Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: osOfhWr+8YyDIdfrxRxNV/3/8o0yrTgrt/N1k5ISqdY=
Subject key identifier: DF:1A:9E:A8:9E:5A:74:86:CB:47:D0:38:98:AD:0A:41:25:3D:37:13
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 01974DB2E5B989CF25EEA076ACEF8392D9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0FC9
Signing time: Sun 08 Jun 2025 04:00:59 +0000
Manifest this update: Sun 08 Jun 2025 04:00:59 +0000
Manifest next update: Mon 09 Jun 2025 04:00:59 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: n+FlneQ9SRX74kf/f8G2DdoqNsYKNteK3cVRJwSHxYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:e5:b9:89:cf:25:ee:a0:76:ac:ef:83:92:d9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Jun 8 04:00:59 2025 GMT
Not After : Jun 9 04:00:59 2025 GMT
Subject: CN=df1a9ea89e5a7486cb47d03898ad0a41253d3713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:0f:9b:b0:2d:50:e3:5d:9c:64:1b:6d:90:
eb:33:46:97:b4:74:db:be:0a:0d:b1:13:2f:bb:d0:
58:02:98:55:04:92:e0:1a:b0:8f:5f:e9:59:29:f3:
05:a9:f2:13:17:4f:9d:83:48:db:94:f7:68:2e:5b:
a0:ac:16:83:88:c7:f2:dd:e9:22:96:18:83:02:09:
03:d9:9e:5a:86:6c:26:58:9e:be:e7:06:b6:d1:7d:
d6:8e:02:90:a1:59:84:7c:62:da:d5:5e:ae:9a:1a:
52:44:4e:58:83:4c:14:06:c8:86:3b:cf:07:41:cd:
e0:67:61:ea:cf:0a:34:79:95:f5:3b:97:df:b7:d2:
29:8d:e5:bb:eb:f2:70:51:1e:ba:10:04:62:2c:5d:
ac:6f:f9:3f:d8:9f:d5:76:2e:19:f4:43:21:70:10:
58:4a:5c:18:2e:01:c6:b0:2d:d0:f4:39:e5:cd:50:
b5:af:e9:d5:30:5f:44:ad:f0:4d:99:d1:23:3c:79:
61:7d:3c:d1:bc:90:c1:11:8f:1b:1f:08:35:c1:0a:
29:b0:2a:c6:7e:b8:69:2d:14:3d:64:a5:2c:43:42:
f3:77:88:c3:3c:15:a7:04:59:f2:38:88:13:e8:73:
87:e4:0f:ae:fe:7b:0f:12:2b:59:6a:20:5f:78:3f:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:9E:A8:9E:5A:74:86:CB:47:D0:38:98:AD:0A:41:25:3D:37:13
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:66:ff:14:db:9c:22:a3:78:2f:a9:52:74:f3:44:ee:cb:
d8:9f:87:4c:6d:0b:26:50:1d:3e:56:35:ad:e0:50:e3:19:49:
c8:a7:1d:a3:bb:db:c7:ff:9e:6d:82:d9:5c:0f:91:20:23:71:
76:df:cb:0a:4f:6a:0e:29:39:a7:9a:63:be:11:32:5f:34:88:
6b:53:86:3d:e5:0c:33:3f:fa:bc:09:13:ca:c9:da:b2:cf:95:
80:90:8f:09:7c:74:72:0f:bb:1b:e4:b0:8e:f1:83:dd:ec:09:
e4:24:07:9b:0e:3e:17:4e:f2:7c:39:7d:cb:4e:28:02:69:06:
93:81:d9:f5:4d:d1:79:2a:e5:34:73:ae:56:89:de:9b:2e:00:
ef:bc:f0:2a:3c:75:56:0c:33:0e:af:15:bf:d0:19:64:36:8b:
09:a0:61:d7:ae:67:8e:4a:21:26:73:ad:46:b8:52:ee:c6:b0:
7c:7b:cd:a4:c4:79:7c:56:33:48:d3:b9:0e:24:20:a7:2d:85:
bf:50:f6:62:80:7c:c3:bd:20:0a:51:35:35:87:90:67:93:fe:
ba:57:fd:b9:98:67:b7:ba:cd:49:7a:e2:3a:c8:43:a4:42:57:
9c:30:5d:b4:2c:88:46:8f:52:58:67:73:07:e0:87:cc:97:3f:
c6:e0:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:07 2025 by rpki-client