Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: i9Y+bYUdv0rjevfqCs65t8xJfacyDECIPNA1P71MzLg=
Subject key identifier: 63:AE:CD:AC:66:23:2E:44:34:B1:09:AF:D7:85:46:5B:2A:45:E9:27
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 0197488C552F84F36829286D8883F66B44F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 062A
Signing time: Sat 07 Jun 2025 04:00:45 +0000
Manifest this update: Sat 07 Jun 2025 04:00:45 +0000
Manifest next update: Sun 08 Jun 2025 04:00:45 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: js1IRZ+Ev6aNVCME0s0ldf75eSUFHULMPtNg9STrpN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:55:2f:84:f3:68:29:28:6d:88:83:f6:6b:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Jun 7 04:00:45 2025 GMT
Not After : Jun 8 04:00:45 2025 GMT
Subject: CN=63aecdac66232e4434b109afd785465b2a45e927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:2b:6c:d9:24:21:91:74:55:a6:b0:d1:5f:
02:df:fc:7f:8a:57:b4:79:2d:90:da:38:7f:b8:b3:
74:24:90:82:8a:6d:c3:c3:5c:e1:fe:38:36:d9:ea:
77:b8:21:e0:fa:f1:b2:82:50:4f:33:24:88:ea:69:
9a:00:13:08:80:6e:36:ca:e9:11:3c:43:ed:56:d2:
13:d1:2a:e0:83:28:f5:8c:8a:d7:bb:17:d0:a3:41:
cf:21:32:b0:31:3a:af:ae:8a:8a:0a:ae:d5:f1:54:
b6:1b:6f:95:12:22:31:40:8d:70:87:08:ec:c1:0b:
8a:46:c8:83:67:e4:05:40:09:ae:a0:49:4e:24:b6:
54:e6:b2:1d:d1:76:40:e2:1d:36:cd:5a:40:06:b0:
d8:11:cc:07:b9:2b:a3:cf:b6:07:9f:a1:80:4b:c3:
4c:c5:20:4b:26:ab:97:be:d4:ff:fa:d3:bb:57:4c:
7e:4f:0c:63:bd:f7:54:08:bc:2a:0a:f3:e0:40:df:
d3:39:d6:4c:d6:07:97:51:8a:90:4b:fc:6a:b1:ff:
73:c8:2b:d7:57:5f:f3:6a:7a:8d:bf:75:fc:8b:b8:
24:07:20:f7:06:9b:57:fe:a5:e0:02:78:6a:24:f8:
2f:43:f2:5f:e9:9d:3f:01:c3:ac:c2:b8:d8:8d:e0:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:CD:AC:66:23:2E:44:34:B1:09:AF:D7:85:46:5B:2A:45:E9:27
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:f9:5d:af:9d:4c:03:4d:7c:03:31:1a:63:5c:68:16:b6:
14:d4:fe:6d:ed:c5:ee:b7:c5:7a:df:eb:33:1b:52:a7:27:b3:
2b:cc:5a:b1:99:1e:2c:e7:76:50:32:1c:01:da:a4:b4:aa:26:
06:e6:d4:f2:9e:4b:74:bc:88:d9:c5:97:17:75:3c:af:44:65:
eb:2b:e4:29:36:05:cf:8d:ba:23:14:60:72:63:10:f9:e1:1a:
23:03:d5:2f:e8:a2:4f:90:93:93:2b:7f:b5:28:a5:d0:2a:44:
f3:5c:57:cd:c0:06:96:5d:db:08:03:56:26:08:4d:a8:d3:d3:
b7:1a:48:64:97:3f:53:dd:37:46:ef:bb:22:b5:8f:ef:99:40:
8c:1b:c0:83:9e:7e:61:17:25:6e:27:a6:8c:72:4b:c0:29:aa:
a5:d2:0e:88:e1:9b:5a:41:bc:22:46:c8:23:16:bf:ef:f5:9a:
0e:5e:40:ff:7d:9f:6d:d5:a3:a8:3d:a3:50:6b:6f:2d:85:fc:
8f:93:fb:b3:41:48:30:9a:1a:38:3f:00:b4:a7:b8:b0:86:ed:
67:d7:ba:e8:21:2d:c2:0f:b8:1f:c7:c0:ed:c9:19:d8:8f:de:
60:91:70:fc:0a:b7:90:d0:39:90:60:2f:43:6d:ec:36:79:6d:
22:b7:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:15 2025 by rpki-client