Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: oRYfV4sE3irrEkPGyzhLmoli6a4rupnkTy5x34i/1Wg=
Subject key identifier: 40:7A:2F:99:45:A3:D8:13:56:6A:B8:D7:8A:71:6E:78:5C:0E:11:F1
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 0197493144B084F6CDEA500AFD84BD36AE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 1024
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: Xyyq8Ya9oDw0HbG90eI7OwnkxN4UR6AUnErpp3JSzEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:44:b0:84:f6:cd:ea:50:0a:fd:84:bd:36:ae:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=407a2f9945a3d813566ab8d78a716e785c0e11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:a4:3b:60:23:01:39:15:09:ae:92:43:65:
91:45:24:6d:2d:8e:8a:84:a9:b7:86:a1:c3:a3:fd:
df:10:73:69:ba:8c:ca:69:b6:5a:ac:86:ac:84:0c:
d0:4c:ab:53:4e:4b:29:83:7a:e2:b1:b3:1c:ad:2f:
50:cf:ab:17:bc:0b:7a:1d:8c:6e:84:86:8e:3e:c8:
cf:a1:d9:9e:ab:37:17:13:d1:72:a8:52:b2:c9:e0:
bc:6b:9d:90:8a:09:e3:35:a0:97:73:9f:72:04:89:
05:f7:6d:5a:e1:3a:55:85:34:18:20:f3:eb:02:de:
1c:a8:30:f8:e0:cc:d7:d5:18:cd:f2:53:86:76:97:
1b:e8:e0:6d:e6:b6:43:1c:ec:85:38:e4:f7:90:4d:
a0:32:52:be:d3:d7:d5:e8:c2:22:09:73:4a:7b:b9:
b0:77:a7:b6:29:f6:44:b9:e5:42:fa:83:99:8c:37:
e1:ed:24:6d:0d:a7:39:e0:19:5c:91:d4:ec:22:f0:
03:4b:a2:49:8a:ff:a1:8a:ae:14:e8:72:ea:6f:a7:
ca:bb:82:87:56:fd:fa:9e:b8:83:58:bd:71:0b:0e:
7b:32:19:8f:86:8a:e3:09:a2:6b:5a:2d:11:b4:1e:
a0:03:bc:b9:16:39:c1:05:41:2c:62:62:9b:82:eb:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:2F:99:45:A3:D8:13:56:6A:B8:D7:8A:71:6E:78:5C:0E:11:F1
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b3:88:af:6c:39:f5:7f:82:d9:c0:99:15:94:3e:9c:21:bc:
a8:bb:69:69:65:e7:04:bc:39:da:bd:fd:d8:87:01:f9:d0:88:
9a:81:1b:28:98:2f:7d:9e:dd:19:c3:cc:7e:4f:f6:62:84:e9:
94:80:49:78:24:0f:01:7c:20:d9:e2:4c:8a:7d:e4:18:69:85:
96:d2:14:30:e9:54:0f:56:39:61:5a:38:10:dc:a3:bb:fc:07:
68:7c:4c:64:dd:e4:32:69:9e:5c:2f:25:c6:77:bf:e3:10:9a:
9b:76:73:bb:c9:66:c4:14:fc:ab:30:aa:79:59:4d:ea:9b:10:
38:ab:0f:0f:7a:f1:0d:76:b3:7f:e6:f1:e9:c4:2f:b8:5a:d4:
08:b0:cd:39:e6:46:57:95:f2:23:60:46:9d:a8:c1:6a:ae:16:
c9:14:ea:82:0b:ee:00:a3:9b:dc:00:cb:03:4d:79:ed:57:99:
4c:8c:2d:d3:5b:3a:e6:18:16:97:fc:ca:05:86:3f:57:67:9d:
27:c8:d9:b6:fe:d5:b5:a3:db:72:98:72:a3:05:8b:ff:46:88:
4c:a7:21:2a:0b:66:54:ba:2f:de:9e:ac:e2:86:81:a6:07:ae:
97:b2:9f:52:3a:27:a6:84:f3:f2:4e:3a:bf:26:61:53:42:f3:
a9:82:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:17 2025 by rpki-client