Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: 0EKhz41BdLWP9+KQlleMSGuEOgpKgaK9m31aYel/HA0=
Subject key identifier: BE:1B:B0:21:36:F9:D6:36:E7:49:9E:F4:9F:B3:AE:9C:08:40:BE:BB
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0197B70E70BABF0F3042FAFFE361B90EFA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 09A1
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: KA1aG629jKDbH7m7HmT31NXi2BiUADuYCXUfmjEVeMU=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:ba:bf:0f:30:42:fa:ff:e3:61:b9:0e:fa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=be1bb02136f9d636e7499ef49fb3ae9c0840bebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:2b:05:36:60:df:e5:b8:91:3c:ed:03:dc:
eb:a5:9c:7b:48:8d:e4:e2:2b:3e:2c:95:25:f4:25:
7a:5a:11:27:ce:f3:50:af:52:38:08:19:42:d7:9c:
32:b9:84:0c:d2:ec:55:40:63:dd:11:a7:f5:88:72:
f7:9a:33:d2:6d:bf:de:39:b8:32:a0:63:9b:b1:0b:
6d:8e:a3:a1:83:d6:23:43:e4:6b:db:d3:54:80:0f:
53:f1:e4:34:a7:b6:bd:95:e0:d9:fd:5f:8a:9c:50:
d6:ac:7c:ca:27:1f:64:01:ff:f2:7a:4e:e2:df:40:
8a:78:12:28:d2:01:e8:07:6f:9d:f8:31:02:ab:15:
6b:27:a6:49:e0:99:7b:ab:8d:dc:97:da:7d:02:bc:
16:06:c8:18:05:77:f8:04:95:3c:50:c0:49:1f:d7:
ed:13:9a:62:bd:24:11:4c:10:4b:1d:f5:01:ec:b4:
d8:eb:02:06:a5:7f:80:7c:83:86:2a:eb:8f:86:91:
63:ec:7d:81:cb:e5:ae:26:bc:97:b1:09:a6:0b:08:
8b:a5:d7:eb:04:8d:7a:b0:8c:f0:2a:d1:f6:d4:46:
c9:b9:a5:53:28:6c:6a:67:c8:d5:b1:e7:3d:18:ce:
0b:73:0a:cf:12:ca:a2:1b:5c:73:02:7a:dd:18:45:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:B0:21:36:F9:D6:36:E7:49:9E:F4:9F:B3:AE:9C:08:40:BE:BB
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:93:94:f8:6c:36:06:3d:9e:aa:39:92:c2:6f:39:f6:c4:
a9:db:31:67:20:30:87:6e:75:99:8c:35:ce:38:a4:76:3a:16:
2d:2b:2f:43:3f:9f:0c:0e:5e:17:36:b7:c3:ce:ec:b7:41:b0:
14:bd:c4:db:45:7b:10:98:7e:ba:c0:85:21:6d:a2:64:48:00:
d9:de:18:47:5c:dc:ce:94:42:91:38:25:5e:3a:6f:b8:58:86:
bc:52:06:1b:6c:41:dc:e8:10:24:87:d4:59:82:16:5c:0c:58:
96:d7:d8:39:a5:65:c1:6b:f9:b3:28:ae:43:24:65:62:5d:c5:
2a:a9:d3:ab:95:ae:ea:41:96:82:59:b7:f2:1f:bc:d7:be:d3:
00:e0:40:ef:e6:f4:98:93:11:5f:1c:3b:8c:80:db:90:1b:83:
23:04:bd:10:d7:7c:71:2e:4b:30:87:cc:9a:c3:50:de:1b:ba:
30:1e:1a:84:d6:31:a3:4a:15:2d:12:85:be:70:3a:f3:54:ff:
a6:c0:94:35:cb:0d:4a:e8:24:3b:cb:e3:da:17:6f:03:6c:d5:
09:79:ec:1e:08:a9:95:fe:1c:b6:4c:7a:82:e0:59:6b:dd:bc:
ab:c2:0c:f4:47:c9:90:60:2c:1e:2f:cf:24:35:b7:63:13:a6:
4d:8b:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:39 2025 by rpki-client