Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: Lr1KiAnm+PUsxQxH2j6J/NXzUcaMzcy3XWnFxxhQE9A=
Subject key identifier: 89:BF:2D:63:4A:5F:FA:4E:CA:70:AD:A1:BF:D9:C9:38:4E:F4:5F:1F
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 019763CCB470B3FF6EFCA4A21C9D7AB15777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 019A
Signing time: Thu 12 Jun 2025 11:00:49 +0000
Manifest this update: Thu 12 Jun 2025 11:00:49 +0000
Manifest next update: Fri 13 Jun 2025 11:00:49 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: zGuRY8uDlRKCtL58qAgIphMDk5QSUvPR0BwGlwxy19s=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:b4:70:b3:ff:6e:fc:a4:a2:1c:9d:7a:b1:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Jun 12 11:00:49 2025 GMT
Not After : Jun 13 11:00:49 2025 GMT
Subject: CN=89bf2d634a5ffa4eca70ada1bfd9c9384ef45f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:66:b6:01:fd:70:6e:46:5b:af:d4:2a:30:
62:c4:fe:5f:65:aa:19:64:01:61:63:bc:86:e7:84:
7f:32:b4:77:28:cb:a3:f7:f7:6c:43:38:74:b2:60:
f2:4a:7a:3f:87:53:ad:c0:c7:a7:d8:08:8a:38:30:
4c:b4:09:e8:1e:df:6f:2d:81:83:ec:e8:f7:8c:92:
79:33:a2:11:42:f8:39:8d:22:ce:4f:79:3b:b8:98:
54:37:5d:b7:fa:c5:35:fb:44:51:6c:41:31:58:b7:
2f:33:98:b6:bd:a2:8d:e6:9b:b4:14:6a:c5:28:c3:
3f:f6:16:71:ca:7e:d6:3d:a3:aa:6a:15:b4:37:1e:
9b:9c:74:de:cc:83:44:b3:02:c0:12:cd:1f:72:75:
5d:70:a0:70:8b:c2:1a:da:a5:59:c2:c3:85:37:84:
8d:02:fb:7a:44:79:17:74:1f:c9:28:ad:4c:1a:a6:
1e:31:bc:5e:e2:9c:74:40:e3:87:78:67:a9:03:9b:
1c:6b:1c:a2:d9:91:a5:09:ab:b3:85:45:69:c1:c8:
f0:1e:f8:ca:c0:ac:98:83:a8:0a:25:58:6a:0c:dd:
1a:26:c8:e2:3a:64:db:64:3e:7b:99:27:d0:f6:14:
b1:63:e5:fa:00:6e:7b:f8:b5:fc:5c:76:16:a0:9d:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:2D:63:4A:5F:FA:4E:CA:70:AD:A1:BF:D9:C9:38:4E:F4:5F:1F
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:3d:e1:df:04:09:43:6e:1c:21:d0:fb:94:ab:a3:35:3e:
1e:e8:97:14:13:bc:34:ca:16:56:9a:3f:df:36:14:f4:62:84:
f2:e8:40:e4:cd:f7:84:bf:65:69:e2:3a:84:60:61:5c:9a:71:
ba:bb:e8:2c:c6:16:40:6e:51:99:c9:21:a0:68:53:a3:fb:1c:
45:c2:b1:3e:d0:8c:1f:52:92:46:11:e8:c2:da:5e:cf:d5:33:
53:2c:82:5d:0f:16:dd:31:75:09:9e:9c:52:cd:23:53:01:67:
42:e8:0d:e3:07:c5:2e:20:9b:39:92:37:f3:ef:ae:a3:09:90:
b6:04:bf:70:e1:d7:df:ad:67:3a:ec:1d:2f:c3:4c:07:83:fa:
b9:6b:48:ba:4c:57:02:19:b4:07:85:dc:8c:24:c4:75:92:e8:
14:51:53:02:5b:f7:95:99:28:f8:f7:96:6f:9f:05:46:71:fe:
c6:e8:45:3c:59:7b:75:11:38:30:de:09:57:b9:0c:83:34:70:
8a:06:fa:dd:dd:5e:f9:b8:97:44:bb:a1:e7:5e:0d:8f:84:80:
82:7b:27:2f:13:23:81:bf:3e:24:73:fa:3d:c8:da:7a:ac:a9:
f5:d1:fa:d3:9d:8a:3a:c9:21:ed:3e:72:88:64:4c:f5:8c:bd:
33:6d:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:53:35 2025 by rpki-client