Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: 7MNor0z7VHRKPG4/GjAM3W4PMRFzSyqDFNh0J9UJem4=
Subject key identifier: 2C:56:D0:05:C4:F9:39:CB:99:97:21:6E:56:AD:E1:2C:E2:AB:D0:87
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0197B88EBAA5AC93835F890EF341D5D4152A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:00:50 +0000
Manifest this update: Sat 28 Jun 2025 22:00:50 +0000
Manifest next update: Sun 29 Jun 2025 22:00:50 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: wRV03w35yG08vcDSzauHfqCeKfWE0URZtc1kklQgcjk=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ba:a5:ac:93:83:5f:89:0e:f3:41:d5:d4:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jun 28 22:00:50 2025 GMT
Not After : Jun 29 22:00:50 2025 GMT
Subject: CN=2c56d005c4f939cb9997216e56ade12ce2abd087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:d4:d7:d3:fe:cd:bd:79:72:7f:d3:82:66:
b8:3e:bf:7c:0d:62:30:db:4d:ac:de:ae:81:0b:2c:
99:ed:f0:d0:49:c3:8d:a8:ae:96:83:53:bf:44:96:
06:7f:1b:79:ce:52:94:c7:51:1e:7e:d6:bc:52:e6:
3d:6a:3a:69:b9:5d:19:98:20:ad:88:c3:53:f1:e0:
8d:d1:30:45:4b:26:5b:ca:47:b0:32:c9:74:57:a1:
54:30:00:e4:6d:14:a8:c0:96:1b:a9:2b:6d:c9:19:
3b:48:78:a9:27:73:64:6c:1a:ed:6a:d4:d0:bd:ab:
93:72:92:ba:98:4c:f9:dc:95:d5:c2:f8:92:7b:b0:
85:2e:c1:74:28:0a:66:27:f3:cb:c1:bb:dd:7f:3a:
0e:8f:3b:d9:7c:7e:27:f9:90:2b:fc:55:08:c4:41:
5e:28:13:a0:39:d4:db:22:75:ef:5b:bb:67:c5:85:
c1:be:6c:49:2e:d5:07:14:c9:bc:07:e6:07:91:10:
83:8c:b2:79:96:08:96:39:05:17:d7:4a:ab:db:68:
04:d6:69:4c:b8:de:b6:7b:ba:12:39:17:14:24:18:
c2:f7:fd:94:cc:90:57:72:eb:c9:e4:be:53:5b:2d:
ea:4d:cb:83:55:b3:3c:e1:16:f9:c7:f6:bd:6e:42:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:56:D0:05:C4:F9:39:CB:99:97:21:6E:56:AD:E1:2C:E2:AB:D0:87
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:4f:9d:ea:ff:1e:8c:20:bf:e9:11:2e:a5:73:5f:be:95:
41:ff:78:08:13:53:27:fb:8c:98:e9:3b:46:57:8a:ba:00:0a:
59:8d:da:6b:ed:39:b2:ee:4a:45:62:a1:bc:90:1a:02:05:b9:
56:46:0b:21:50:df:ba:8e:a8:08:1c:c6:63:c8:0d:43:54:02:
23:d7:4f:5a:5c:89:bd:e3:ba:c1:9d:a4:14:92:28:bb:57:20:
16:67:a7:99:ab:d1:1c:c2:32:79:86:33:25:4d:56:fb:25:56:
25:87:60:77:2f:65:42:ee:91:e4:0e:a3:cd:99:f2:98:8a:b1:
7e:3b:e3:68:c7:63:f3:3d:df:89:55:45:05:c5:d2:91:6d:66:
56:ad:59:b7:1b:ff:13:90:94:d0:47:58:8f:30:b4:55:6c:87:
2e:4d:5d:2a:13:53:1c:66:e8:ae:ed:90:96:a3:63:20:6c:85:
b2:db:d0:93:6f:5a:12:3b:5d:5a:32:74:3f:df:48:64:4c:b4:
df:ce:c2:b0:44:75:2f:9b:10:c1:ad:8f:77:78:bd:ee:fd:a3:
a8:42:33:36:17:07:69:ea:ec:13:9a:2d:85:6e:f5:5a:2e:ad:
84:8f:da:ab:20:e9:0d:ae:52:30:8e:da:bb:8f:83:26:20:58:
2e:f4:38:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:19 2025 by rpki-client