Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: V4UGu4MLy9VfIkY6Yt29syF7cx/CUsB9vAqcuKBTvh4=
Subject key identifier: 2F:66:92:D6:49:CB:48:8E:F4:96:B5:09:E0:25:4B:4F:26:CE:8F:57
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 0197586D64EDC61078DF51F62AB7B0FC23C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0970
Signing time: Tue 10 Jun 2025 06:00:53 +0000
Manifest this update: Tue 10 Jun 2025 06:00:53 +0000
Manifest next update: Wed 11 Jun 2025 06:00:53 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: yIJLgaAh6kiOZv7sfjYcV4NzwBBIEAauilmn6XtJdqs=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:64:ed:c6:10:78:df:51:f6:2a:b7:b0:fc:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Jun 10 06:00:53 2025 GMT
Not After : Jun 11 06:00:53 2025 GMT
Subject: CN=2f6692d649cb488ef496b509e0254b4f26ce8f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:a1:aa:d2:15:e0:d8:22:a9:6f:b4:02:93:
35:ce:ed:c6:3f:53:83:42:14:78:25:e6:54:38:ed:
e4:33:a6:c7:5d:bb:1a:d6:0e:74:87:31:7b:c7:c7:
b1:c0:4f:53:eb:c6:7b:29:2f:4a:3c:9b:70:29:08:
67:6d:3a:5f:d8:a2:32:24:b3:b6:ee:b6:f2:78:c8:
8f:26:e0:82:de:26:a6:d0:75:b0:bf:e9:cc:c4:25:
de:5f:1e:78:61:14:77:d7:c5:3f:ba:8a:f8:78:ac:
10:a9:a8:96:38:7b:99:85:13:68:99:7e:b8:a9:11:
0d:4f:2c:16:96:0a:28:2a:b3:f8:31:f8:e9:7b:00:
4f:83:16:45:4c:9b:7a:0c:e5:c6:19:ee:a6:37:2c:
61:1f:e5:ee:03:d0:4a:11:6a:19:4f:e7:e7:78:cb:
7b:e3:f4:bb:c4:06:9a:54:07:fe:d1:3a:ed:77:a0:
50:6a:cd:8a:af:9b:8a:4b:2a:2d:77:af:7b:10:b8:
f5:83:54:32:8e:46:b4:68:af:88:e7:47:d5:74:a0:
b3:ad:e3:5e:07:87:22:da:cb:11:e2:f4:28:8a:36:
37:73:b5:39:4b:2e:84:af:db:c7:1c:c4:a9:8e:4b:
02:ca:c9:ff:b2:23:d8:86:80:2e:22:34:57:97:82:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:92:D6:49:CB:48:8E:F4:96:B5:09:E0:25:4B:4F:26:CE:8F:57
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:40:47:5e:22:36:62:a5:ad:de:cc:69:29:54:51:92:21:
e8:0a:bf:c1:8b:9a:65:c9:ba:47:17:6e:d9:00:bc:da:cd:3d:
58:61:d8:58:75:b2:b2:6e:fc:51:4a:b4:38:db:ae:17:f3:b8:
62:19:81:0a:78:b7:b4:22:67:7a:8e:65:21:01:59:00:50:0a:
4e:a4:ee:5a:a0:f8:66:38:d0:d2:f4:1f:be:34:e9:68:3c:c6:
d5:50:2c:f3:bf:39:25:80:af:9f:3e:b2:f3:00:11:41:2f:79:
35:08:7e:8d:11:77:e0:fb:d6:cd:cc:f9:64:f3:d8:28:ff:83:
b2:9e:20:24:44:4f:07:d2:e6:b5:4b:3e:03:eb:d7:0e:de:bb:
d9:73:fd:91:3a:bc:5c:3f:b1:c3:00:15:58:0f:94:c5:ba:e6:
c1:a2:da:c7:a3:4e:df:4c:d4:63:3b:94:a6:45:a5:6d:d6:f6:
48:0f:be:ab:62:bf:75:b7:70:34:e1:e2:d9:bf:39:41:8c:c9:
e6:dc:53:27:a7:54:0c:11:f2:03:39:4c:b1:b2:5d:62:40:cc:
76:8d:00:3f:88:32:10:5b:a5:f3:96:e6:37:c4:d8:af:fb:30:
6b:13:23:8f:ac:23:5a:60:0e:4d:b8:ee:d9:5b:61:d5:f0:45:
be:91:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:20:10 2025 by rpki-client