Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: MSiMiNkDmTJqgsnUXm3SARRXuj96dTJYSwpl/lviHvM=
Subject key identifier: 7F:66:16:BE:FA:A3:91:7D:3D:2C:64:2E:50:6E:C0:8A:90:53:D3:EC
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 0197B70F063425EC32FEC1E637A09FB46E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: fgfODrbvTzp5Lki5lLyJTNY8uiQPM8xjHHeP7a/sWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:06:34:25:ec:32:fe:c1:e6:37:a0:9f:b4:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=7f6616befaa3917d3d2c642e506ec08a9053d3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:0a:73:a6:16:80:ed:7c:5a:16:21:e5:70:
0f:e3:5c:15:82:c5:46:14:fc:36:00:c4:ad:5e:4f:
c6:51:c2:e6:f4:25:1e:b5:fe:9e:0a:74:9d:68:ab:
06:3b:ce:f4:ce:54:5e:e7:89:93:2d:2e:eb:93:f3:
1e:e3:64:b4:d2:eb:57:f0:2a:15:ac:c8:54:05:57:
0a:50:2d:5f:03:90:ba:ca:ab:1b:34:d2:12:59:e5:
47:cf:f0:22:d8:56:42:85:83:01:3a:d2:5a:04:51:
aa:6f:13:76:45:fc:a0:fe:5c:ef:d1:34:77:e7:b5:
66:a3:e2:e1:0d:f0:7c:a1:89:e9:94:d5:09:56:59:
68:06:db:1d:91:12:74:28:ee:63:53:ac:1d:d8:c2:
d7:55:76:69:50:79:73:6a:28:f8:e6:5e:05:c3:36:
0e:88:ba:83:0e:67:dc:55:0e:64:2c:74:28:76:c3:
45:9a:fa:43:82:b0:2d:53:80:70:4d:7a:f0:54:0f:
60:f0:2c:4b:3e:ff:5e:3d:24:2f:33:89:09:f4:55:
85:01:4e:b6:94:98:9f:11:7c:a8:95:50:9f:19:d7:
68:b5:d4:74:7f:d7:05:8b:8f:f4:84:35:d5:10:fc:
87:c7:9b:65:92:cc:d6:a2:c9:dc:10:2d:45:63:8e:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:16:BE:FA:A3:91:7D:3D:2C:64:2E:50:6E:C0:8A:90:53:D3:EC
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ad:fb:36:17:d3:61:d5:7c:2c:a4:30:97:0e:ea:14:e8:d4:
cf:f1:36:c3:6a:bf:9f:e7:44:39:d1:54:29:ee:b7:22:87:38:
1b:ec:20:2a:2a:95:0d:bb:30:be:24:c9:83:46:e1:91:2c:d3:
5f:34:1c:b0:44:2b:a5:d8:7f:3a:c7:58:da:7a:12:b7:6b:69:
90:fb:ee:84:7b:af:8f:5d:c4:aa:73:a2:1e:ac:66:e5:33:ac:
62:a4:c2:de:49:a7:3a:c2:96:07:c8:ef:75:e3:66:bb:78:38:
35:e2:9e:5a:b0:07:95:8f:c3:6f:67:a2:0c:18:9d:9b:fd:82:
f4:c1:49:a7:fc:2f:91:3e:04:b0:85:07:2d:19:af:67:e3:16:
30:1d:a4:00:bd:9c:c2:68:6c:ee:4e:4c:89:ab:df:f9:dd:68:
e9:1e:52:b2:7a:89:ff:49:92:47:11:9c:18:20:5e:e4:54:dd:
a0:1c:08:9e:fb:e2:e0:cf:c0:48:90:cc:c1:6b:4f:35:09:0d:
7e:c2:cd:25:ba:03:26:9e:51:7a:60:1e:37:e5:57:f6:9c:55:
a3:ad:c1:21:c8:17:9f:02:b4:49:6f:06:09:14:f4:6d:f0:98:
35:ff:fe:6d:da:f8:d9:ed:ff:52:f3:47:36:8f:9f:5f:f8:6b:
93:6a:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:51 2025 by rpki-client