Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: 3cl8DrosfyoxFcJR9KGVbPL7kmxL2yikVpL75lO7iv8=
Subject key identifier: 93:63:BC:FA:90:A3:EB:D9:C0:76:D6:C9:FF:07:EA:5C:9C:BB:94:F4
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 0197B6A250705BDB0F88FDACAF2819989D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: Y+UPlgZraTr90cLTx+7bvGglSpxF/c4zEDeF+rYMJNk=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:50:70:5b:db:0f:88:fd:ac:af:28:19:98:9d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=9363bcfa90a3ebd9c076d6c9ff07ea5c9cbb94f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:5e:ee:25:b3:4f:02:24:eb:c8:56:a8:75:
1a:67:56:f3:a8:c0:e4:0c:33:24:22:4c:51:b8:ba:
08:38:87:3a:ed:af:8e:9a:2b:69:a0:7a:7b:e1:af:
43:d2:e1:a5:24:da:ab:4a:7c:7b:41:1c:f5:f3:ce:
41:28:58:c7:a9:dd:5f:57:40:26:0a:d3:f7:d2:ed:
20:9a:26:05:02:35:02:de:72:8e:8f:50:0e:a7:13:
da:eb:2c:fd:d1:4f:ba:dd:79:7b:a6:d8:28:7d:15:
72:0a:a1:ff:8f:09:a8:d1:47:63:c6:30:0c:18:ed:
a9:32:45:87:99:41:6d:24:3c:07:42:12:a6:ea:5a:
53:73:b3:bc:5f:42:58:20:fe:b4:84:5f:5c:35:fd:
ce:db:f3:41:bc:a3:0f:3a:05:99:62:b2:31:69:c0:
a9:0f:89:7b:0f:fb:72:dd:7e:32:e4:23:8c:9f:55:
8f:4c:0f:12:04:4b:45:44:9c:15:7d:36:02:d0:29:
7a:c0:52:2f:fe:d3:cc:9d:34:29:8e:32:0c:46:e2:
70:0d:ba:2c:8d:78:46:fd:5c:2e:45:e4:75:56:58:
c7:ac:ec:1c:95:f1:34:3b:83:5b:e1:40:a2:c0:26:
da:7c:26:e2:15:08:f8:5f:8a:57:32:29:22:75:60:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:63:BC:FA:90:A3:EB:D9:C0:76:D6:C9:FF:07:EA:5C:9C:BB:94:F4
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:0e:7d:d1:a3:0b:93:68:af:7e:64:79:05:47:d3:a9:61:
06:92:f3:12:29:49:1f:7a:6e:7b:33:b2:23:72:e4:29:05:6e:
c3:74:df:33:67:14:be:2f:4c:12:3e:5c:8d:8b:6b:f1:fc:8d:
6c:22:80:07:33:fa:a9:b6:6e:e7:9c:c6:b3:4a:4a:e7:b5:40:
b6:e9:10:1f:18:88:e6:a7:4c:93:fd:d5:88:ec:61:07:07:c4:
9e:9b:c8:de:49:f3:45:a1:2d:fa:a4:4d:6f:7e:b0:4c:d3:e4:
94:fe:27:31:f1:f7:0a:06:c9:ba:02:56:b9:fa:47:db:c6:0b:
27:dc:7a:b2:25:19:2b:be:84:fe:67:c6:b5:d4:be:ac:9c:72:
04:0f:d6:53:4f:f6:b3:95:b0:94:25:df:cb:db:9c:91:ad:91:
9c:d0:f7:8f:0e:e2:b9:de:dd:cf:bb:16:76:75:d7:23:ea:fe:
f1:f0:3f:a8:0c:56:59:35:ad:e8:15:a8:77:1a:bd:0a:30:2c:
a6:10:e2:d5:2e:a4:d3:a8:34:c7:98:9b:82:8a:55:95:c4:ec:
87:cd:37:de:6f:1a:6e:5a:10:99:83:68:e8:16:ca:8e:a2:97:
fc:9f:3d:63:79:ce:d8:be:96:14:85:b6:74:16:92:e0:88:3a:
f4:51:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:55 2025 by rpki-client