Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: RbfaPUZUe538uHgQ5jxO+DQc0lvvj5k5DDiDjAhjuus=
Subject key identifier: CC:90:7F:36:F8:E1:4D:54:46:71:79:97:7B:7E:2F:FA:58:49:81:EC
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 01974742D774DDF17A8121AE27AF69AC3FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 1509
Signing time: Fri 06 Jun 2025 22:00:52 +0000
Manifest this update: Fri 06 Jun 2025 22:00:52 +0000
Manifest next update: Sat 07 Jun 2025 22:00:52 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: 3kwA1zrQtGF/8G6xCHXRqSTWCNqY0Sked/EUMwsg1KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:d7:74:dd:f1:7a:81:21:ae:27:af:69:ac:3f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Jun 6 22:00:52 2025 GMT
Not After : Jun 7 22:00:52 2025 GMT
Subject: CN=cc907f36f8e14d54467179977b7e2ffa584981ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:c7:d0:6b:53:87:71:da:8e:5a:34:d8:aa:
c5:84:9a:4f:1c:b7:23:93:4e:a6:e7:0a:82:79:80:
0c:b1:20:59:4c:ee:fc:ad:f2:53:dc:09:04:59:64:
1d:40:e3:28:53:f3:6c:6e:34:f5:99:b1:1d:3d:11:
4a:74:04:c2:bf:67:0e:64:f6:1c:e7:ac:63:6d:94:
f8:b0:1e:b0:31:af:e7:4b:88:0b:91:99:81:7e:7b:
05:50:ca:5f:2f:9f:f0:30:01:9f:af:60:69:92:96:
83:2e:bb:f5:98:3a:20:de:9b:f4:41:4b:68:c6:91:
75:fd:9f:4d:66:16:ac:2f:9b:0a:c2:3c:37:3c:d8:
3a:da:5f:b9:44:4b:ce:04:9d:c2:a3:63:d2:dd:cb:
63:2a:99:1d:41:46:ec:e8:1b:85:fb:74:0b:46:3c:
6e:39:30:b8:de:81:35:f1:25:20:30:71:aa:a8:ae:
e4:51:f5:cc:1a:4f:db:bf:eb:93:72:8d:7f:9f:9c:
18:59:d6:87:8d:17:dc:f5:1c:3f:76:70:27:2a:77:
09:60:de:2f:e5:35:cd:2b:08:23:47:06:36:03:45:
fb:df:3b:ab:c9:00:16:ca:78:5a:2d:9b:a4:45:99:
af:72:fd:6c:66:70:bd:87:14:58:93:30:ea:14:1c:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:7F:36:F8:E1:4D:54:46:71:79:97:7B:7E:2F:FA:58:49:81:EC
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:7a:00:ca:f2:f1:39:ce:3f:c5:bb:8c:76:2a:05:85:a2:
c4:ce:cf:a5:27:5c:d3:66:31:07:41:82:16:93:da:69:1d:d7:
1f:5e:c5:88:d4:42:4b:c4:71:a7:58:19:8a:62:fa:82:c0:36:
f9:d9:f0:74:b4:2e:61:af:4c:72:37:f8:28:a0:63:8f:d2:15:
84:55:d3:92:57:50:e8:01:ec:1f:2a:79:12:e2:13:57:bd:a8:
2c:6e:76:49:20:56:11:47:d4:c7:38:2e:eb:c8:6d:1d:1d:9e:
38:3a:cd:df:84:62:e0:eb:0f:7e:c5:ca:1d:5f:e9:c6:cd:8c:
b6:12:c4:bb:45:2a:7c:ea:8a:07:c5:2d:d6:e3:4b:32:b7:68:
bc:11:1a:85:cc:50:3e:3c:3a:f8:d3:1c:2c:a8:47:18:a3:7e:
04:f1:e4:06:f0:79:8a:31:2b:4e:85:aa:b8:63:62:42:2d:07:
b0:b3:ec:a4:88:7d:cc:1a:c6:35:a6:5a:d5:22:84:9e:08:97:
76:b3:b8:27:ce:6c:69:80:8d:f6:23:af:d5:0e:76:cd:0b:5e:
48:3a:f6:ef:6c:93:a5:0d:1a:4c:00:bc:3a:9a:ba:87:24:bd:
44:a3:66:e3:ee:aa:f3:6d:32:87:a7:07:83:8d:63:d1:22:4b:
2b:26:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:51 2025 by rpki-client