Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: S0fKvwjr4vpE9U5lM6LYhdu44FVZeofsH0yLDCsGCp8=
Subject key identifier: F3:72:1C:54:54:91:77:27:F6:51:1D:B4:36:65:55:70:14:44:5E:54
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 019749D63A63FAACFF0068085F11D3CB85BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:01:05 +0000
Manifest this update: Sat 07 Jun 2025 10:01:05 +0000
Manifest next update: Sun 08 Jun 2025 10:01:05 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: rB9GFw+SSWE5LAKPlrugcq2h3EhW7OhZd9Dg+CDrAnA=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:3a:63:fa:ac:ff:00:68:08:5f:11:d3:cb:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Jun 7 10:01:05 2025 GMT
Not After : Jun 8 10:01:05 2025 GMT
Subject: CN=f3721c5454917727f6511db43665557014445e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:d8:ff:18:d5:46:5c:e5:cd:ea:4c:c3:59:
3f:7e:16:ee:23:6e:6c:d8:8b:13:ef:d6:38:5a:11:
83:12:a8:8f:25:2e:48:70:6a:6e:c5:81:29:52:35:
9a:d8:45:45:77:85:e9:43:11:53:49:80:06:df:a0:
08:10:e7:97:73:2a:0a:ca:77:b6:5e:86:49:d7:4e:
17:44:c0:2c:8e:a3:1f:2a:7a:2c:f6:1b:4b:97:de:
18:69:7e:e5:94:49:d9:bf:66:75:4a:45:9d:41:fb:
11:c1:f3:7d:7a:5f:60:a0:bf:e1:54:57:c8:f9:9a:
25:d4:fc:1c:a7:6d:73:bb:dd:6b:6b:e7:a1:d0:55:
21:a9:70:58:a8:1f:08:cb:02:ce:38:66:e1:42:33:
4e:5c:20:af:f2:df:7c:4e:64:af:8e:28:a0:06:4c:
51:28:ae:39:2c:cd:6d:28:8b:0f:2e:cb:3a:54:96:
8c:52:42:c5:eb:e5:26:ab:4d:50:fa:23:3d:79:58:
89:67:ff:05:c8:2a:69:21:91:b4:23:c3:7e:e3:ee:
de:08:7f:5c:ee:89:85:6c:eb:bb:4e:43:1d:71:45:
82:4e:a2:3d:d1:18:ae:21:3d:b8:c8:ee:1e:92:50:
40:7d:3d:f6:67:48:30:7d:75:d1:63:19:8c:29:0e:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:1C:54:54:91:77:27:F6:51:1D:B4:36:65:55:70:14:44:5E:54
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:fc:b9:be:3e:e7:ef:f2:31:10:6c:58:f1:79:c2:65:5a:
cc:80:04:fa:d5:97:e8:7e:22:8d:a0:b5:77:bf:1a:22:2d:4a:
2f:71:4e:10:31:64:c3:04:0c:af:29:e5:77:56:b3:42:03:b3:
e9:ed:5c:49:7a:3a:4b:09:8d:fc:3f:38:1e:c6:23:9b:f9:ac:
d9:36:a0:ba:99:35:42:e2:09:f4:ff:7f:3c:6c:a6:4a:d0:55:
4c:f6:ec:65:bf:32:65:30:37:30:81:4b:1a:a8:4b:bd:67:96:
5f:32:86:b9:75:73:02:77:de:b4:f0:af:ea:45:1a:46:b3:3b:
30:64:e3:f7:cf:b3:31:fc:d5:82:33:46:39:90:83:39:01:58:
7a:9f:3d:8f:ce:49:22:70:d1:07:f6:37:90:c1:d0:16:b4:ce:
01:7e:d5:40:8a:2b:60:e5:fa:17:f9:22:9b:0f:12:ec:90:87:
15:77:69:62:aa:f2:c9:2c:19:ad:cf:06:fe:8c:f4:bd:92:c7:
36:90:23:57:7c:7c:da:ea:10:2f:f0:f8:75:9d:68:0d:fa:c6:
0b:fe:c5:f0:4a:d9:77:b4:42:0c:85:1c:37:b4:be:f9:a6:83:
3d:f3:ab:0f:2a:47:0f:e6:1b:5b:59:d1:d5:eb:50:4d:f0:0b:
94:84:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:26 2025 by rpki-client