Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: +lQ+h4qhvJEtbvvIMch0zozTLtNGmAu7k9jVH1K5k1c=
Subject key identifier: 7D:A5:DD:A9:C8:1A:13:90:81:DD:D2:8E:E5:27:ED:1D:BE:41:D7:9F
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01974C6990B08E009C406CC380AD8BA33030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0BB1
Signing time: Sat 07 Jun 2025 22:01:16 +0000
Manifest this update: Sat 07 Jun 2025 22:01:16 +0000
Manifest next update: Sun 08 Jun 2025 22:01:16 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: T+zVOM8NIAyXh1+lwxBoaeVbrJViQSJnCfE6GonO74s=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:90:b0:8e:00:9c:40:6c:c3:80:ad:8b:a3:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jun 7 22:01:16 2025 GMT
Not After : Jun 8 22:01:16 2025 GMT
Subject: CN=7da5dda9c81a139081ddd28ee527ed1dbe41d79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:8c:7e:53:75:0e:2e:16:72:25:d5:ca:09:
d8:e0:24:2f:7a:42:4d:27:93:d5:43:44:6e:f7:58:
41:d1:c5:29:7b:cb:b0:8f:0f:58:de:ab:ca:f8:45:
84:5f:de:0c:e0:1f:33:8e:b3:86:95:6f:d3:24:bf:
2f:d2:8b:fc:cb:fc:59:1a:a3:4c:6a:c9:10:3f:79:
a1:b6:21:e2:a3:0b:b8:32:de:70:cd:80:16:d6:93:
65:68:9d:f0:17:6e:32:68:36:8a:57:98:48:38:b6:
25:96:1a:f9:40:df:73:37:cb:a8:2d:db:11:34:02:
f0:c0:8d:22:b3:43:2f:3b:b1:bc:6b:fd:1d:5f:1c:
a6:c0:8a:41:ae:2d:e1:7e:c0:29:7b:d8:6e:72:99:
ef:55:fe:f4:c2:be:74:45:3c:d3:e2:72:0f:5d:d1:
e9:00:37:d3:07:4b:88:f2:e1:4a:f4:c1:5d:70:ee:
a0:cf:61:8e:c0:18:43:4f:c3:9e:62:c0:9c:49:6c:
61:14:57:c0:2b:2e:3a:03:57:b0:cf:dd:5d:a1:48:
cd:f7:0c:9d:6e:1a:fd:ca:a0:78:01:35:a8:d9:60:
19:9f:ea:e8:45:a6:06:f2:9c:59:b5:0a:d6:05:5c:
0c:bd:fe:63:60:b3:5e:c9:36:84:6c:2b:b0:7c:6f:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:DD:A9:C8:1A:13:90:81:DD:D2:8E:E5:27:ED:1D:BE:41:D7:9F
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:ad:33:fe:5f:6c:98:36:21:01:d8:f9:66:d6:a6:fd:b0:
ac:e6:b0:15:c3:bc:29:06:79:d4:bc:25:59:64:b1:e0:13:3e:
a2:a1:87:e5:2b:b5:bb:35:f7:f7:6f:75:ba:c1:ff:33:37:6a:
e9:06:ce:86:38:ca:49:3d:1c:ba:e7:31:c4:02:a5:b6:a4:57:
88:67:9b:6b:a6:24:49:81:2a:1d:65:55:b2:e9:84:46:b6:5c:
0c:29:72:ae:8a:56:f1:8c:c7:71:9f:f4:1e:2f:00:78:49:a9:
bd:ad:72:9d:54:3f:dc:06:30:a2:b4:a1:1e:bb:5c:5a:bf:b6:
44:62:a0:e9:84:12:f3:ad:b4:3e:01:e0:43:87:2e:f3:42:0d:
5a:15:46:d8:9a:2b:8e:c1:4c:f0:17:69:d6:12:51:26:aa:78:
9a:cf:90:6a:a0:b5:02:39:4a:08:5b:93:77:0b:80:74:62:4b:
dc:74:e2:6e:cd:53:03:88:87:6c:65:25:6c:1e:02:76:ef:bb:
1a:81:4e:d4:64:72:36:c9:f4:d8:72:31:83:9c:63:4d:61:5f:
2c:7e:8b:27:23:67:78:20:ee:cb:46:1f:7a:a4:7e:f2:f4:22:
8a:7f:32:6e:35:c1:84:28:6e:33:a9:1c:8a:ee:22:9d:be:50:
0e:a2:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:49:39 2025 by rpki-client