Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: 87Rp6ERN3fqZvJ3a9El7cl5QNu9CbJKYL0eqAVHpDH8=
Subject key identifier: 91:30:FF:08:E3:6C:6C:D0:65:95:BA:D2:12:EF:46:21:1C:D8:18:AF
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 0197B745B6479846342CFE1D630655E285BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: ISztFSi/3MPr62kk94y12IlESaKyrI+AK5wgSZ+BKYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b6:47:98:46:34:2c:fe:1d:63:06:55:e2:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=9130ff08e36c6cd06595bad212ef46211cd818af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:10:fd:c6:b5:9e:5b:01:a2:2c:92:ef:22:
9f:9a:e3:12:d1:2a:0d:d0:1e:90:72:fb:ce:dd:b4:
59:1b:59:9a:a2:58:7b:7a:a1:4e:43:3f:a1:82:70:
36:f0:6d:cb:54:6b:17:4a:16:17:55:5a:76:61:c2:
c5:e9:49:02:37:76:86:72:6b:bf:16:40:2e:d0:48:
2d:d4:37:e9:5e:65:1a:1c:28:37:c1:fc:6b:85:6d:
6d:75:3b:6c:c3:05:c0:95:d5:3c:00:1c:60:83:f2:
08:81:1a:cc:64:ea:2a:6a:86:6b:de:e2:44:a1:5b:
21:a1:bd:cc:aa:86:70:5c:73:bb:36:f8:4e:95:62:
b4:24:12:5b:bb:91:4e:6a:26:f7:42:59:e2:7e:f7:
af:d2:17:1a:c7:5f:5a:fd:28:24:fc:8b:17:03:1a:
8a:7f:3c:cc:86:dd:51:5d:e7:93:a6:35:98:65:ce:
a9:66:9e:07:f1:a9:c6:fc:dc:fc:69:08:a8:4b:c1:
cd:9d:c7:88:68:93:7c:93:68:5d:53:7e:04:61:4b:
a2:23:80:47:bc:11:10:2a:82:14:27:15:be:5f:ef:
f8:83:2b:89:ec:e0:91:64:95:87:b1:84:ec:1f:67:
1b:b5:c1:fd:92:0d:71:c3:71:d3:da:df:96:f8:49:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:FF:08:E3:6C:6C:D0:65:95:BA:D2:12:EF:46:21:1C:D8:18:AF
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:77:d7:d5:58:3c:14:53:c0:a5:04:67:28:db:02:98:4c:6f:
d8:d9:79:ef:bc:42:de:a9:7c:15:4f:a5:7f:a1:02:8c:f8:0e:
9e:c2:62:56:63:46:da:d5:d9:99:13:3e:d2:40:54:a5:2e:eb:
b5:8d:5a:bb:9a:62:a9:2a:6a:b2:2e:e5:08:c1:d0:43:dd:3a:
18:8f:93:b6:73:6b:86:c1:48:7c:9e:5a:7f:29:81:99:06:f3:
3a:9c:e2:28:ba:29:ee:7f:13:24:4c:c3:e8:29:ea:ab:5e:0c:
a1:37:e9:28:2c:76:a4:05:05:7d:3d:ca:44:58:4a:53:13:d6:
ed:8d:8f:1c:30:8e:6a:94:dd:38:02:cc:11:c3:79:09:a3:32:
5f:5f:21:f3:04:52:9b:60:40:19:f9:09:38:cc:9b:45:08:43:
57:36:e6:4f:7b:35:ac:87:a7:ff:6f:ab:55:53:4a:2d:92:fe:
95:03:9f:34:4c:85:b7:83:30:6a:54:89:bd:63:59:4a:c5:e1:
1f:52:ae:88:cc:91:41:5a:58:f6:d7:bb:1e:ba:a9:d2:94:17:
39:a1:15:ce:be:3f:fa:e8:1c:dd:ef:79:63:1b:05:3a:40:c4:
a3:1b:71:06:e2:92:25:f0:e1:aa:3d:02:e0:53:2d:60:22:67:
c8:52:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:51 2025 by rpki-client