Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: PDU8hw9WHLhQdue0xR8qkSdQianAuzMl1mtLryJp408=
Subject key identifier: 98:78:9C:05:7F:7B:EE:8D:F5:3C:47:4B:E6:62:E6:20:EC:B0:47:67
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 0197B6A0B4ACA3B2DF2596399DDEC9772A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0BF4
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: QYhy6/jdqzy6ucDE8QQcd0ARbx5VTdL45Ugit0Q+ggI=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:ac:a3:b2:df:25:96:39:9d:de:c9:77:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=98789c057f7bee8df53c474be662e620ecb04767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:5e:53:3a:b8:e3:d6:c0:69:a3:49:6d:40:
3c:d2:3b:b1:de:9c:cd:4e:41:d1:57:ae:41:bd:ce:
ba:a8:fb:ef:58:55:e2:3d:97:07:43:ab:99:00:2a:
da:96:d8:91:04:ab:41:e7:b9:5f:74:22:3e:4f:45:
eb:56:92:54:1f:34:6f:ea:08:f2:ce:7d:b7:ad:af:
76:d8:0f:b7:5a:25:aa:20:55:a5:25:34:b8:b6:2a:
1b:09:83:ce:00:5a:7c:a8:b1:9d:7c:fe:c7:70:36:
1d:cf:2f:f5:6b:5f:e3:77:5c:25:c8:dd:f1:c3:8d:
5a:7c:c9:00:7a:49:5d:2c:e7:0f:5b:f6:58:27:17:
94:47:5a:de:d3:61:df:4d:c6:26:9d:3f:08:7e:0b:
fd:e3:9a:50:11:4a:60:ff:40:16:fb:d5:f0:dc:c0:
a6:f9:7f:32:aa:93:3f:c6:a9:9a:5f:d3:37:98:eb:
1e:61:8f:08:d2:33:18:95:d0:f8:47:99:d3:87:78:
2f:e2:09:3d:94:e8:28:a6:46:d6:93:b0:67:21:f6:
89:6c:45:98:8f:d0:d3:51:95:f6:f9:2b:15:26:04:
6e:7d:87:f9:43:e8:bb:6f:1d:8a:22:3c:32:fc:a4:
b9:2f:b8:09:0f:b8:c4:0d:f6:f3:19:a6:ca:c7:97:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:9C:05:7F:7B:EE:8D:F5:3C:47:4B:E6:62:E6:20:EC:B0:47:67
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:51:b5:c4:c1:32:f3:1a:0a:b6:59:5f:21:65:01:26:1f:11:
2e:be:02:10:b5:a4:96:02:6e:83:07:e1:58:69:16:23:d7:0a:
8e:f4:a5:5d:01:13:e5:3a:3c:6d:c0:b5:c5:8b:08:d1:83:5e:
44:f9:69:66:ac:1a:a5:76:82:7d:d0:75:bc:06:44:42:23:be:
68:2c:75:7c:46:5d:2d:a9:ea:c6:94:74:7b:80:9b:a3:c6:a0:
6d:30:c2:24:d8:f6:db:f2:55:95:a8:7f:80:ef:d4:41:1d:69:
c3:d0:f0:78:ac:dd:86:fd:5f:d2:17:c1:7c:52:d4:19:19:0f:
8e:94:7e:3e:41:67:9e:7e:fa:c3:e7:ef:73:e1:2b:d5:6a:cc:
5c:57:9f:22:ad:57:9e:f9:30:90:21:fa:3b:ba:53:8a:31:08:
97:e8:a8:2e:e1:d2:12:5c:4c:c5:e6:61:c7:b9:a9:43:90:58:
b6:bd:85:7e:4e:84:1a:e9:27:7e:c4:5e:5b:c6:37:91:14:d9:
19:7c:00:5f:b4:e6:52:ce:09:74:31:7e:08:41:27:57:40:5b:
d9:a0:e1:d4:17:cc:10:6b:d8:8c:0f:89:be:1e:32:d7:69:c1:
3e:5f:2d:30:83:54:04:36:8b:55:6d:62:cb:cb:91:46:05:90:
02:16:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:47 2025 by rpki-client