Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: nAeqNWZU369ze0/vke3t7861gNmWOuaRQ8oGTGpu1Js=
Subject key identifier: DC:F5:FE:4D:06:E9:FB:FB:BF:FB:DF:B4:85:6F:54:F7:49:AB:72:7F
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 01974E20852D1A660306432C298C28703137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: 33
Signing time: Sun 08 Jun 2025 06:00:43 +0000
Manifest this update: Sun 08 Jun 2025 06:00:43 +0000
Manifest next update: Mon 09 Jun 2025 06:00:43 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: l7zfr7mahSDR5eO28D5zK5GapE+275FSbeGuGkT1zCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:85:2d:1a:66:03:06:43:2c:29:8c:28:70:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Jun 8 06:00:43 2025 GMT
Not After : Jun 9 06:00:43 2025 GMT
Subject: CN=dcf5fe4d06e9fbfbbffbdfb4856f54f749ab727f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:c0:4f:04:ad:fb:13:b6:00:59:f7:e2:1f:
dd:1b:a4:6f:74:e4:91:b6:52:05:73:15:8a:38:47:
57:81:56:78:8c:a6:e0:ad:b0:b5:e2:59:1c:ea:25:
e4:8a:81:e4:45:ff:9e:89:e8:6b:f9:8a:cb:39:64:
0d:88:71:d8:e5:e1:ab:9d:20:47:1f:f6:d8:92:74:
21:b8:76:ec:72:48:e5:d2:66:99:5b:9e:31:f9:79:
d1:0b:04:af:f8:8e:78:9f:56:bf:4b:e5:98:f6:6b:
03:ec:a1:ea:fd:d6:cd:30:63:d0:57:70:63:bd:9c:
da:1b:97:6b:5b:ac:cd:d2:d0:bf:22:88:d0:0c:e6:
ad:06:42:60:fa:bb:51:86:a3:e1:46:1e:ba:ff:11:
42:e3:37:86:c2:91:67:34:bf:d6:20:d8:70:57:8c:
a7:7e:59:ff:fa:77:ba:8b:3a:9e:93:3e:49:6f:dd:
eb:2e:2e:f0:e1:ea:5d:2e:ea:79:40:c7:54:15:b6:
a0:1b:97:42:9f:0e:56:07:6b:2e:ed:f2:3d:0d:0b:
61:96:04:a3:ae:21:2d:99:e3:53:5f:5a:01:d6:a0:
fe:12:72:8f:bb:73:86:c2:8d:f3:95:63:a8:d4:4f:
62:8e:40:48:cd:3b:3b:2c:61:37:f3:19:f5:32:47:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:FE:4D:06:E9:FB:FB:BF:FB:DF:B4:85:6F:54:F7:49:AB:72:7F
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ec:f2:38:cc:05:d6:09:a3:cc:0c:fa:7a:7d:c2:bc:98:61:
cf:0f:1e:a1:e6:6b:41:97:de:3c:00:78:62:4b:71:7a:ac:86:
9a:3a:9a:1f:c7:20:e4:d9:a5:e2:e3:95:a5:c7:47:ec:83:0d:
89:61:70:06:68:24:47:47:4d:bd:70:93:c9:59:fe:be:0c:3e:
ad:f6:bc:8f:5f:92:38:51:3e:61:9a:10:e5:81:ee:9b:7c:a5:
2a:f0:f2:52:d5:ba:43:81:98:4c:79:91:8c:7d:d0:55:3c:24:
2a:d3:db:21:2f:2f:06:3d:d9:32:c0:26:0a:63:96:b7:8b:3a:
7c:8c:41:9e:cb:e0:47:47:23:2f:1c:1c:cb:5b:35:06:fb:6f:
ee:0b:ab:9d:f0:fa:2a:c0:be:58:99:0c:fd:61:77:d1:72:c2:
45:67:c9:c4:b8:37:a0:92:2e:69:9d:8e:f6:ca:57:86:93:49:
da:d7:63:df:83:78:b5:a2:5a:24:c1:f6:e7:eb:c9:3c:10:e8:
70:cf:ee:05:48:28:1e:cb:43:97:dc:24:ee:9a:ab:6b:5c:4b:
e5:5a:1c:16:ca:fc:2d:4c:4e:1e:41:5c:07:1d:29:d7:e6:b8:
7b:4c:ca:87:94:ae:11:6d:87:57:54:49:df:15:cd:8a:4c:98:
67:72:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:10 2025 by rpki-client