Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: JCaMyFSncQDPa4fk7TAn0yOTrajMnWECQVfp6sF2NfQ=
Subject key identifier: E9:EC:68:1E:60:E8:F1:2A:AC:C1:BB:2B:E2:DB:8F:B8:DB:30:1E:32
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0197493138E5581F1A196B900E7F248E9C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: DB
Signing time: Sat 07 Jun 2025 07:00:51 +0000
Manifest this update: Sat 07 Jun 2025 07:00:51 +0000
Manifest next update: Sun 08 Jun 2025 07:00:51 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: zFG2ctCYzS+OuAS2HIwwxB7fNaEXIH7amQMVzUD+row=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:38:e5:58:1f:1a:19:6b:90:0e:7f:24:8e:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Jun 7 07:00:51 2025 GMT
Not After : Jun 8 07:00:51 2025 GMT
Subject: CN=e9ec681e60e8f12aacc1bb2be2db8fb8db301e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:65:11:2c:ae:2e:c3:42:c1:d0:82:f8:67:
cb:82:26:ad:e9:1b:45:01:cc:1c:96:10:10:66:8f:
ad:5e:ed:89:74:35:50:68:b1:54:93:2a:35:3d:88:
d7:c5:eb:ff:8e:60:ce:90:41:a6:ad:cd:3e:8e:cb:
ba:80:ec:f1:c7:13:c4:c3:76:3f:d1:5c:43:bb:d4:
4a:55:b3:49:b0:4e:33:4b:25:1c:08:7c:ad:03:4c:
b9:28:31:19:0b:58:57:80:ff:ca:f7:47:85:10:88:
d3:73:12:59:1f:8c:86:43:09:cc:5a:f6:26:c0:d2:
ad:a5:e4:81:ea:68:f2:e6:91:22:d7:57:68:9c:33:
38:b9:f1:12:a2:01:ec:dd:2f:ef:94:4d:91:7f:60:
15:98:55:a1:e7:2b:2e:dc:8d:46:eb:ed:0b:de:bf:
09:4c:08:cb:d2:ed:d0:67:e4:f9:f9:93:4c:14:01:
5d:26:ab:72:7b:c1:c5:6e:76:6b:1e:93:98:6a:fc:
b3:57:15:83:3b:49:07:ef:74:20:bb:e7:61:ae:53:
77:b8:4b:1b:6e:86:70:b8:cd:ae:1f:3f:23:42:2f:
61:c3:e8:e6:a3:d7:2f:eb:c1:e6:fa:e4:26:a4:de:
48:0a:b8:40:e2:12:54:60:1f:81:6c:2d:9a:50:c7:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:68:1E:60:E8:F1:2A:AC:C1:BB:2B:E2:DB:8F:B8:DB:30:1E:32
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cc:c4:e5:45:34:b3:19:d1:c3:08:f2:e5:b2:df:dd:be:ae:
bc:68:5f:07:c0:03:4d:a4:a9:6b:7c:3e:41:8b:2b:5a:0b:70:
74:39:73:04:4c:1b:fd:ec:7a:f5:c5:4d:37:77:b9:fd:72:a6:
4d:c9:4d:f9:11:40:45:1f:1e:a5:39:22:3f:87:d6:93:aa:17:
93:f8:d8:48:e6:dc:b6:3e:83:e1:80:b9:9b:bc:d2:1f:87:cc:
d8:a7:63:a9:5d:06:23:a4:ee:50:48:d7:25:83:ac:d3:59:0f:
7e:35:84:15:bf:65:3e:1e:cc:91:e0:40:5e:eb:1e:ed:76:68:
6a:b7:cd:16:c7:39:83:9d:ca:52:59:4e:3b:b7:1a:16:1c:a0:
90:15:da:40:24:70:bb:68:92:81:61:4d:4e:46:56:97:0d:75:
b2:70:7b:30:95:08:fc:5b:36:86:09:ae:8e:8f:0e:71:eb:98:
95:92:f1:06:f2:ae:8d:d5:07:09:0f:46:d4:e9:3e:cd:85:d5:
3f:a4:cc:d8:b2:74:0f:fd:ee:be:f6:b4:7d:e5:21:b7:c6:d8:
91:29:2d:27:85:ca:bb:e8:8c:53:81:4f:3a:09:3b:5d:61:31:
ec:18:42:30:44:01:ee:d6:1e:86:58:d1:31:43:e6:fc:11:82:
dd:7e:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:38 2025 by rpki-client