Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: EnzD7YbpcTrLew3mdHprs1PWHfV73DM4MVERxdtHMbs=
Subject key identifier: D3:4F:F0:3E:62:57:E7:62:2F:5A:78:4D:A4:27:7D:FF:11:AF:0D:33
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 01975A5BA8C3D1B8770CA66165AE05D41764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 15:00:45 +0000
Manifest this update: Tue 10 Jun 2025 15:00:45 +0000
Manifest next update: Wed 11 Jun 2025 15:00:45 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: CbzwZrVECMLlDhDeyBeZmBU9FZgldlpeqUaK4+VoxIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:a8:c3:d1:b8:77:0c:a6:61:65:ae:05:d4:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Jun 10 15:00:45 2025 GMT
Not After : Jun 11 15:00:45 2025 GMT
Subject: CN=d34ff03e6257e7622f5a784da4277dff11af0d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:9b:d1:6b:22:a9:54:c2:8c:1f:de:d2:72:
7a:38:a7:f7:06:f6:62:2b:f1:41:98:f8:1f:72:67:
7e:46:0e:fb:64:ea:c8:b7:c6:74:bb:80:43:59:7c:
ff:68:6c:73:ac:18:37:1e:64:f5:93:f5:ea:05:b7:
6d:4d:37:ea:e3:24:50:63:56:54:5f:f2:57:bd:d8:
e6:6d:ff:ae:9b:60:c6:0a:d5:fa:bd:37:14:86:43:
3a:15:55:40:13:db:45:77:4d:bd:3c:ad:cd:18:e2:
fa:2b:db:2d:57:77:05:9e:61:20:82:5c:4a:15:31:
d0:ec:6a:6b:e5:c3:26:22:b3:b0:5d:9b:48:61:9d:
d6:bf:56:a1:58:df:cc:f9:4c:40:50:38:c0:e9:21:
0d:6b:00:28:c7:52:2e:d9:64:b5:fc:e6:11:8f:0f:
d8:1e:8a:74:6b:3e:6e:d3:43:c3:f5:54:6e:b5:12:
1c:e4:ae:96:dc:66:ef:03:42:3e:76:ee:f2:5a:3f:
0c:88:1d:aa:a5:3f:b1:d0:35:fc:a5:cf:c5:a3:6e:
f8:5f:4a:27:db:c7:ff:bc:ff:3d:7d:f9:45:c4:de:
fb:d1:85:0b:79:d2:31:27:4b:f7:d4:43:7a:d2:da:
37:9c:79:29:73:ad:9d:76:55:b2:eb:cc:28:38:ee:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:F0:3E:62:57:E7:62:2F:5A:78:4D:A4:27:7D:FF:11:AF:0D:33
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:98:9b:e0:30:fe:62:e2:30:8e:c8:e0:cb:54:97:5b:b6:62:
1f:a1:ec:2e:9e:ea:29:00:c4:96:46:ee:20:22:2c:f8:2e:7c:
98:3e:aa:43:a2:83:f6:03:29:4a:e3:9a:86:c3:f7:00:3f:44:
07:c5:13:17:fc:25:e0:e3:ef:c6:6c:06:f4:da:55:a3:de:20:
1b:50:13:ce:f2:75:cf:71:3d:65:49:61:ee:ac:db:a4:d9:b4:
f0:1b:0f:e5:73:f9:cb:75:4b:60:3e:e6:8f:1b:9b:57:09:d5:
a5:53:a8:94:61:88:b2:0e:27:4b:63:a5:46:6d:e8:5f:83:89:
b8:53:23:5c:f4:68:db:2b:c0:31:af:02:6f:6d:40:96:6f:b2:
cb:0b:14:cb:91:68:5c:02:6f:02:23:0c:68:74:a8:3f:4c:5b:
14:c6:64:0a:bb:56:cf:74:1e:8d:b3:73:19:9f:0e:03:ca:93:
9b:0b:8e:d0:0e:1a:1a:46:db:cc:6d:5c:c9:bb:15:c9:32:d8:
e3:e4:18:19:5a:60:19:79:94:4d:e6:57:dc:ca:3f:17:ce:98:
ef:93:4e:e2:52:58:a8:f0:93:9a:48:34:eb:08:fb:49:c9:a1:
89:f1:1c:db:e4:55:e8:82:76:fa:81:67:9e:e4:e1:d6:79:e2:
12:5a:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:54:25 2025 by rpki-client