Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: H8uAKUe/VRieP0ix9hLzU8JQeg5CNJsgFRwqlfigWyc=
Subject key identifier: 73:81:C8:E4:0D:DA:CD:5C:FD:D8:2A:17:88:7E:01:B8:3F:38:2C:14
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0197B74562A797295D4FF187056B1E43C2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: v0rUYfaP3zNBqegY+CIT7dofYlPCVLWxl6CzuViBiBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:62:a7:97:29:5d:4f:f1:87:05:6b:1e:43:c2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=7381c8e40ddacd5cfdd82a17887e01b83f382c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:4b:c9:98:46:ce:cc:13:d2:9a:b0:9e:bb:
4e:cf:e2:6e:2f:f2:c0:a8:81:4b:a1:ba:07:24:64:
86:9a:ec:a4:d5:fc:2f:d4:18:1a:3a:9d:44:a1:3e:
37:89:73:13:86:51:31:00:7b:7d:83:78:02:21:95:
66:1b:7a:b2:b6:0f:47:fa:b9:18:df:37:3a:14:ad:
1f:cc:5e:83:b7:ca:14:92:c4:dc:45:36:ad:51:41:
b8:10:31:a0:65:c7:46:c7:ac:1a:3a:d9:9b:60:d4:
72:ef:37:c1:56:f9:e7:e8:e6:cc:c8:3e:96:e1:fe:
e2:c1:3e:e1:2e:e8:f4:98:4c:5a:75:3f:86:d2:e1:
ce:36:26:03:b1:a9:86:23:b6:b5:b5:51:2f:7e:1e:
fc:46:ad:42:c2:20:a1:c5:56:87:3a:fb:5d:24:55:
a9:ae:66:bd:1e:be:76:eb:94:67:a3:56:69:c1:47:
7e:25:65:5f:51:12:39:7f:41:db:69:fb:ae:33:7d:
62:d2:5d:2b:ec:57:56:b5:97:ad:89:20:24:be:f2:
5b:ce:5d:39:6c:87:7d:d7:94:d3:ad:15:89:71:d5:
3d:75:82:43:ad:02:a2:b7:c0:93:9c:fb:f3:a2:cf:
02:4a:7c:a3:5c:65:a4:3b:9b:d0:21:27:61:69:15:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:C8:E4:0D:DA:CD:5C:FD:D8:2A:17:88:7E:01:B8:3F:38:2C:14
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f6:5c:cd:22:4a:f7:7a:3e:19:e3:fc:e5:9e:a1:ae:36:dd:
87:2e:79:cb:f9:ef:7c:a1:f1:e5:69:72:8b:05:f6:c4:db:4b:
43:86:6d:6f:a0:dc:51:db:50:98:1c:f0:c5:5a:39:58:f6:94:
12:9d:a8:8a:8d:59:b0:41:cf:8c:b3:7c:7f:8c:e7:68:30:10:
39:6c:68:ce:0c:9a:17:bc:bf:72:b2:42:08:43:e9:c5:1e:07:
be:16:a7:99:4f:f9:8f:69:ab:8b:fa:96:d1:da:19:20:2c:a4:
3f:7d:b7:69:e9:13:98:b8:08:cf:57:46:4e:e3:d8:ad:02:45:
a5:1d:80:b1:1d:cf:9f:60:bb:59:ed:60:ee:fd:6a:e5:eb:a2:
d4:0d:58:6f:da:a3:08:25:b2:0d:71:59:d3:5c:56:fc:ca:b2:
5a:fd:4d:ff:0d:58:75:af:de:2e:4b:72:bb:75:71:ac:b2:57:
d0:d2:8f:2a:a0:ef:53:da:e1:6b:22:fc:6d:52:51:fe:7d:7a:
4e:e7:2b:40:ae:79:d9:7a:4a:4a:03:7a:45:f9:a8:3a:21:af:
c7:ff:b9:1e:29:4e:0b:5f:9d:bc:04:74:18:bb:ac:a8:6c:11:
a7:09:fa:fb:56:48:7b:15:fb:5b:e3:af:e5:79:d6:2b:a2:41:
6c:bf:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:37:05 2025 by rpki-client