Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: 8PJBW6ddTWvXQG6UpO1VYwOJIaEW1eBZYzehKBiwJFM=
Subject key identifier: 26:7E:03:BA:D0:06:D6:E4:47:43:4F:A6:F3:0D:9A:9A:FF:74:75:AD
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 0197B70ECD41D4261F9C54F8F2DAC2A29D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 10B7
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: cG4a65Dd9qxsWIAJWekbnm1lDvGjHp1DSl0raaLeWU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cd:41:d4:26:1f:9c:54:f8:f2:da:c2:a2:9d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=267e03bad006d6e447434fa6f30d9a9aff7475ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:e8:86:fa:9b:8b:d8:09:70:01:02:ab:cd:
fc:f0:2b:77:22:57:33:39:32:29:cd:cd:ab:14:c9:
dd:87:21:da:d5:f5:b4:0e:c7:86:67:07:b8:24:23:
04:7e:54:b1:f7:25:7f:da:e4:1a:c9:6c:b9:9a:71:
61:a1:fe:49:b2:7e:da:c5:51:77:6b:14:41:50:11:
41:28:cf:a2:33:93:02:3b:25:a4:a8:36:c3:4d:fb:
ea:09:f2:16:94:48:96:b3:f9:3a:78:12:48:b4:e2:
2c:e3:0f:a7:f3:b3:64:20:ed:d1:19:4d:8b:9c:0e:
d5:9f:05:da:3e:75:3d:22:c5:d9:1d:c6:18:0d:84:
4c:7f:e2:f7:ef:f6:33:70:30:34:bf:3d:71:63:b2:
a1:24:d6:33:f3:5b:ec:6e:f6:c0:1a:f2:13:5e:c0:
51:ee:1f:87:63:19:ae:2b:e1:7c:6a:c1:10:5e:1e:
ca:c8:a7:5b:3a:91:31:a5:bf:11:09:32:a6:b8:6b:
fe:64:b4:b5:90:3e:bd:5c:53:fa:bc:63:e0:26:30:
14:1d:4b:3c:85:24:ec:3b:98:43:74:e7:f0:a2:c8:
64:50:4a:9f:c0:da:c3:8d:6c:04:ed:d7:9c:08:19:
cc:a6:11:e3:9c:e1:6b:72:6e:64:55:32:1c:3c:89:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:03:BA:D0:06:D6:E4:47:43:4F:A6:F3:0D:9A:9A:FF:74:75:AD
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:ac:bf:1d:98:d8:fe:98:7d:cf:46:78:07:40:8c:13:23:
df:cf:67:93:2e:6c:87:0f:a3:d6:a8:e3:19:d6:31:8b:9e:80:
cf:b1:84:aa:1c:82:2c:d8:54:4f:c9:2b:e6:91:c1:dd:7a:c2:
6a:95:22:13:5c:b9:bb:9b:3e:72:91:20:56:96:62:c5:26:ce:
c4:d0:32:b0:ab:0c:56:9a:3f:ed:30:11:85:3f:f3:65:c3:ae:
20:83:98:5e:72:85:d6:ed:f9:ff:3c:9d:a6:c6:31:dd:74:fc:
36:5c:bc:65:4f:d4:34:53:7b:b2:69:ea:76:0d:25:76:ab:d6:
0a:63:aa:b6:22:f4:d3:fc:3a:53:1c:fa:0d:00:00:f5:a7:3d:
a8:13:b8:6b:ff:3e:7a:e5:0a:52:54:90:ec:0c:4c:25:e5:34:
d7:3a:7e:2b:99:d2:49:48:fe:f6:88:7e:30:ea:b7:81:79:63:
a6:05:f7:a6:2b:8d:b2:e3:37:59:01:00:ee:12:86:61:79:e6:
d2:30:bd:c6:30:f8:e7:7c:af:ca:7c:a5:e4:69:0b:da:86:86:
d9:f5:d7:0e:d5:b2:7f:01:e5:f1:bc:82:67:c8:fc:a0:89:b4:
ed:c6:34:c6:87:a1:0f:f8:ef:34:f3:d3:98:55:6a:32:a8:bb:
73:28:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:47 2025 by rpki-client