Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: sWAaeVtoJpT9BQpi6hu8+h6Sa2XO2WWoWDFWgzD8k3U=
Subject key identifier: 5D:83:C1:45:61:C0:BD:F9:94:3A:E8:56:69:13:47:46:28:49:6D:B7
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 0197B5FBFE015FE9A9B1BEC8BD4A563F8FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 10:01:19 +0000
Manifest this update: Sat 28 Jun 2025 10:01:19 +0000
Manifest next update: Sun 29 Jun 2025 10:01:19 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: 2CUPuGJdvwWo9fk7GWbgNfJfzGzYn5iJktw6IxPzVjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:fe:01:5f:e9:a9:b1:be:c8:bd:4a:56:3f:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Jun 28 10:01:19 2025 GMT
Not After : Jun 29 10:01:19 2025 GMT
Subject: CN=5d83c14561c0bdf9943ae8566913474628496db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:f6:b8:fe:ae:f8:43:0d:c7:0a:dc:2e:17:
74:be:38:c6:d4:11:07:b6:22:92:ea:8e:bc:dd:34:
be:b2:3e:3c:8b:2f:2d:39:ed:c5:85:c4:d9:60:c7:
44:69:f0:13:ca:db:7d:82:55:7f:cc:9d:8c:43:8f:
84:c4:74:54:5c:a2:3b:c0:c6:8a:60:30:68:68:5f:
e4:87:0c:c2:67:e8:fc:db:14:41:31:d1:6b:23:c4:
bc:3b:70:9c:76:e4:66:51:7b:42:35:3e:5c:72:19:
1d:09:e6:7a:9d:15:88:7f:5b:6a:ce:04:8a:b2:02:
43:df:f8:0d:b7:b8:01:15:29:de:24:e2:41:1c:9c:
da:5f:8c:1a:f7:c3:46:05:0b:c4:5d:1a:7f:c1:d3:
72:19:d1:72:b1:81:94:73:84:72:e7:09:9f:09:5b:
0f:8b:23:0c:4b:00:fd:2d:46:05:39:1b:25:e0:2e:
0a:7b:2e:34:4e:03:43:57:b7:fb:68:a1:ec:0d:3d:
b7:6b:8b:7b:30:b3:c5:72:cf:c9:d0:35:70:e2:44:
5c:b3:99:4d:a8:32:90:39:c6:36:f2:6d:6f:e1:a0:
0f:d3:0c:98:a0:ce:99:53:1c:4b:c5:b2:72:73:c7:
b3:bf:b5:e9:f7:3b:f9:77:88:b1:ae:5b:be:d7:3b:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:C1:45:61:C0:BD:F9:94:3A:E8:56:69:13:47:46:28:49:6D:B7
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:3e:a0:d7:5f:da:fc:83:56:55:d6:63:bb:c7:d8:87:42:
4b:40:71:ec:4d:0e:a2:17:d9:97:d8:99:ac:cc:c8:34:f8:95:
a1:d8:11:9c:51:7e:f1:34:6f:98:56:37:2a:ec:fb:3d:3f:a0:
c5:0b:cc:a2:71:27:e3:1a:32:7c:3f:f2:1d:4b:de:9f:a7:8e:
9d:e8:09:6f:d2:5e:eb:f1:1b:26:e8:0f:c1:23:8b:5b:f3:bf:
70:ba:e2:63:94:16:82:47:2c:3f:13:49:92:24:b1:44:81:5b:
3d:e9:03:36:b5:f5:93:e1:cc:37:13:0f:ce:15:50:82:57:77:
c9:5c:43:f2:85:95:14:01:1e:b6:ad:40:c9:88:5a:66:54:03:
17:81:19:7e:0b:8c:3f:89:85:7c:ce:e9:94:84:72:89:57:a5:
23:ed:99:fa:f5:5f:6e:7b:17:ac:f3:e5:9d:9d:1b:fa:8a:a7:
ec:07:97:3a:38:f2:d1:9a:15:58:99:e5:13:e9:b8:a3:f5:71:
f6:fd:b8:95:b8:3b:69:b5:83:72:35:cd:00:48:bb:75:61:45:
62:1a:3a:57:cf:50:97:cc:e4:53:0c:7e:b6:82:2b:fc:ee:54:
fb:ae:06:2d:1e:9e:5b:51:a8:22:e4:3b:73:c1:c5:82:ec:02:
4b:04:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:43 2025 by rpki-client