Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: rSLZfKqqq5lUykNN242eJVbcWyYiYxD85nS5il1C574=
Subject key identifier: 75:7B:60:5A:8A:FB:0B:37:41:6F:FC:3B:06:0A:35:7A:63:18:C9:C4
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0197B5FC756F5C2A089027A197B476F2A0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 11B7
Signing time: Sat 28 Jun 2025 10:01:50 +0000
Manifest this update: Sat 28 Jun 2025 10:01:50 +0000
Manifest next update: Sun 29 Jun 2025 10:01:50 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: QorKLsiGSS5htxEZKkffcxCWf+HXypa77lRtifk5Osg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:75:6f:5c:2a:08:90:27:a1:97:b4:76:f2:a0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Jun 28 10:01:50 2025 GMT
Not After : Jun 29 10:01:50 2025 GMT
Subject: CN=757b605a8afb0b37416ffc3b060a357a6318c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:09:15:cf:20:2d:61:2c:f5:15:b0:d7:76:
fc:db:17:93:06:97:82:48:49:eb:1d:d9:01:c7:44:
0d:67:6e:67:e4:08:74:1b:00:01:6d:78:42:f5:5a:
3e:93:af:e8:ac:eb:b1:46:f3:28:53:a5:aa:72:a6:
93:25:b7:64:15:64:63:b7:c4:95:1d:5e:1c:9f:7b:
70:b0:4b:68:6e:5e:30:cf:f1:fc:86:02:57:d0:36:
1b:96:61:6c:cc:73:18:75:fc:78:b7:9f:e2:70:2d:
31:22:d4:b7:2f:1f:19:90:b5:c0:2f:d9:e5:ab:3b:
39:96:13:13:a3:26:ae:e6:5f:33:46:f4:6b:45:ae:
8c:fd:14:16:9f:74:cd:9d:88:8c:55:06:02:4f:da:
25:ad:00:e4:2c:01:5b:8e:3c:75:e4:dd:c6:98:ee:
92:0a:6c:75:fb:af:8a:a4:38:83:a1:cb:7a:2c:57:
52:99:84:e8:9a:79:1e:ed:80:79:56:f8:a6:12:4a:
a7:d4:7b:67:86:fa:f7:51:cf:cd:1f:d1:65:ee:78:
0c:27:4c:a0:ef:74:86:ce:7e:bd:36:9c:c3:6b:55:
fe:1e:fc:b3:28:19:47:6b:fd:59:58:7b:04:73:25:
f6:9a:8a:79:29:10:c6:0d:e1:88:17:90:dc:05:f6:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:60:5A:8A:FB:0B:37:41:6F:FC:3B:06:0A:35:7A:63:18:C9:C4
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:76:04:a2:62:5f:02:b2:87:33:1e:9c:c3:42:3a:55:02:94:
72:5b:71:32:d0:5c:2c:ca:1d:42:79:f8:1a:9d:07:ff:28:db:
3b:2e:e4:ab:87:f4:57:39:a6:f0:09:1c:79:ab:b8:19:e4:6e:
3d:bd:69:cf:02:06:c4:89:28:c0:44:53:eb:11:de:00:d4:76:
cd:18:56:51:e0:ee:d7:4e:e1:46:24:84:1a:62:ba:b5:d3:fc:
89:ad:68:05:fa:9d:85:a6:91:4c:8c:74:38:f6:80:3d:83:b5:
40:1e:4b:d4:35:68:bc:5b:1b:a9:6d:8e:73:15:e0:76:67:8c:
7b:57:c4:59:18:77:bd:7a:92:8b:89:6c:6b:12:74:b6:3e:34:
ae:df:93:54:da:95:32:9f:46:1a:0a:97:ef:49:e5:84:ed:c8:
dd:00:de:7d:5a:95:14:df:44:e7:e2:dd:ff:05:c8:33:18:8b:
2d:2a:cb:77:72:43:91:a9:34:16:7d:fc:9d:47:08:87:58:05:
d1:f9:17:9e:1b:f8:22:eb:3e:d4:21:28:63:42:f0:9d:86:fb:
55:4e:c7:1e:11:28:4a:32:ca:23:fa:14:a2:55:77:36:b4:4f:
2e:6e:78:9e:eb:27:d0:c4:87:81:f7:89:63:dc:04:e2:6d:64:
b1:a7:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:03 2025 by rpki-client