Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: hxZvUv+b5Ps41A/Rh6LcmfeRy9T5olrLvkK5F1bJxnM=
Subject key identifier: 48:7C:27:F8:3E:C6:94:C3:DD:BD:5E:D7:AE:1E:7A:A2:6E:02:C2:C5
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 01975E3821016FD06F9793E8CE3FED87BE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0973
Signing time: Wed 11 Jun 2025 09:00:26 +0000
Manifest this update: Wed 11 Jun 2025 09:00:26 +0000
Manifest next update: Thu 12 Jun 2025 09:00:26 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: PB8BhX/XH+YU1yzK0iXR3fPTZpGvpo3Q4/gc8Oior6Q=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:21:01:6f:d0:6f:97:93:e8:ce:3f:ed:87:be:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Jun 11 09:00:26 2025 GMT
Not After : Jun 12 09:00:26 2025 GMT
Subject: CN=487c27f83ec694c3ddbd5ed7ae1e7aa26e02c2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:d1:66:91:48:33:1a:7b:b9:36:c3:3b:59:
1f:25:13:c5:d6:a5:bc:27:09:d1:f2:cf:af:c7:a4:
a4:86:7e:cc:5d:36:04:12:bc:e8:b5:74:84:7e:14:
27:16:ea:1f:33:a6:9a:4c:bd:bf:22:d6:e3:be:80:
a2:52:fe:0d:20:cb:b0:f6:ea:3b:d6:17:60:f3:3f:
67:17:44:f4:7b:71:22:7c:d3:c6:b6:f9:ae:b1:38:
e6:39:28:ea:b6:44:18:21:6a:fc:7d:a5:0a:26:88:
ff:17:41:00:3c:5c:e7:3a:dd:d7:61:12:cf:ed:ba:
11:fd:ab:69:b4:8b:58:f6:10:1a:17:46:84:32:d0:
a4:41:10:bf:94:d9:23:1f:b1:1f:c9:24:54:ee:a3:
c8:07:08:b7:05:ff:d7:9b:db:f1:ca:06:65:b0:40:
5e:9e:44:06:50:78:18:88:68:a5:6e:91:a2:72:fb:
bb:cf:8c:2e:6f:13:71:41:88:20:bd:20:06:58:bb:
07:28:12:bf:f2:35:68:b9:3b:04:44:62:c8:f9:55:
4d:8e:86:68:e8:14:52:69:ba:11:2c:4c:74:52:e5:
c2:be:ee:8b:a9:eb:97:f7:fa:6f:c8:53:bb:02:b3:
b9:94:b6:cf:55:a6:b5:47:8b:ab:05:28:dd:70:54:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:27:F8:3E:C6:94:C3:DD:BD:5E:D7:AE:1E:7A:A2:6E:02:C2:C5
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:44:88:5b:23:2c:b3:a4:8b:3b:de:24:bb:c8:c3:f2:ee:
80:fe:ab:f2:17:cb:04:a1:c0:70:9a:bd:9c:26:b3:ef:6e:45:
b5:9f:57:bf:9f:70:5c:b2:d0:e8:ad:aa:96:83:a6:b0:c6:61:
00:de:c1:d7:30:ba:44:92:6d:fa:7b:09:69:bb:16:a7:a4:03:
b9:de:3c:77:3d:18:31:4a:ad:16:95:ad:2d:70:c6:cd:60:54:
f2:dc:e5:a0:0d:03:8a:9a:d6:ac:30:e1:17:0e:c6:ce:84:a9:
8f:00:e1:5a:e0:5e:92:c4:42:c5:6d:14:8d:68:50:e0:72:be:
be:30:e3:aa:74:a0:5c:74:7b:5f:cb:f1:30:f6:ed:aa:e5:a5:
60:5d:0b:68:16:1e:4a:d8:6f:e7:fa:90:4c:38:c2:cd:6d:74:
35:26:78:fe:81:c8:8e:68:6e:b5:2c:e4:c0:a5:e2:12:e8:ee:
b4:84:95:ef:7b:a7:13:cf:d9:65:d6:c1:d3:09:0c:58:b3:ae:
95:08:a7:9d:77:a7:7c:6f:70:bc:f0:b9:b5:9d:22:af:99:c9:
24:f9:7e:00:bd:a2:b6:5c:db:33:ec:b3:61:79:3d:59:79:96:
b3:2a:d1:a1:9f:be:f0:8e:97:d7:dd:3c:25:76:ec:8b:79:98:
a4:96:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:17 2025 by rpki-client