Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: 5LV5wZRXwkJP1kDoFdEyPOq4FUeP46fRI26KuEO+eoU=
Subject key identifier: 86:4F:65:01:5C:F8:D5:CE:CC:EF:8B:1D:6B:BA:B5:AC:65:37:F5:F8
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 019745F956D7E55AAFD948EFDEFC714559EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 1561
Signing time: Fri 06 Jun 2025 16:00:57 +0000
Manifest this update: Fri 06 Jun 2025 16:00:57 +0000
Manifest next update: Sat 07 Jun 2025 16:00:57 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: L6W0E1dfqsVfzFbi9TdoqcVSkYryTdJzqiUzoD41Rdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:56:d7:e5:5a:af:d9:48:ef:de:fc:71:45:59:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Jun 6 16:00:57 2025 GMT
Not After : Jun 7 16:00:57 2025 GMT
Subject: CN=864f65015cf8d5ceccef8b1d6bbab5ac6537f5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:b6:c6:2d:f1:fb:ed:12:f2:ae:2c:be:11:
98:db:c1:e6:92:0c:4e:d8:05:fe:ae:ed:ea:b6:80:
58:59:36:74:a1:34:2f:7b:94:19:9b:c6:e5:ee:d4:
7d:a1:4f:92:17:b4:d9:f8:f8:a2:00:aa:c2:4c:3e:
b6:29:7f:4f:13:51:39:20:cc:54:bf:75:64:03:c1:
6a:45:92:af:71:a9:2f:66:96:81:17:3f:f8:65:c6:
49:53:87:f3:8d:2c:9e:65:29:fa:e3:ae:51:31:2f:
0f:e3:38:d0:11:40:d0:65:79:4f:39:e8:68:3e:87:
a2:10:dc:09:33:0a:67:c4:86:fc:44:29:73:88:51:
a2:ce:28:c4:73:bc:6b:36:aa:16:9d:f0:48:e7:81:
c5:94:71:42:c5:a4:dc:94:23:c9:d1:1c:43:c3:11:
87:b1:b4:12:63:fd:b9:fb:c8:7a:49:9e:93:58:55:
02:01:b7:b8:c4:1c:81:4c:e7:ef:65:12:04:58:39:
8b:f5:8e:7e:21:7c:e5:60:11:76:51:39:bd:ce:9a:
e7:c7:a1:8a:5a:f2:2f:ab:2b:1e:08:7f:45:80:70:
41:92:8a:c6:3d:5b:8a:2e:47:fc:a8:bf:c7:b0:0e:
4d:2b:72:56:86:c0:8d:dd:97:00:6f:6a:4a:2b:ed:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:65:01:5C:F8:D5:CE:CC:EF:8B:1D:6B:BA:B5:AC:65:37:F5:F8
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:87:5e:33:97:10:42:0b:d8:46:eb:9f:72:25:fd:33:8a:7a:
f8:a7:70:f9:19:81:37:44:56:09:da:18:48:be:53:6c:7d:8e:
98:b2:4a:b6:3a:4f:6a:ea:0b:c3:8f:8b:67:a7:da:3b:f6:b2:
f8:04:b6:74:c0:86:e7:5d:b8:56:05:d9:a9:56:37:1f:b0:11:
7f:fc:7e:29:79:68:91:b4:18:82:34:07:b8:82:9b:c3:5a:a9:
5e:e8:dd:e8:34:6a:d0:93:ce:85:c4:5f:cb:f5:1b:f0:3d:5d:
fb:b6:c1:e3:bd:ae:ec:f5:b5:99:41:c8:67:12:9f:2c:e4:2c:
54:41:e1:89:d2:a2:e4:21:f0:af:19:b3:bd:8c:11:3d:c4:92:
c0:ad:51:8a:c5:10:d9:1c:bf:e3:e7:42:cf:11:dd:d4:c5:84:
57:f4:30:f8:5b:f2:30:19:c9:d0:9b:df:27:7d:b3:9a:24:07:
49:53:59:cf:69:e9:75:ea:90:cc:d3:0c:ca:37:67:34:86:f2:
12:dd:e8:f5:d4:23:f4:6a:b0:1e:83:65:b7:a2:92:04:c0:4e:
c6:24:d4:aa:7e:f2:cc:26:b4:ad:79:a3:f0:df:71:61:eb:a8:
2e:67:68:e5:41:1d:bb:d2:a5:d4:e4:c0:b5:b0:c0:89:da:4b:
ec:1a:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:54 2025 by rpki-client