Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: S14sFBdpbOcqKyGdb6btG5bK51zVpqAbt1RZtcaSXuk=
Subject key identifier: 9B:9A:68:50:68:69:52:7A:72:E3:F9:99:6C:9E:82:8D:79:D5:68:53
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 0197B8FCFEA45ACF28FD543C995C9F7449E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 105A
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: lZTtshmUS2q85/m0LOUG0htl0rsduI9raq9CUSLDE4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fe:a4:5a:cf:28:fd:54:3c:99:5c:9f:74:49:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=9b9a68506869527a72e3f9996c9e828d79d56853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:b2:eb:4d:ae:10:0c:90:44:c1:70:04:da:
8a:ed:af:5c:d6:b9:57:10:3b:d2:10:3d:6b:37:76:
08:e4:d7:c3:49:b1:a0:39:2f:55:d9:19:13:b7:4e:
39:f6:64:ec:81:18:91:cd:43:c8:f9:10:1c:b8:89:
df:68:97:db:3b:0e:f3:7a:1c:23:ee:3b:a7:5a:42:
d7:e3:87:f1:03:fc:49:78:1d:07:1b:88:28:ed:7c:
02:65:49:0d:13:e4:75:42:87:25:75:ce:d2:2e:89:
35:07:2d:e9:9e:7d:d1:f0:d9:bc:a3:aa:bf:fc:21:
de:e9:01:1e:bd:e8:6a:d3:5c:27:d6:06:48:bb:c7:
9a:05:07:8d:38:70:7a:cc:8e:f4:8a:3e:57:11:87:
50:5e:99:c7:80:a7:db:a1:6c:11:bb:cb:ec:62:ca:
d1:c6:06:5a:76:ca:fb:8e:7a:d0:d3:5d:f1:ff:c6:
00:aa:45:a3:56:17:aa:fd:1e:0c:8e:fc:70:28:db:
22:d2:0a:2b:28:d4:6b:8a:d8:bf:cd:32:90:94:d9:
49:77:88:3b:4c:6e:0a:b0:67:1f:5e:49:5a:0d:b4:
31:6e:f5:31:3b:f3:66:98:44:71:74:bd:63:89:32:
bf:b4:08:ff:04:17:d2:94:ee:a7:9a:9a:5a:f6:61:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:68:50:68:69:52:7A:72:E3:F9:99:6C:9E:82:8D:79:D5:68:53
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:29:c3:2e:59:71:bb:98:2f:7e:19:57:25:56:74:c6:50:
fa:61:93:d7:7e:8f:cc:eb:72:6b:f6:ef:4c:4f:cd:02:82:a3:
80:80:7d:7e:1c:6b:70:72:2f:3b:6e:6a:50:c0:6e:4c:78:25:
25:b3:dd:7e:5d:ac:5e:23:84:f8:c1:8a:5b:12:05:12:60:4d:
3f:fc:00:59:f8:f7:87:9e:77:bd:ba:47:4b:6c:c5:43:18:2a:
82:58:4b:69:90:8a:1c:e5:6a:fb:e1:fd:45:cb:e9:69:bf:ff:
66:11:d5:c8:4a:77:b0:5f:eb:d8:7c:14:3b:ba:d3:33:10:8e:
c6:c7:2f:88:6e:7d:a2:95:73:78:1b:58:ee:36:59:df:8c:97:
2e:05:18:e2:3f:8f:c3:bf:d2:51:2f:55:5b:00:60:9b:7e:4d:
82:dc:a3:37:3e:39:01:20:a3:55:4f:96:db:2f:5f:cb:d4:35:
4d:ad:8a:a4:f6:da:60:9b:ac:fd:8c:2b:fc:d2:f8:b0:aa:25:
1a:9d:b5:93:3b:a4:46:77:8e:07:5b:4f:5d:a3:5e:4a:ac:2e:
6a:c3:f2:1e:c3:a2:2d:24:2f:ff:a8:08:10:cb:fd:4c:d0:54:
35:d5:51:6d:b8:b9:59:bb:4b:22:0f:e7:ab:0b:47:af:55:84:
48:a8:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:26 2025 by rpki-client