Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: e0oRnm4OQDtMLAMHWYJ6upropezlGfE28h1SqPZGc6A=
Subject key identifier: 49:97:73:E7:99:99:48:8F:64:9F:50:CA:55:A8:22:0C:E0:5F:91:E1
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 01974CD72BB8C5A5232FB64D77400ED5F62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 00:00:59 +0000
Manifest this update: Sun 08 Jun 2025 00:00:59 +0000
Manifest next update: Mon 09 Jun 2025 00:00:59 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: OY8SDG//zzVZXUeuuMZ+idUjEOHeQdYkCJRh59/t9M0=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:2b:b8:c5:a5:23:2f:b6:4d:77:40:0e:d5:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jun 8 00:00:59 2025 GMT
Not After : Jun 9 00:00:59 2025 GMT
Subject: CN=499773e79999488f649f50ca55a8220ce05f91e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:8b:3e:9f:25:2f:22:6e:e4:21:e0:e4:78:
be:7e:f0:67:6f:58:d5:37:93:32:7d:9a:e1:8f:3c:
00:5a:23:a2:e3:44:df:b4:78:07:69:81:18:9e:57:
da:c7:33:98:f6:9e:df:86:86:10:db:7f:99:ad:48:
da:4e:88:e6:17:bc:76:5c:cc:5c:26:b4:04:9d:83:
e6:6e:36:41:e6:4e:91:63:a7:9a:3e:8c:e6:86:de:
9e:ba:77:40:e0:7e:10:25:36:c1:b9:ea:bf:74:19:
26:bb:5f:11:94:1e:eb:7f:ba:38:3a:33:a8:7c:28:
9d:0a:0b:95:c0:ff:9d:fd:8f:e4:23:f0:e3:97:af:
b1:3e:7c:d2:ce:6d:75:74:cb:9c:e3:cf:21:34:4b:
69:fc:6c:33:58:43:72:7d:0f:07:9d:78:c1:18:a3:
da:d7:71:45:8f:74:f5:a3:16:79:c8:9b:3e:21:52:
36:a3:23:0b:a4:b3:ec:33:ea:9c:85:46:d5:27:ff:
17:0c:16:ca:0b:01:87:b6:37:79:b1:7c:21:38:f8:
8a:32:b4:04:ca:d4:12:16:82:3e:3f:5e:cd:1b:52:
22:10:da:33:4c:05:17:ef:9a:79:14:8b:9f:e6:af:
bc:ae:80:d6:d0:09:e4:12:1c:32:d9:11:ea:75:cf:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:73:E7:99:99:48:8F:64:9F:50:CA:55:A8:22:0C:E0:5F:91:E1
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:76:f0:cd:cd:4b:90:af:ca:2d:e5:15:c8:91:47:5b:ba:
8f:c3:12:15:d7:bc:a8:09:33:55:89:57:9a:75:e4:7c:09:31:
d0:c0:80:63:0f:1c:e2:33:be:c3:0e:a4:f2:66:10:ea:4a:68:
9c:9d:4f:81:51:c6:e8:83:76:21:57:23:7a:0d:f3:98:d8:8a:
49:da:11:ec:f1:fe:35:84:ee:eb:53:be:35:41:17:77:09:06:
16:d3:f3:88:a5:23:b9:88:f9:11:33:5b:96:1c:9e:51:25:ea:
3e:cf:29:bf:75:23:90:32:76:da:21:f1:70:19:a4:73:ed:72:
1c:38:a1:55:56:15:dc:30:be:f9:34:9c:3d:b4:15:05:fe:de:
d4:bc:c0:03:6d:71:05:8c:6f:50:8d:42:de:4a:32:e7:a5:b7:
e3:96:af:1c:4e:46:0b:2a:df:f7:74:56:59:d3:a0:ee:a2:7b:
8f:50:0f:66:23:46:9f:3f:ae:22:d0:75:b4:25:53:70:26:84:
50:33:25:46:70:99:37:85:30:b7:74:56:45:42:f5:b6:b5:4e:
65:b7:d1:63:81:dd:77:00:bc:51:9d:6b:84:37:1e:1c:f9:69:
04:32:2d:94:5b:2c:a1:14:c0:96:62:16:a2:b0:ef:9c:b3:08:
59:65:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:51 2025 by rpki-client