Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: 3Xxf9N1NhB4c5ecVZhlpvbTPkzibB5zecrbtZfeZig4=
Subject key identifier: EE:58:81:2E:44:88:A9:BF:A3:65:AC:69:11:70:40:64:E7:78:6F:11
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 0197B88ECE9E93E8DCE9B99604FA831D2805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 12DD
Signing time: Sat 28 Jun 2025 22:00:56 +0000
Manifest this update: Sat 28 Jun 2025 22:00:56 +0000
Manifest next update: Sun 29 Jun 2025 22:00:56 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: ruG0tEtVkNPm1uYw7Qk7isn3GVL69drr/QrINRGKdFk=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ce:9e:93:e8:dc:e9:b9:96:04:fa:83:1d:28:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jun 28 22:00:56 2025 GMT
Not After : Jun 29 22:00:56 2025 GMT
Subject: CN=ee58812e4488a9bfa365ac6911704064e7786f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:e9:48:a6:bd:24:56:2b:a5:40:f0:5a:6b:
ac:70:a7:f9:8f:ed:d1:c8:24:4a:c7:18:24:98:90:
6c:6c:a9:64:13:27:4e:57:5a:f9:7e:d9:ba:f7:4d:
d4:20:9f:1d:c2:e0:7c:d2:2c:17:4c:50:32:3c:b7:
d1:f7:4c:f3:56:93:c1:1a:5a:f1:c8:67:df:3c:0c:
45:db:09:88:95:23:d4:96:9e:f5:13:31:91:f0:dd:
19:5e:f3:9c:d7:c5:8a:d2:6b:16:8f:8f:3e:8e:fd:
c0:cc:d7:55:27:a4:9c:b1:50:be:9a:57:48:f4:e2:
1c:95:94:86:f4:f3:ce:86:45:00:bb:6d:5c:51:57:
3e:b9:9e:fd:be:99:a1:67:4a:9e:6a:7d:d0:e0:e4:
a0:e3:14:85:49:db:d0:a3:d4:cf:49:dd:28:18:be:
76:fa:2e:81:56:78:bd:94:59:18:e7:0d:62:66:67:
fb:ca:53:c9:69:4a:9f:51:02:fa:55:12:29:35:1f:
10:f6:de:dd:62:6d:00:20:f2:28:50:06:b4:a0:88:
ff:78:b6:65:71:b0:57:6d:b8:2b:7e:f6:0c:28:6a:
aa:d9:15:36:ca:06:97:a7:e0:03:62:3d:61:af:30:
be:ee:23:c4:23:a3:93:70:83:08:5f:84:fa:e7:03:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:81:2E:44:88:A9:BF:A3:65:AC:69:11:70:40:64:E7:78:6F:11
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:f2:8f:8d:17:58:ed:05:0a:a1:2f:e4:60:07:0e:7a:4e:
77:6e:6c:aa:37:06:c8:de:9e:16:9a:1a:d2:63:ca:59:69:81:
ac:8c:69:48:be:85:35:17:1e:5a:8f:27:77:a0:95:27:c5:f1:
97:84:2b:b2:26:5e:bc:82:5b:9a:07:dc:cf:75:3f:a3:cf:74:
a7:32:bc:58:84:26:4f:2e:85:ae:51:e7:cc:75:c5:d6:f3:9c:
21:4e:0a:7c:c6:cc:cc:bb:92:23:0b:78:47:c1:6f:e4:94:6c:
4a:46:c3:af:67:b1:f9:05:f4:09:60:be:a8:1e:65:fa:4e:09:
ca:83:19:f4:8b:14:69:a1:dc:32:75:87:0d:72:32:f3:cc:3c:
9c:7b:48:21:0b:94:15:92:e2:40:f0:d3:00:2a:06:a8:2f:c7:
7a:a9:bc:08:8d:c0:21:a0:6b:dd:a4:b5:15:2d:96:bc:aa:6b:
ac:26:ec:f9:ed:16:df:99:17:17:f8:36:25:e3:30:01:89:05:
a4:2a:2f:aa:01:b0:3f:86:11:54:26:2b:5e:f6:46:ab:27:12:
a1:57:2d:7f:7e:c7:ec:04:4f:e0:d6:8c:90:94:22:aa:88:45:
30:1e:2e:ee:32:a6:48:ef:0f:ad:25:b5:a8:d6:0a:7a:82:58:
7d:7e:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:11 2025 by rpki-client