Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: Is8QUy0cabYco4TpX/7VCquS8Mn7YEt9GHMiLjEfI2M=
Subject key identifier: AD:C5:76:90:A5:12:B9:6F:06:C9:1B:F6:6B:1C:A0:D6:D3:21:7E:AC
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 01974AE8B79EFF765536309C7D6EC02FA6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 10C2
Signing time: Sat 07 Jun 2025 15:00:54 +0000
Manifest this update: Sat 07 Jun 2025 15:00:54 +0000
Manifest next update: Sun 08 Jun 2025 15:00:54 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: ivH6NAPglcrJQkTbSj3k/mGF4Z0jEj0D0LRJtFlWUxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b7:9e:ff:76:55:36:30:9c:7d:6e:c0:2f:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Jun 7 15:00:54 2025 GMT
Not After : Jun 8 15:00:54 2025 GMT
Subject: CN=adc57690a512b96f06c91bf66b1ca0d6d3217eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:df:45:87:c8:17:04:c6:dc:d9:34:a3:dc:
64:a0:6b:92:30:6a:c5:6f:c5:9d:9d:38:36:db:3c:
02:b4:f6:55:8b:27:40:74:0d:6d:cc:75:76:6c:fb:
6c:40:18:d9:71:cf:14:f6:40:8e:2c:ea:fd:f3:3d:
2a:ca:c1:60:5d:aa:20:10:16:c3:e3:f9:12:be:56:
d4:6c:d6:8d:b3:75:92:77:0f:ab:19:4c:4e:b5:12:
8a:9a:32:ee:99:1f:79:0a:af:7c:0b:df:ab:dc:5c:
ca:f9:bd:fd:83:e7:16:8f:87:50:31:ed:7c:0a:03:
ca:bb:a9:8a:4d:61:cb:4c:de:42:07:06:cf:f5:44:
6e:b2:0a:9d:07:c3:9f:6b:e0:12:00:63:7d:fa:6f:
c7:00:90:f8:72:3e:e0:9b:8b:e0:73:89:b6:9c:ee:
71:2b:0a:6d:dd:36:76:5b:90:b3:5a:fa:da:9c:c9:
7c:06:49:a8:bf:b3:17:c0:88:2e:b1:6e:8e:71:ec:
f1:1b:1c:cb:0a:8d:0d:5c:93:2f:04:fb:da:52:57:
03:b0:fb:57:71:9c:13:1e:a3:4e:bb:11:03:1c:e5:
92:ed:73:4f:c5:bc:b6:7f:b9:58:3d:7a:0e:c0:f3:
2a:3b:7e:18:8d:63:69:ad:f6:7a:d5:3e:75:59:5a:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C5:76:90:A5:12:B9:6F:06:C9:1B:F6:6B:1C:A0:D6:D3:21:7E:AC
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:27:84:ea:5d:99:e2:37:6f:15:27:27:eb:e2:cf:02:1a:
1a:5d:77:49:f7:43:69:33:9e:26:c7:6e:8d:14:18:d8:33:b0:
6f:93:76:0b:78:0e:2c:64:42:80:63:b3:ae:ed:25:ab:d0:cb:
5b:5b:43:b1:dc:3b:30:cf:3d:72:5c:39:a1:4c:80:68:6f:4f:
d6:c7:29:f6:24:80:7e:6f:d8:0f:a3:49:c0:c6:85:a4:18:89:
68:d3:91:fe:9c:8c:4e:86:e9:61:aa:bd:43:ca:e5:00:f2:ef:
ad:12:f7:e5:f1:e6:bb:85:f5:19:c8:ea:5b:9c:7c:2a:d9:8a:
41:e9:2d:3c:e0:d1:15:89:ed:c6:e6:99:1a:40:87:6f:71:05:
82:fb:45:ae:ed:90:5c:e1:88:66:1c:f6:1c:5a:ac:e2:d4:03:
85:99:7f:fe:3e:80:b4:bb:d3:6b:36:0f:41:58:ba:98:d1:43:
5e:99:23:3b:1e:90:00:13:7c:71:8a:66:75:6e:92:3d:be:b2:
25:a3:c4:6b:2e:15:bf:62:34:e2:08:ec:89:e0:8d:95:1a:4f:
31:b5:33:a8:78:3a:cf:13:31:d7:60:87:72:73:74:56:d9:b3:
e2:5e:ef:c6:35:b9:07:b3:6a:d1:2b:36:c1:53:7f:12:a4:e3:
d0:48:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:18:16 2025 by rpki-client