Signing time: Sun 29 Jun 2025 01:01:03 +0000
Manifest this update: Sun 29 Jun 2025 01:01:03 +0000
Manifest next update: Mon 30 Jun 2025 01:01:03 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: lhPsf/b0jyZagYXmho/ngnrwPgNJxiPo57hU3LM4fII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b5:9c:0c:7a:d2:3c:a0:94:e1:aa:96:33:2f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Jun 29 01:01:03 2025 GMT
Not After : Jun 30 01:01:03 2025 GMT
Subject: CN=1cc568f8d2945c0ab98b6799c668f5f6c03a9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:a2:8e:38:48:7b:7c:43:66:e6:23:50:24:
4e:99:a3:0c:a7:b3:11:fa:2a:46:e7:7b:79:38:e1:
cd:d2:e0:4e:af:d8:79:c8:00:47:16:65:64:1f:90:
75:20:68:6d:d2:dc:5e:d8:8d:ee:1f:5a:f8:b6:27:
41:07:ee:7a:ab:4e:f4:16:f4:48:b0:db:33:dd:d7:
b6:f3:44:1e:01:ae:da:be:bd:08:39:7c:22:f4:65:
9a:6b:1c:a7:65:ba:f4:b3:62:23:c9:62:3e:62:ec:
ab:04:73:bb:5d:20:0f:c6:f9:04:a3:0a:c2:54:38:
d7:71:a1:d8:6c:2e:5e:c7:2f:ca:1d:94:95:a2:6b:
ba:9c:61:ff:15:c1:ba:b3:99:b9:98:9a:92:c9:fc:
bc:f8:45:78:26:a3:88:8d:15:80:3c:18:cf:b0:c9:
75:df:5d:87:44:16:ba:c3:ab:16:88:2a:99:b2:27:
1d:aa:0a:35:53:6b:35:99:97:93:cb:36:64:bc:82:
88:c8:6c:d5:c2:c3:68:5f:70:3f:91:47:39:09:85:
cc:7b:08:be:77:ab:f0:90:65:50:2e:4f:47:6c:69:
b7:50:e7:54:74:4e:61:6c:d7:80:2e:e9:f7:4a:c1:
0e:03:32:d2:2e:46:f4:60:e2:f8:2c:af:8f:96:50:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:68:F8:D2:94:5C:0A:B9:8B:67:99:C6:68:F5:F6:C0:3A:96:16
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a5:9f:88:4f:98:0c:ba:ab:ba:b5:8f:a5:fe:c4:71:78:74:
ab:6d:06:61:b1:40:87:d3:4e:8b:f9:44:49:43:01:6c:08:4e:
04:d4:79:31:56:71:8c:be:02:d0:32:9a:8a:e2:ea:07:0d:d9:
23:0c:18:9b:12:79:1b:66:22:90:06:7a:10:29:89:fc:80:3e:
af:0f:0a:38:61:24:c2:5f:5a:70:07:d2:2f:b5:03:ec:b1:4f:
b7:aa:b4:80:49:c4:01:49:fb:5b:7d:8b:c6:0d:b5:6f:f8:24:
d5:a9:48:e0:63:50:52:d2:c9:28:48:6c:2d:8b:e8:6f:ef:f3:
8e:fe:09:e5:d0:d8:95:24:94:54:2b:5d:fe:9d:fa:c7:f6:50:
9e:65:29:6b:fd:c5:96:f4:79:eb:3c:89:53:59:75:c4:8e:fa:
91:d2:d8:43:03:04:48:05:82:8a:51:a1:ef:5b:a9:8d:4e:9c:
c0:01:9e:bc:31:0f:39:9c:44:44:c2:eb:f7:24:eb:f6:36:af:
f7:13:b2:a9:17:77:e4:b8:24:a3:41:92:25:00:61:ed:de:8c:
3c:98:4d:a5:c8:48:61:70:39:cb:18:b4:c4:7f:e5:ea:a6:fa:
e6:f5:d7:e3:ae:24:78:f0:90:6e:0c:ab:73:1c:e7:34:10:68:
4f:c8:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:12 2025 by rpki-client