Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: zoFId+vBtoEwD7bz8sa3hL+7N4xqWx05TsQFHmdMxm0=
Subject key identifier: D1:87:55:68:E8:7A:3C:3F:48:00:63:9E:A9:65:F8:B5:D6:EF:18:41
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 01974D44F7B8BBF900B9E5FC35C6148F2A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 0F8A
Signing time: Sun 08 Jun 2025 02:00:54 +0000
Manifest this update: Sun 08 Jun 2025 02:00:54 +0000
Manifest next update: Mon 09 Jun 2025 02:00:54 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: +ZR1ImOACpuqtHSVLuus8qthLos0/pUkNQ6Xa3ZqhaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f7:b8:bb:f9:00:b9:e5:fc:35:c6:14:8f:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Jun 8 02:00:54 2025 GMT
Not After : Jun 9 02:00:54 2025 GMT
Subject: CN=d1875568e87a3c3f4800639ea965f8b5d6ef1841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:11:b3:63:ee:f1:28:3c:5b:ec:aa:6d:71:
5e:c0:94:f9:95:0a:24:a5:57:b0:a5:be:ee:5c:74:
95:01:81:6f:3c:36:66:00:78:5c:3b:ea:04:fc:57:
ee:8e:75:33:87:21:e6:ca:46:ed:91:f6:15:42:87:
c0:91:5f:dd:c5:0a:4d:f1:ab:0b:df:ea:01:72:f4:
d5:58:6d:87:ce:a7:3b:a5:6b:d8:d9:9f:73:8b:e1:
6e:c0:d1:2a:41:77:f6:5d:46:36:59:e2:67:2f:39:
96:ce:a2:a2:ba:a5:4c:d9:6a:b7:d7:4e:35:15:91:
95:ee:2c:e8:05:57:ea:ee:23:55:34:db:02:91:88:
a9:b2:b0:9b:ff:71:ee:8d:92:05:44:40:56:74:db:
4a:28:8f:75:19:c0:f5:39:0b:75:f8:fc:02:50:48:
95:3e:53:0d:ab:81:aa:18:85:51:83:07:7b:cb:09:
51:3d:a9:32:f9:a6:2c:f6:df:41:f3:3c:36:c1:f4:
46:9a:19:12:62:ad:cf:44:bd:d5:0b:6a:77:9b:d2:
b5:5d:85:df:95:9c:f6:4e:69:50:c5:d7:28:1b:80:
6b:d8:aa:46:ea:d5:49:9b:8a:02:27:46:fe:a5:e6:
f7:dc:e1:8f:1b:63:2b:00:b4:f1:9a:75:f9:e4:ed:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:55:68:E8:7A:3C:3F:48:00:63:9E:A9:65:F8:B5:D6:EF:18:41
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:63:3a:5c:3d:24:79:30:80:bf:0e:e9:12:39:48:84:5e:
1b:42:b8:36:25:a9:b2:c4:48:71:c7:dc:34:79:4a:ad:8d:a2:
05:fa:a0:04:53:ae:ce:f8:d9:64:29:bb:57:1d:11:24:3d:2f:
92:57:9a:48:ff:33:04:00:d1:c8:49:4d:75:94:31:c8:50:bd:
22:bd:10:97:a9:fd:00:6e:34:8f:d8:4c:3b:19:10:6d:9f:f5:
b7:49:a8:de:5e:88:a2:51:a5:a3:23:08:a5:51:6d:6b:90:4f:
ee:cf:66:63:e1:99:07:09:fe:f5:1b:0b:6e:a1:65:87:78:9c:
43:09:cc:b5:ef:38:45:6f:9b:05:a0:09:16:25:87:66:8b:3d:
36:95:0d:30:7f:a6:33:5b:18:be:5e:e9:e6:0a:44:b4:4d:88:
a5:38:8d:d7:53:f4:f0:6d:99:4d:82:31:06:40:3c:6d:4a:f5:
3d:8f:91:09:4f:00:12:9e:be:d8:a2:e3:9e:15:15:51:aa:ef:
d8:1d:9f:de:8a:df:d0:31:3b:0f:6a:60:6d:2d:b9:10:9f:b7:
e0:cd:75:06:09:f4:a6:43:0f:95:5d:c1:fd:c9:18:73:51:26:
16:6a:7e:34:8f:06:c8:8d:c5:ea:43:84:e3:ed:18:51:85:e9:
46:de:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:19 2025 by rpki-client