Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: 0wbtv5UAsb1nEf/Fscoi3FFFQHnabz8ZnrOX2x967Ew=
Subject key identifier: 61:0D:E1:98:A2:F5:84:AF:6E:B1:3E:C9:33:FA:6E:7D:DE:80:8E:EE
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 0197B77C32B28611627C455B8B1DDBAC4656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: bg1EliErPPFCZVepR7LGQ5B2D1laZ43ePAedfxamwSM=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:32:b2:86:11:62:7c:45:5b:8b:1d:db:ac:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=610de198a2f584af6eb13ec933fa6e7dde808eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:07:3f:0e:c8:9d:47:dd:e3:47:d8:fd:00:c6:
be:d6:45:75:ec:15:a2:83:89:3e:45:67:e4:71:43:
ce:c8:f0:f7:28:0d:4f:a2:26:0b:9b:4f:49:b7:0c:
a2:85:42:b0:2a:e4:a3:58:d7:7c:6f:e7:03:fc:88:
87:05:02:0e:16:61:c4:00:92:f7:b8:32:03:0e:be:
18:7a:12:3c:86:25:6c:eb:ba:46:31:52:d5:e2:40:
68:e6:26:d3:e8:7d:09:d1:a4:23:ad:aa:0f:c1:09:
82:1a:8c:21:ce:f7:06:eb:a6:1d:3a:de:ef:b3:3c:
40:f9:48:04:f4:55:b2:5f:b5:39:ab:d9:4b:64:ef:
2a:8a:a6:33:df:07:0e:30:6f:e9:38:02:dc:7c:55:
5d:cf:83:90:68:c8:d0:e1:6c:02:16:44:5a:91:30:
74:6a:82:7f:73:4a:eb:df:05:62:e4:2e:1f:53:68:
d5:da:81:89:6c:23:6e:bf:3f:59:ec:13:bb:c8:85:
20:4a:e8:04:d2:d4:b9:25:78:f8:9c:74:2c:21:bd:
53:ab:8d:1c:9b:6f:73:a6:b8:2d:4e:8a:74:16:67:
9b:44:99:5c:57:2f:6e:97:dd:33:eb:b3:63:08:f7:
50:56:a0:62:a5:de:25:1b:b0:b0:86:2d:5f:05:1a:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0D:E1:98:A2:F5:84:AF:6E:B1:3E:C9:33:FA:6E:7D:DE:80:8E:EE
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:b0:2f:bb:d7:78:b0:f6:51:f5:6d:ad:c6:5e:13:20:79:
7f:ea:9c:24:75:98:70:3b:51:4d:af:cb:7a:18:bc:98:a7:36:
0d:ea:37:74:15:b4:4b:fc:92:e1:58:46:09:25:b7:19:e2:0a:
cd:e1:37:fc:aa:58:94:17:82:6f:b0:f7:1b:b9:f6:08:09:69:
62:0f:8e:63:22:cb:8d:0d:f2:69:33:1e:11:9e:4b:a4:a4:37:
51:00:1d:2a:b7:b3:6f:10:97:82:b1:22:5c:71:6e:8d:e0:77:
b4:59:1e:c9:d7:0a:81:6e:d7:c1:86:11:25:a8:7a:20:fc:c0:
97:46:c5:6e:3b:6e:d7:40:5d:7b:f0:e0:33:78:4d:c1:02:ae:
3c:55:70:1e:5d:93:18:d1:7f:bd:d5:d3:a6:86:aa:b6:eb:55:
1c:f6:85:3f:4e:bd:4b:d0:c8:60:9f:24:d7:9d:92:b7:c8:10:
d3:87:e0:b9:fa:ea:42:53:7d:dd:95:bd:21:75:a5:cf:d9:08:
e5:81:78:6e:0c:61:d8:14:3e:c9:85:0d:0b:66:b0:7d:02:77:
a9:e8:e4:8d:05:6e:69:41:bc:5d:97:93:6d:8b:11:bf:e7:08:
cb:42:8e:ff:8a:3d:6c:f6:4d:1c:0f:ec:71:71:04:e1:f0:a9:
44:e4:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:33 2025 by rpki-client