Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: NI+vre+IJLWt0Jp9mfvFc7zII5Xm7ZQ2EGutAvjGARg=
Subject key identifier: FD:20:76:2C:C0:F2:9F:E8:32:35:30:6C:77:16:E3:4D:A5:C4:AB:3E
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 01974A7B25B33F5633253C0699E87E34E02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: JggaFUOloktXow6Lf5nwevIq0hmMM2fBnRZn4BVLa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:25:b3:3f:56:33:25:3c:06:99:e8:7e:34:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=fd20762cc0f29fe83235306c7716e34da5c4ab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:02:f6:66:e2:fc:e2:9f:0b:64:1d:59:96:
5a:b6:eb:4e:cc:17:0f:a2:22:dc:e0:a6:c1:93:47:
78:99:4c:c8:a6:c0:af:dc:e5:1d:4e:48:de:30:f0:
c2:3f:ac:e2:95:a3:13:b0:90:64:33:50:a2:17:a1:
d0:73:87:90:ce:a4:2c:3a:08:14:b3:4a:55:87:1d:
44:61:66:d4:31:eb:c3:75:d1:1b:8f:31:da:43:e0:
be:9e:aa:89:9a:a4:1c:b2:d1:22:fb:b9:da:d3:fc:
f8:78:8a:94:3f:03:8c:47:26:ed:b7:1d:01:e5:43:
77:ff:58:a3:08:1d:e9:4e:2f:a4:6c:d0:6a:f4:16:
7f:a6:65:22:9c:26:73:01:fc:f8:b9:37:50:19:19:
db:bb:9a:83:84:90:b7:e7:f8:24:ab:84:68:3b:fb:
df:ae:e6:77:79:0f:c3:31:7d:c2:ea:c5:b5:86:36:
3a:0f:a2:a5:c0:98:cd:41:06:19:f8:28:74:6d:41:
fa:b9:ea:e3:14:4e:18:e5:0f:b3:a4:45:db:bc:e0:
80:0b:c6:fa:8e:eb:58:3c:1a:b3:7e:6c:20:cc:41:
99:ba:c8:39:35:68:f8:4c:19:fd:22:60:d1:bc:de:
a4:77:a9:fc:0e:41:ee:13:fe:8b:15:19:96:9a:8f:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:76:2C:C0:F2:9F:E8:32:35:30:6C:77:16:E3:4D:A5:C4:AB:3E
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ee:c7:af:54:a1:66:1b:fa:02:e7:fb:3e:1a:0d:ed:8f:ed:
9e:0f:c4:a8:f7:ae:3f:71:e6:50:31:22:6c:12:e4:d8:7b:c8:
40:08:33:4f:ef:85:f6:12:c4:bc:c2:74:aa:a0:36:1c:cd:10:
20:7d:01:7a:5a:d0:eb:1b:5e:82:ef:83:57:88:ba:3a:6b:11:
55:3d:40:4b:41:af:91:f3:79:03:99:14:d0:e1:f6:db:08:c3:
58:67:f0:a8:c0:05:09:34:9e:9d:c9:d3:20:27:b8:06:ee:2e:
b3:b5:07:5e:5e:f5:64:2a:58:e3:97:c3:99:c2:58:bd:2a:20:
99:be:24:ea:9c:87:4c:5b:b3:45:58:7d:92:cc:19:89:91:f2:
08:cb:99:5c:42:91:dc:dc:99:4f:87:b9:8f:4b:71:df:f8:98:
98:00:f7:66:9b:4f:d5:5e:64:5a:f3:8c:85:f2:68:6b:59:f2:
18:f7:1a:55:38:20:4e:48:46:a7:de:e0:56:56:9b:af:fd:2e:
ec:9d:a1:34:98:e1:51:7e:5a:47:fd:d6:b1:17:6f:c5:eb:8a:
9c:6e:21:a7:66:df:ca:50:83:63:ec:78:ef:c7:86:88:95:97:
87:b3:63:ee:a7:24:d0:f6:d2:c7:27:bb:86:39:22:2f:df:ca:
24:82:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:41 2025 by rpki-client