Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: J5eD9lWItZyCPI9BiJusd6eXPJE2IcZOltcb61uVooo=
Subject key identifier: 8A:6F:E7:AD:70:8F:E7:56:A9:A0:81:E1:75:2C:60:BA:E4:22:CE:31
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019748FAB55CCEBF47D5EFBACEAB1B0D539F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 06:01:19 +0000
Manifest this update: Sat 07 Jun 2025 06:01:19 +0000
Manifest next update: Sun 08 Jun 2025 06:01:19 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: RVu2VcUoFgJOR1sv2CBNe0xPR52S43Ipbj/4NRak/tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b5:5c:ce:bf:47:d5:ef:ba:ce:ab:1b:0d:53:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Jun 7 06:01:19 2025 GMT
Not After : Jun 8 06:01:19 2025 GMT
Subject: CN=8a6fe7ad708fe756a9a081e1752c60bae422ce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:84:df:9b:91:0b:25:b5:3e:e8:fb:15:af:
c8:9b:2f:6a:d1:6c:ef:1c:1b:cb:49:90:e6:04:c7:
6c:04:35:a4:48:10:90:9f:87:23:35:8b:5f:58:1a:
17:00:e7:6b:4a:05:b0:f1:b8:0d:3d:1b:d6:90:74:
7a:95:df:dd:6f:7c:e2:55:8d:21:a1:5c:6a:5b:31:
59:a8:61:4b:45:99:69:dc:17:21:7a:b7:14:60:b0:
99:64:18:eb:18:63:17:d0:39:d1:7a:c7:b2:13:88:
97:04:94:03:8c:7e:d5:74:4c:ee:18:a5:3d:59:46:
c3:93:c4:f2:90:21:93:e7:f3:55:3b:67:53:61:36:
45:94:9d:c3:7b:62:9a:e5:03:ee:c1:60:c6:47:5b:
ba:b5:21:af:3d:d8:d4:3e:5c:55:3c:67:f2:94:64:
f4:3c:fe:a1:b7:b2:88:19:b6:52:83:d3:9e:7b:bb:
1c:0d:8b:41:a3:c5:c5:c8:88:8a:52:c1:f1:94:61:
7c:8c:a8:f7:c5:72:dd:62:66:b0:ac:43:cf:82:b7:
40:a9:4c:9f:dc:6f:6d:9d:bd:55:83:db:8c:23:1a:
b3:66:6a:1b:40:94:34:4a:77:ff:06:6b:d0:31:1d:
fe:1e:56:96:9f:9c:e6:a3:7c:5d:49:25:82:e3:20:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:E7:AD:70:8F:E7:56:A9:A0:81:E1:75:2C:60:BA:E4:22:CE:31
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:52:ec:5b:3b:61:b7:cd:b0:5b:47:59:5b:f1:80:eb:c3:
62:8a:3d:7e:50:a1:ab:d6:c1:06:0e:b4:b7:a3:85:6b:69:04:
cd:73:ca:dc:3a:62:24:88:d7:d1:da:55:55:17:09:2d:cf:d9:
88:ae:eb:bc:c6:8d:3d:c6:95:9e:4e:46:f6:8f:a9:61:f5:9c:
0d:18:8d:a5:32:88:dd:fd:9f:d6:ec:07:c7:6b:af:b3:14:8d:
0f:ec:a2:9b:26:28:d5:48:b4:12:2a:6d:da:53:be:26:d3:97:
6b:71:6c:e9:e0:e3:8c:18:2b:ab:89:c5:24:d8:e0:31:db:7b:
1a:58:57:92:f9:f6:18:c5:c1:da:7f:b4:7c:a5:42:8e:ef:54:
cb:f7:73:24:7d:fe:94:f5:2e:0a:cd:14:fd:f5:0b:f1:b9:fa:
d1:f7:37:cb:eb:7d:ac:06:4c:1f:e2:7f:00:a0:18:5e:5a:3b:
e2:a8:04:57:85:f1:3b:98:8e:77:f2:72:55:a2:75:6f:c1:93:
ae:46:3f:ce:9b:52:7f:ab:0e:d1:fa:8a:94:a9:b1:31:1b:21:
6a:58:3f:52:02:53:53:8d:06:44:58:b0:89:32:76:4d:74:f3:
ed:86:ae:81:a4:e2:e9:0a:df:6c:cd:ef:99:f2:27:7a:20:75:
db:4c:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:02 2025 by rpki-client