Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: OxzaDbtC1hBSfWi8Nx/GEyxMKOWiOUOCztJfeI23Sns=
Subject key identifier: 1C:17:F9:B3:D7:03:5F:06:62:52:14:60:C6:69:CF:CC:30:FD:54:DA
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 01975045C656AB4E9EECE5522A923B4B2EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 16:00:39 +0000
Manifest this update: Sun 08 Jun 2025 16:00:39 +0000
Manifest next update: Mon 09 Jun 2025 16:00:39 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: zzRg2i4SqkrqRbQEcrQV5NusoU8HIUuHnT5FyoOsS7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:c6:56:ab:4e:9e:ec:e5:52:2a:92:3b:4b:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Jun 8 16:00:39 2025 GMT
Not After : Jun 9 16:00:39 2025 GMT
Subject: CN=1c17f9b3d7035f0662521460c669cfcc30fd54da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:ae:38:43:71:62:d1:c2:aa:5c:b1:6b:c7:
8e:33:80:0e:e5:9f:38:8e:12:41:6a:75:18:56:6c:
35:65:f6:5c:90:60:b0:d1:f2:6e:61:e1:b6:4a:ed:
47:27:d6:7c:0e:06:76:4d:a9:28:da:d5:37:cc:f1:
52:1e:4e:01:df:ab:1f:e2:80:13:a6:27:ff:6f:f9:
81:25:f6:01:40:f8:bd:f6:9e:aa:3e:1e:59:76:41:
29:ca:4a:56:7c:c3:00:09:e5:9e:a8:30:98:85:80:
95:8e:f8:49:08:cb:7a:43:fa:59:5e:57:e2:b6:94:
b1:c9:ec:31:d6:1d:a8:e9:51:8e:d2:8d:1d:1f:46:
a6:fb:83:57:29:7c:cf:ec:72:7d:92:2e:be:ee:e1:
1f:45:52:c4:a5:69:30:48:3c:4d:10:67:7d:79:81:
0e:d8:cb:a5:bd:ec:96:ee:01:72:92:16:26:9b:b2:
bf:fb:83:53:e1:ca:83:92:f8:8a:e2:ff:80:ea:44:
fb:f6:d1:9f:f4:da:c8:54:8e:f4:d1:7f:9a:c0:84:
d9:4d:b7:6d:71:4a:a5:09:67:08:dd:7a:2b:92:e5:
0f:46:dd:4f:00:14:f4:87:4d:56:8b:31:e2:99:ec:
c6:4c:49:a0:1a:59:52:92:ae:4a:f3:67:f1:95:e2:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:F9:B3:D7:03:5F:06:62:52:14:60:C6:69:CF:CC:30:FD:54:DA
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:26:2f:61:ad:46:53:17:30:59:3f:a4:a8:f8:33:b7:aa:60:
06:93:41:63:2b:b5:b3:75:f7:89:b7:76:ba:39:89:80:2c:5b:
2e:2a:05:1e:de:fc:d0:22:ae:8e:a0:e0:e8:6d:73:7e:1c:1b:
f9:1a:b6:93:40:aa:bf:7e:71:1e:b8:ef:3c:3a:15:43:e7:ca:
af:f7:f3:ec:f9:31:da:f4:13:37:0c:9c:25:db:0e:08:e4:cc:
6d:b0:5b:ca:76:86:15:52:2e:b3:69:07:9f:9a:f0:9f:66:57:
c2:ec:9f:4c:6f:80:c1:6f:bc:42:5f:19:95:eb:e0:6d:c1:06:
c4:08:c5:bc:ce:fe:a1:59:c1:b5:8e:c3:ca:7f:99:21:c7:1f:
9e:c1:09:10:49:f0:c5:c1:ea:52:42:a1:78:40:be:ed:c4:65:
46:82:fd:d7:08:e1:04:be:13:88:3f:02:32:83:1a:6b:a0:90:
45:af:15:b7:f9:f5:80:b8:c8:25:e8:41:f6:2d:51:02:06:03:
ea:25:b4:14:b1:5d:d5:7c:ef:f1:e9:be:30:ee:c1:63:74:df:
34:d9:ab:37:9e:5c:38:17:25:c0:c2:d3:53:22:48:bb:38:00:
c1:48:a6:8d:07:ba:a8:19:53:03:bf:05:fd:4e:a6:4c:97:99:
3b:46:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:26 2025 by rpki-client