Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: FI8Y5Yde9HWDG6oopFFEMiwZu/drTeijSFxAzLmQF50=
Subject key identifier: 02:36:1C:F7:55:07:F1:7A:BB:6B:B0:D9:91:FC:A5:14:3A:46:2F:35
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 01974EC5559B4FE8072023DACE093D6D8BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 047C
Signing time: Sun 08 Jun 2025 09:00:44 +0000
Manifest this update: Sun 08 Jun 2025 09:00:44 +0000
Manifest next update: Mon 09 Jun 2025 09:00:44 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: fmbYJ2/jDhFBIJYZnvX07ONsOQdKtIr/D0f3YksvR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:55:9b:4f:e8:07:20:23:da:ce:09:3d:6d:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Jun 8 09:00:44 2025 GMT
Not After : Jun 9 09:00:44 2025 GMT
Subject: CN=02361cf75507f17abb6bb0d991fca5143a462f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:2b:e2:1c:94:90:5f:95:bf:ad:d1:e1:7f:
d7:56:be:a1:11:6c:89:90:76:31:6f:ec:36:c1:a4:
38:7a:af:2e:26:5a:40:0d:78:59:d3:3f:df:74:2c:
b7:e7:47:4c:0e:d5:77:ce:90:48:43:28:ee:a8:af:
97:6f:7f:28:e8:cc:aa:44:72:b9:cf:42:d7:9d:c1:
e3:59:58:f1:91:60:bf:e5:3f:82:4b:68:b1:42:5a:
c5:3d:da:5b:d9:75:31:cd:d3:f3:5d:0d:95:c4:ad:
3e:6a:34:6f:c8:7c:24:fe:c5:09:de:67:b2:c4:f5:
89:91:6e:cd:d6:e7:c8:21:d9:fb:b4:ca:a9:32:33:
0f:73:f3:c5:5f:f0:ac:5e:53:88:52:d3:01:70:0b:
de:f2:61:47:2c:85:dc:28:cc:ae:17:7b:27:b2:ec:
ed:a4:41:3a:49:36:e2:ad:25:e5:36:da:cb:01:5b:
de:bb:f2:cf:19:95:dd:87:2f:e9:ce:44:a0:0c:34:
91:9f:9e:a0:b6:15:dc:54:06:7f:8e:31:1e:88:d5:
81:7b:a7:9a:f2:a6:74:21:e5:d3:c4:92:db:ce:b9:
43:51:a4:ed:dc:3c:b7:c3:c3:de:d1:b7:db:ba:2a:
08:18:41:92:8a:f8:4e:56:97:91:82:5f:d5:34:81:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:1C:F7:55:07:F1:7A:BB:6B:B0:D9:91:FC:A5:14:3A:46:2F:35
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:84:60:60:76:6a:23:73:63:a1:1a:74:fd:e9:a9:fb:f9:
f3:b2:59:ad:81:0f:c1:a0:aa:02:13:26:a3:d3:53:76:0c:45:
78:70:95:ab:e7:7b:7d:44:5a:ef:08:f6:f9:dc:a8:ea:db:d3:
e8:68:a9:44:87:09:4f:af:34:d4:ba:00:69:6f:b0:43:7e:42:
d8:a1:c3:c5:09:f1:ba:db:c2:51:b2:77:33:ca:10:0b:1b:b4:
f6:39:76:84:16:f3:ee:06:d7:ea:53:0c:6b:e6:c7:d4:41:2f:
b6:d3:7c:28:60:8e:e4:43:f1:c1:0d:a6:bd:ae:57:49:ac:60:
85:1f:3c:da:77:8b:9b:ec:05:e6:65:37:56:ff:44:d3:20:9a:
d2:6c:eb:b1:a0:c2:a7:72:35:e6:54:72:fb:ea:4f:f9:f5:8d:
c7:46:f6:bc:d4:d4:d0:a5:9f:a6:0e:6f:a8:a5:21:a9:c0:0c:
77:f4:5b:af:51:1f:6f:ed:ab:b3:0b:bc:35:de:77:5b:8a:a3:
d6:11:f7:41:9d:1d:89:b8:46:0c:e2:75:89:6d:48:7e:32:e2:
46:af:c3:42:16:28:bc:b9:c3:62:b1:3e:52:94:a7:16:c8:9c:
e7:32:20:9e:1e:80:f9:e4:f4:c4:3d:9f:19:0c:b7:85:c5:60:
34:5a:2c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxVWbT+gHICPazgk9bYukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NGNlY2FkYmJmY2JlOTYxYjQyZWQwNjI3NzdjOGM1Njg3
YzM2NzEwHhcNMjUwNjA4MDkwMDQ0WhcNMjUwNjA5MDkwMDQ0WjAzMTEwLwYDVQQD
EygwMjM2MWNmNzU1MDdmMTdhYmI2YmIwZDk5MWZjYTUxNDNhNDYyZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPcr4hyUkF+Vv63R4X/XVr6hEWyJ
kHYxb+w2waQ4eq8uJlpADXhZ0z/fdCy350dMDtV3zpBIQyjuqK+Xb38o6MyqRHK5
z0LXncHjWVjxkWC/5T+CS2ixQlrFPdpb2XUxzdPzXQ2VxK0+ajRvyHwk/sUJ3mey
xPWJkW7N1ufIIdn7tMqpMjMPc/PFX/CsXlOIUtMBcAve8mFHLIXcKMyuF3snsuzt
pEE6STbirSXlNtrLAVveu/LPGZXdhy/pzkSgDDSRn56gthXcVAZ/jjEeiNWBe6ea
8qZ0IeXTxJLbzrlDUaTt3Dy3w8Pe0bfbuioIGEGSivhOVpeRgl/VNIG53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI2HPdVB/F6u2uw2ZH8pRQ6Ri81MB8GA1UdIwQY
MBaAFDZM7K27/L6WG0LtBid3yMVofDZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZTYyNzQtYjg3Yi00YTVkLWJlMjQt
MzU2NjBlNzFiYTM4LzEvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZTYyNzQtYjg3Yi00YTVkLWJlMjQtMzU2NjBlNzFiYTM4
LzEvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv+EYGB2
aiNzY6EadP3pqfv587JZrYEPwaCqAhMmo9NTdgxFeHCVq+d7fURa7wj2+dyo6tvT
6GipRIcJT6801LoAaW+wQ35C2KHDxQnxutvCUbJ3M8oQCxu09jl2hBbz7gbX6lMM
a+bH1EEvttN8KGCO5EPxwQ2mva5XSaxghR882neLm+wF5mU3Vv9E0yCa0mzrsaDC
p3I15lRy++pP+fWNx0b2vNTU0KWfpg5vqKUhqcAMd/Rbr1Efb+2rswu8Nd53W4qj
1hH3QZ0dibhGDOJ1iW1IfjLiRq/DQhYovLnDYrE+UpSnFsic5zIgnh6A+eT0xD2f
GQy3hcVgNFos7w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:06:52 2025 by rpki-client