Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: LB6Uc3sJ5ROWdl+pQsyUHa39zTB8i8GD0/w7gy0roLM=
Subject key identifier: 38:3C:4C:D9:0A:43:0C:50:9D:F1:70:64:C7:CE:F7:5A:E5:34:29:58
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 01974A7A6D5EFF16F423C0933D463BDE0D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0BE1
Signing time: Sat 07 Jun 2025 13:00:26 +0000
Manifest this update: Sat 07 Jun 2025 13:00:26 +0000
Manifest next update: Sun 08 Jun 2025 13:00:26 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: YlvCj73rn2NuxP+MSFGRMXhl9botnFeS1AK6M0D0z8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:6d:5e:ff:16:f4:23:c0:93:3d:46:3b:de:0d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Jun 7 13:00:26 2025 GMT
Not After : Jun 8 13:00:26 2025 GMT
Subject: CN=383c4cd90a430c509df17064c7cef75ae5342958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:1a:57:03:1f:3b:c8:21:73:6f:ba:d4:d8:
0c:6a:7f:bf:15:bd:5b:9a:dc:5b:5d:07:59:64:7a:
07:e3:40:5f:19:6d:48:a8:34:af:f7:66:05:b2:2b:
7b:96:5b:02:64:d7:33:97:8d:26:0d:e7:a0:62:32:
59:27:cb:83:e2:bd:3d:73:cc:ae:f6:55:85:4a:85:
b9:af:48:1c:5e:29:86:c6:10:da:49:37:45:57:a0:
ec:d4:9a:75:c4:53:fd:2f:ff:19:31:61:72:e5:df:
90:96:fb:ae:80:ca:3c:c1:00:83:c4:00:9b:f4:aa:
f8:5e:51:0d:59:f6:82:f1:62:e3:65:d2:1e:d7:bb:
1a:23:26:ab:0f:e1:3a:db:6d:5a:56:55:82:f9:b6:
5a:9e:01:18:c5:41:a7:56:d3:d6:91:4f:30:a6:a6:
c7:a7:97:c7:74:43:91:29:66:94:86:d5:7d:2a:de:
d6:bd:75:7d:1d:7d:36:1f:47:11:66:21:df:d0:9e:
b9:e0:1e:06:a8:2b:13:8d:00:53:72:f6:4b:f9:18:
d4:39:3e:7d:11:7d:50:62:14:74:b1:77:b2:67:b2:
b0:96:dd:14:65:5d:56:eb:24:49:e6:c5:e2:21:e3:
45:c8:c6:13:99:e0:3d:e0:10:ce:c3:f3:5b:9f:ed:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:4C:D9:0A:43:0C:50:9D:F1:70:64:C7:CE:F7:5A:E5:34:29:58
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f1:99:ef:3b:74:21:9f:2d:2f:66:77:64:ae:2a:e0:f4:c6:
22:f8:1a:87:97:a1:a9:72:52:7f:b8:c2:c8:d7:fd:1b:86:a5:
dd:3a:c9:37:cb:6b:ad:f6:2c:1c:68:01:40:86:95:7f:4d:85:
0f:c1:85:14:e8:82:4c:ba:b1:5e:ae:38:9e:ae:74:f7:59:8f:
c7:b1:94:25:3b:a2:0f:53:2c:b6:cc:3b:80:f0:dd:4a:94:66:
0e:3d:c2:ba:cb:03:94:c3:cb:77:a1:2f:8a:96:91:32:98:40:
96:1f:bf:1f:9b:04:e4:30:b8:ea:08:2a:1f:6f:84:b7:03:1c:
67:d9:eb:93:a0:34:60:7a:df:ad:44:56:e0:11:3f:d2:ef:de:
31:2f:30:e6:80:7f:75:b7:28:7d:ad:a3:71:02:98:27:d1:22:
ca:1b:e4:58:e2:27:b1:7a:e6:91:ac:0e:6a:2c:b2:0c:72:bc:
6e:f5:83:57:4f:c5:0a:b1:40:3e:13:54:bb:f0:32:db:ef:39:
2c:e5:84:dc:d3:2a:fd:f6:aa:18:a7:1f:5f:a3:67:8f:41:e4:
77:c2:f0:8b:0c:c3:0d:7d:42:e5:e2:3d:cc:d5:a4:e2:9f:2b:
e4:cc:e0:10:0e:79:7b:79:5f:25:8f:79:53:b0:94:ee:b4:19:
01:1a:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:23:57 2025 by rpki-client