Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: JkSIi/G/zn53lH54CrB5Y39csRsHi8NaR4UpQR8+3xE=
Subject key identifier: 0E:52:03:42:0D:75:1E:81:A9:BE:86:A7:FD:4D:F4:DA:35:E5:8E:91
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0197B5C506E2CE0A2D1461B8502F4E5CF822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0402
Signing time: Sat 28 Jun 2025 09:01:17 +0000
Manifest this update: Sat 28 Jun 2025 09:01:17 +0000
Manifest next update: Sun 29 Jun 2025 09:01:17 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: nXbTxrd81WQuv8VSJJt6tk6R+sr5r4mrpx8LqMP8k4s=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:06:e2:ce:0a:2d:14:61:b8:50:2f:4e:5c:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jun 28 09:01:17 2025 GMT
Not After : Jun 29 09:01:17 2025 GMT
Subject: CN=0e5203420d751e81a9be86a7fd4df4da35e58e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:6f:60:d6:09:ef:7d:4f:30:8a:7a:1a:11:
93:eb:c6:42:91:2e:30:a0:9c:8b:30:8c:d7:ee:3d:
cf:6c:b8:bb:a5:fc:7c:64:96:c7:5c:ce:b2:4a:7d:
af:45:b3:9a:df:1f:b5:21:00:56:60:91:03:64:b0:
51:99:66:26:60:c7:1c:0f:98:55:7c:99:f0:d0:45:
0c:08:3a:39:f0:53:bc:16:3e:23:98:06:ff:89:37:
bf:6c:6a:cd:80:29:b1:ef:94:7a:cd:87:85:f3:34:
13:f5:30:f4:ba:9b:11:0b:29:0c:da:84:11:7e:2f:
a2:05:f2:52:e3:d7:39:37:c4:25:ad:01:cb:7b:f9:
c7:73:2b:d6:9b:87:d7:a6:2e:67:a7:4f:12:1a:c7:
9f:2d:ec:34:ef:37:13:45:5b:46:f1:28:33:3a:6c:
2b:5c:0f:d3:de:73:71:72:be:a0:fa:53:2d:5c:bc:
ce:c1:f4:9a:7f:53:9d:7e:9c:c3:02:f8:a7:5e:f5:
05:27:d3:6a:84:96:88:b7:49:38:a3:eb:9d:59:79:
cd:e7:80:36:81:4a:ec:bf:e3:ae:77:17:c6:1b:76:
e6:a0:bd:45:1d:c0:e0:54:2d:be:02:6d:69:37:3c:
33:0d:36:ab:d3:68:d5:6e:ba:c4:ee:16:a9:68:91:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:52:03:42:0D:75:1E:81:A9:BE:86:A7:FD:4D:F4:DA:35:E5:8E:91
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:fb:69:ba:e6:b3:43:ac:77:93:03:2b:fb:07:9d:e0:a3:
e0:f8:cd:b5:a0:94:99:98:39:4b:5d:f1:13:81:91:4f:3e:70:
25:c7:0f:28:1e:39:94:13:4c:28:74:86:6d:76:44:1a:48:da:
b6:56:5d:25:70:0f:fc:63:26:d7:52:e3:83:bf:14:1a:de:31:
c7:f3:e5:d2:e9:2c:88:d3:26:be:c9:3a:06:84:14:a7:f6:42:
91:12:b5:20:18:f5:bf:ad:46:1e:19:94:f4:94:53:e3:e1:71:
ca:3f:bb:a8:2c:52:79:4f:db:30:02:16:db:7e:b4:9a:c0:02:
10:65:a6:73:82:ca:82:a4:4e:72:17:b6:e2:c3:49:4c:23:de:
eb:4c:33:82:3d:cb:46:07:3e:f5:c5:50:6b:22:94:28:29:88:
74:7f:58:cf:77:6a:a2:0c:69:58:a5:c1:db:da:68:8b:b6:40:
73:10:04:f6:6d:49:61:e5:69:0b:88:c8:c8:df:c6:06:b3:2c:
1b:d6:f1:56:31:44:45:af:79:af:8d:eb:33:a7:68:cb:81:c1:
58:66:cb:13:08:ef:f5:47:a2:ea:ae:c3:9d:ed:70:8d:1e:1d:
80:b0:e7:3f:e2:d8:0d:6e:eb:41:a0:d7:d3:43:86:58:fe:37:
26:88:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:23 2025 by rpki-client