Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: RttnBrCti0B74a5HUogjenJJ50YLIk0lykHWFRtpsXs=
Subject key identifier: 8C:8A:20:01:00:48:84:7C:E9:4E:AA:AC:F8:CA:06:BD:61:58:29:89
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 01974A7ADE27DF6444B4502C607A91D1A4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 067B
Signing time: Sat 07 Jun 2025 13:00:55 +0000
Manifest this update: Sat 07 Jun 2025 13:00:55 +0000
Manifest next update: Sun 08 Jun 2025 13:00:55 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: j4Iio+k44t7hjO+hQV30tc+N6MoBwWIJaDy9F2ARce0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:de:27:df:64:44:b4:50:2c:60:7a:91:d1:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Jun 7 13:00:55 2025 GMT
Not After : Jun 8 13:00:55 2025 GMT
Subject: CN=8c8a20010048847ce94eaaacf8ca06bd61582989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:a7:69:e4:0e:4a:1c:e6:d2:54:8e:09:1f:
84:26:c1:b4:ab:2a:fd:05:e2:f1:fd:59:b1:5c:c8:
77:52:18:59:5b:a2:28:cf:5b:25:12:8c:40:44:fe:
55:10:8d:9d:18:0f:e6:f1:3a:e7:b7:8a:76:56:d3:
23:3c:fb:97:15:c9:74:b6:41:97:8f:5b:f4:96:03:
1d:92:b5:17:6d:6e:46:35:55:9f:9d:02:37:7b:74:
8a:06:e1:e9:15:f1:49:ef:61:23:55:cb:bf:d5:f0:
b0:c1:c9:f1:ff:9c:dd:98:ce:ef:40:67:97:b9:38:
38:3a:23:b1:ba:67:55:23:b1:38:82:a3:1c:bb:9f:
6e:16:07:08:c2:30:76:8a:26:13:b9:ed:54:b8:87:
25:74:cd:86:34:e9:a3:c5:cd:d9:27:49:19:92:2e:
d4:45:a5:61:f3:7b:d1:72:fc:a9:06:36:d3:b0:1c:
e4:f0:00:17:27:b9:f7:a6:04:f7:60:57:9c:25:98:
6d:2f:dc:32:c1:a4:96:2a:a9:c9:c0:21:58:b8:01:
50:26:76:46:48:2e:f4:c8:30:8d:e9:13:ec:03:37:
3a:d8:79:44:a6:a4:a3:9e:ea:13:d9:89:18:a6:55:
bb:d5:a1:fe:49:b3:28:b7:9b:d8:19:00:8a:09:38:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8A:20:01:00:48:84:7C:E9:4E:AA:AC:F8:CA:06:BD:61:58:29:89
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2b:f2:7d:9c:9b:f4:1d:2d:6c:6b:47:cc:fb:d7:a8:97:55:
13:61:88:2c:a3:ba:71:53:f7:00:11:7e:e4:c9:ad:38:53:b5:
f3:63:57:da:5c:ae:42:53:01:2a:cc:03:54:b0:02:dd:73:33:
c0:f2:e3:1a:7d:f3:f0:cd:37:1e:46:d2:f3:54:4a:c4:02:7c:
7b:e0:8f:38:2d:c7:b4:38:94:7f:1a:58:ba:13:3c:9b:08:79:
8f:96:40:5c:11:a9:fd:bf:ad:ca:83:2c:21:1a:95:08:5a:f3:
bc:af:4d:c9:75:bb:7e:92:72:7a:1d:36:58:56:b1:f6:c7:20:
a5:c4:01:d1:fb:5c:0a:68:ad:61:b4:b2:18:7b:74:aa:3e:f0:
bb:0e:0c:02:03:37:98:19:0b:61:64:ea:25:11:0f:c8:f7:eb:
e7:3c:08:cc:34:bf:23:75:74:19:36:5a:4c:b5:0e:f2:7f:7a:
80:bc:d3:35:12:b6:e9:c9:fe:47:6b:54:8e:e9:1b:a4:66:67:
e9:75:5a:a3:f9:03:89:34:a9:23:a4:ad:f0:49:4f:57:9d:51:
1d:cb:93:3f:13:8e:13:8a:3a:60:ea:82:05:fb:d4:51:8c:da:
09:51:6a:08:13:4b:8f:6a:b5:d8:9b:8b:55:41:8a:cc:89:55:
cb:4a:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:49 2025 by rpki-client