Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: Om0HuN1G2l/snPzHoqagsBOWl0eloPd8Cldn1LBndrk=
Subject key identifier: AC:C9:30:4A:57:01:0E:9D:99:B7:81:4A:D3:A2:10:09:FF:0D:9B:38
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0197B745B5FC36B065CFFCE93C54DF6516D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: F6+fv3w46w+kJGlGl8Klp+rDjIrzxiNYW6ncdn+ZBM0=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b5:fc:36:b0:65:cf:fc:e9:3c:54:df:65:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=acc9304a57010e9d99b7814ad3a21009ff0d9b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:b4:a1:d7:c6:46:93:ee:89:67:f3:93:41:
5d:4d:6e:8c:bc:79:78:aa:a0:64:47:ba:40:3a:14:
4e:bc:ac:b4:85:3c:b5:e8:3c:d6:d9:27:60:4e:85:
74:a3:05:dc:d9:31:eb:1a:60:9f:81:09:2e:bc:51:
14:86:fb:32:c4:c8:29:fe:46:dc:bd:ab:f1:72:a5:
4c:92:80:96:59:c2:00:e1:cc:56:9a:1c:c0:4b:a9:
70:3b:7a:5c:15:5c:02:df:57:fd:c1:3c:06:0d:7e:
3b:2e:3e:5c:e1:19:14:11:32:70:7e:ea:fe:05:6e:
21:c0:93:85:d4:9a:2f:2d:6d:6e:b7:d3:56:76:7a:
1d:5d:c0:dc:f7:70:8a:11:4d:8b:1f:ff:57:25:c5:
35:71:89:0c:c0:ad:05:eb:55:84:48:7f:d4:f0:24:
17:bb:05:47:c8:36:73:fc:32:22:23:55:40:f4:e3:
fa:73:c4:8c:43:86:3e:1f:9a:ff:2c:d4:b1:66:04:
47:43:0e:49:97:68:8f:68:0a:59:29:93:36:87:f2:
0e:7d:61:34:83:08:b8:a2:ce:b1:fc:d9:dd:0b:ca:
46:b4:23:30:f5:d0:d6:08:79:6a:52:c8:5c:97:58:
35:b4:77:0d:d1:79:b6:bc:c7:4a:aa:67:68:0a:5d:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:30:4A:57:01:0E:9D:99:B7:81:4A:D3:A2:10:09:FF:0D:9B:38
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:f4:79:48:74:00:ee:56:fa:c0:c1:12:26:27:f4:28:18:
d4:32:ed:50:a4:cb:6f:e6:cb:b9:91:5d:de:ac:4b:26:8f:32:
e9:b0:34:14:12:33:7e:f4:eb:7f:b6:4d:da:d1:f3:1c:62:37:
9a:11:d9:58:9e:53:dd:03:7e:b0:dc:99:76:ed:a9:f7:92:27:
e8:ca:af:e2:64:ea:b4:c0:f1:00:47:0f:7c:cc:ba:43:73:5a:
5a:ef:a8:67:79:ba:b3:71:89:c7:32:08:4f:56:38:40:2a:4f:
b1:b1:9c:7f:96:00:e9:3e:ab:ab:73:9e:6f:46:f0:d6:4f:be:
38:fd:bd:20:dd:2a:db:b1:24:c9:70:b4:0c:50:ed:4e:7e:5e:
e2:e5:dd:eb:7f:a4:8d:5d:4d:28:cc:f6:f3:76:3e:7b:ce:94:
32:9c:a2:2c:56:83:ba:22:38:3f:5c:25:97:72:10:3d:a1:cd:
2d:4e:0b:63:f3:1f:b1:17:9d:19:8f:7a:d3:eb:65:56:ba:4d:
30:9d:fd:ed:e4:27:8c:1d:d3:55:0f:96:60:73:6f:86:08:98:
cc:6b:98:77:60:54:ec:4b:f3:8f:2f:7c:fa:81:43:94:80:97:
79:5b:3a:dd:91:38:73:7f:93:ed:d7:ee:15:9a:40:10:3e:de:
39:f5:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:58 2025 by rpki-client