Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: ZBeYrkYjqk35UiDDoFncXBxZ7d5zNQ7fMvyPf80UMTU=
Subject key identifier: B1:D6:3A:3F:CF:13:17:2C:44:AE:CB:C3:E4:B5:6E:7A:36:70:AC:41
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019846642477682DEF973B5DCB7B42BD2F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0CE0
Signing time: Sat 26 Jul 2025 11:00:24 +0000
Manifest this update: Sat 26 Jul 2025 11:00:24 +0000
Manifest next update: Sun 27 Jul 2025 11:00:24 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: QIpY+HCGMhNhCdfSXQmKiIZgURT7GrUUYiyhH6rLjXc=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:24:77:68:2d:ef:97:3b:5d:cb:7b:42:bd:2f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jul 26 11:00:24 2025 GMT
Not After : Jul 27 11:00:24 2025 GMT
Subject: CN=b1d63a3fcf13172c44aecbc3e4b56e7a3670ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:c5:5b:5b:d7:a3:81:b8:61:1d:c3:78:ad:
f6:6c:67:20:26:79:fc:51:e7:b9:8c:41:a0:92:86:
c7:5e:fd:16:53:b5:69:24:db:8f:76:ce:69:71:ab:
dc:da:ce:20:3b:f4:b6:56:38:8d:ad:33:b4:ea:52:
64:a3:5f:70:a2:63:b2:c9:7c:e1:93:3c:4a:12:43:
68:41:95:f1:30:31:4a:24:c2:e7:00:9d:1e:65:c6:
14:8b:c6:13:d8:21:54:5d:11:0e:4d:49:4c:1a:6e:
c1:74:f5:5f:e9:6d:95:4b:59:e4:9c:95:f0:ba:c2:
b1:9c:da:9b:80:f8:41:2a:a7:b0:87:12:4d:e3:55:
5f:ce:14:72:18:e2:9b:25:46:c1:1a:8f:35:49:c4:
f4:94:21:72:6d:fc:45:81:8f:a8:91:b1:64:39:0f:
72:c5:27:29:f0:e4:3a:4b:d0:9b:f1:e2:1e:b7:db:
3e:50:ed:34:42:49:04:40:75:90:07:ee:db:62:7d:
1d:d5:e3:97:e6:7d:7f:86:44:de:9f:33:b9:56:75:
22:35:fe:c8:e7:80:e1:b6:71:6a:67:2d:99:91:43:
60:16:95:59:6a:90:f8:86:0b:f8:15:1d:ab:ae:69:
d9:0c:4d:10:d2:31:27:a5:ab:0f:f7:b0:36:8f:58:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:3A:3F:CF:13:17:2C:44:AE:CB:C3:E4:B5:6E:7A:36:70:AC:41
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:04:10:c7:33:35:54:30:6c:dc:24:e3:c2:fe:17:69:73:86:
a8:d4:97:3a:54:04:aa:08:27:aa:5f:61:bc:7f:c2:64:cc:4a:
e2:ea:fb:37:81:9f:7e:21:15:42:47:62:bc:37:dc:d4:ff:49:
7f:40:fb:31:81:23:a1:2a:fd:96:ee:a8:9e:a3:bd:88:c4:26:
db:0d:2f:87:9c:04:06:0a:12:f7:f1:26:84:27:71:6a:95:89:
cf:b0:24:f8:2a:bb:bf:12:c7:12:5f:cc:63:44:fc:c0:50:37:
24:7a:a7:5e:4c:4a:92:27:68:d6:f6:79:aa:a8:e5:e7:bf:59:
5d:c9:9f:e9:ec:15:91:07:4c:dd:8a:64:ba:b6:86:ee:d4:bc:
d4:8a:f2:3b:3a:49:03:56:a6:54:9a:c7:8e:73:37:a5:3c:cb:
68:a0:39:7f:53:e0:3d:8d:14:aa:ad:d0:2c:76:07:97:00:ac:
9b:dd:3f:57:62:72:1e:98:d2:00:c8:7d:b2:20:5f:6b:0c:66:
28:e4:69:47:86:7f:8d:42:83:7a:c3:58:09:0d:30:ff:47:1e:
52:3c:98:94:4b:50:3d:57:6c:aa:59:4e:c5:2c:9f:7b:25:fe:
d6:4c:eb:cd:21:83:10:d7:10:f8:22:ee:b0:4d:d8:cd:70:81:
65:cb:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:53 2025 by rpki-client