Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: V/61mM7a+qmByeMcm4UIIYJ7w1pLxVWYi1MA9hOlWmU=
Subject key identifier: 82:7F:7F:9E:91:5C:EA:90:E1:30:A8:DD:E3:A9:BA:80:A3:EF:3A:04
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019747B0F080BDC7B3FD9188E731E35E7198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 02AA
Signing time: Sat 07 Jun 2025 00:01:07 +0000
Manifest this update: Sat 07 Jun 2025 00:01:07 +0000
Manifest next update: Sun 08 Jun 2025 00:01:07 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: ohTvxvkafWbF3MmIEMdCEQ1Xck3MZTXm1RBo6jXfXo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:f0:80:bd:c7:b3:fd:91:88:e7:31:e3:5e:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Jun 7 00:01:07 2025 GMT
Not After : Jun 8 00:01:07 2025 GMT
Subject: CN=827f7f9e915cea90e130a8dde3a9ba80a3ef3a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:18:23:4e:88:1b:15:15:e1:c9:72:c9:9d:
3d:6f:2c:61:ee:e4:00:2a:44:5b:5d:5a:ff:53:69:
55:91:99:95:87:f6:c4:a1:c2:9f:64:33:a4:55:11:
44:20:f5:dd:18:b2:28:f0:d9:32:11:0e:e6:18:d6:
f2:6a:4d:04:d8:34:c6:6f:2b:e5:d4:eb:75:70:58:
d4:db:36:5f:4a:5b:9b:1a:c8:d6:c6:48:45:a5:d5:
fe:ea:0b:d9:7f:66:da:d5:d8:e6:2f:2e:c2:f0:61:
4f:37:65:b6:1c:1a:e5:25:2f:8b:63:13:50:25:ef:
fd:a9:ea:fb:a1:9d:ca:7c:7a:6b:dd:b5:87:9e:e3:
48:ad:f6:03:83:a6:6d:d9:95:c0:9f:55:62:12:3b:
40:82:36:20:5d:bd:f5:ab:68:2f:f0:42:5e:e4:ba:
20:ee:5a:65:6a:32:5d:be:1e:21:cc:79:05:58:a5:
90:b6:67:a7:c8:1b:0d:8d:a9:de:e3:39:1c:0b:54:
3d:9a:50:1d:ae:14:71:50:52:c1:d4:0d:bb:1f:5b:
24:47:25:a6:26:71:b6:b1:99:e2:c5:92:8e:95:0a:
f8:ca:4d:f6:44:ee:a9:1f:5e:2e:a4:fe:34:95:23:
c5:f7:9b:69:99:e7:d6:31:2a:31:6b:77:2f:71:30:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:7F:9E:91:5C:EA:90:E1:30:A8:DD:E3:A9:BA:80:A3:EF:3A:04
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:57:90:de:50:da:f1:1d:3e:a2:cb:8b:70:6e:81:67:97:c4:
0a:59:91:cf:9e:a5:c8:c3:5b:7d:65:c5:72:4d:f5:55:8f:4f:
69:ab:67:38:66:55:e8:32:85:07:80:f8:35:7e:95:83:d9:db:
cb:85:65:17:dc:b4:51:71:c0:27:f1:54:2e:62:c3:5b:4e:a8:
07:86:b5:7f:cd:d6:27:fe:19:db:6c:62:af:6d:8b:34:13:4e:
69:5e:fe:67:2d:a4:6e:8e:79:9f:79:91:e5:e8:fe:46:72:10:
67:8a:13:f0:28:cf:4c:2d:30:4b:7a:59:4e:08:b7:06:c7:b7:
d4:16:ac:94:04:33:2b:f4:7a:a7:f5:97:49:f1:2a:a8:c5:0c:
74:09:53:84:91:df:9e:fa:57:65:b0:ba:7a:e2:aa:b1:03:41:
f2:0e:21:b2:0d:44:8a:b3:06:c8:ae:e2:27:f6:f9:f1:b0:09:
0d:ce:e7:c4:b9:51:27:4f:d5:a5:90:ae:2e:4e:65:84:80:ac:
3d:81:3a:f1:fa:21:3a:ef:af:7e:df:2e:dd:0a:8b:54:15:25:
63:2f:fd:84:cc:e7:3b:73:4e:9d:e1:60:7d:1b:a2:22:a7:56:
42:b1:f1:6a:64:30:d9:3e:ef:55:0d:d2:20:ad:d5:8c:b1:f6:
e4:1e:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:43 2025 by rpki-client