Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: TIC4Y6seS2UNfvnYEsqT3/FQjrHX9ghlb+GTC6ggmAA=
Subject key identifier: CD:F4:36:A3:0C:37:61:28:C8:AD:0C:6F:1A:A3:49:F2:3F:49:A9:B4
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 01974FD7EB871181EF80776C1C5B6BF35314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 14:00:39 +0000
Manifest this update: Sun 08 Jun 2025 14:00:39 +0000
Manifest next update: Mon 09 Jun 2025 14:00:39 +0000
Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: u2q2VJtqLxc41vkKhf21jrrvQig7Eq7wz8oZM4szsaA=)
2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:eb:87:11:81:ef:80:77:6c:1c:5b:6b:f3:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Jun 8 14:00:39 2025 GMT
Not After : Jun 9 14:00:39 2025 GMT
Subject: CN=cdf436a30c376128c8ad0c6f1aa349f23f49a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:87:0c:29:f0:68:02:bd:5a:5c:07:3e:6d:
81:fb:8d:50:d0:38:0f:fb:0b:99:27:13:06:4c:4e:
ae:10:78:f5:c2:cc:6a:23:ad:f8:c4:7a:42:9a:2f:
e3:34:84:3c:52:59:8e:60:2f:04:12:f5:9e:ef:35:
a1:a0:70:c0:31:60:bc:d8:9c:8a:ae:07:45:ff:63:
c5:47:c2:9b:4a:44:92:01:68:fb:a9:90:5d:a0:6b:
08:42:01:31:15:d7:91:27:ac:fe:99:d6:da:3f:5a:
33:ef:a3:8d:80:f0:4e:e1:2a:4c:69:85:16:9e:66:
46:7c:03:ce:d8:a1:89:22:33:da:14:58:85:6b:39:
ec:4e:96:aa:13:8a:ef:d4:81:c9:59:26:ca:2d:47:
9e:ea:aa:5a:5c:52:53:6e:b3:2b:36:5d:5b:1e:7a:
df:e0:08:a6:6d:39:65:09:2e:e7:e6:7c:60:e2:4c:
ca:46:1b:c3:0f:8d:fb:17:b1:ad:17:52:93:66:7a:
6f:a4:0b:9a:3c:c6:b7:6d:b9:8d:63:72:59:14:d1:
b4:8e:be:4d:88:a2:27:21:18:ae:e3:07:55:02:3d:
04:0e:43:bd:95:c6:17:4d:36:74:d4:3c:18:f6:2b:
78:d2:55:25:d6:8c:28:a9:ca:3b:fa:e3:6d:59:1b:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:36:A3:0C:37:61:28:C8:AD:0C:6F:1A:A3:49:F2:3F:49:A9:B4
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c1:39:c8:d5:1c:c4:00:ea:2a:0a:e4:e7:26:48:67:9a:70:
41:b4:f5:58:da:18:52:1d:a9:ba:fa:37:f6:27:bc:ee:1e:25:
ac:da:0b:23:85:af:58:ad:e9:df:e8:89:72:91:e9:f2:13:3c:
0f:04:5d:22:01:3d:c0:bd:19:d4:f8:ee:48:03:66:29:ee:e5:
06:d1:d5:6a:56:75:79:83:eb:a2:f9:35:fc:d7:49:4b:5c:ae:
c5:9c:99:61:19:e3:53:e0:e2:86:28:51:c1:2d:55:ab:f2:4e:
4f:a8:79:72:e2:79:4e:3e:c6:0c:7e:bd:88:76:7f:58:30:79:
fe:68:cf:a3:4b:2d:e1:0b:a2:db:b7:92:24:ea:1f:7a:e1:fe:
2f:da:1e:74:55:45:2a:b8:75:d9:88:a1:6c:91:c7:57:8b:6d:
ec:aa:02:df:e9:74:a9:15:91:90:59:b3:4e:ab:df:39:ce:ef:
83:b4:9a:1e:ba:02:a2:45:1b:0e:80:ea:aa:ef:ed:9b:3b:b6:
8c:b2:d5:8f:30:66:d0:99:65:56:c6:e4:58:f3:a3:01:99:23:
77:c3:4f:b5:d7:e6:0f:1d:a7:5c:d7:76:bd:c5:9b:65:7e:77:
ad:02:2e:2c:93:83:d8:42:15:e8:cb:76:99:fb:5d:00:f1:a5:
1b:18:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:16 2025 by rpki-client