Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: va05PGK4zYTMR8B8ogWPFoVbxAh9C/3y4NVY6zrA12E=
Subject key identifier: 6C:87:5D:76:3C:5D:1D:A9:A0:F6:52:6D:30:E6:32:1A:42:B7:DF:09
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0197B70F22BD066F7071FE443070B32B1246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: K7o1rLQM+arTjdt54jfCbHrRrNYyrA46Pr2x08HiUX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:22:bd:06:6f:70:71:fe:44:30:70:b3:2b:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=6c875d763c5d1da9a0f6526d30e6321a42b7df09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:65:89:a9:e7:d0:34:6c:56:e5:17:21:9c:
7c:de:42:df:8d:f8:39:a7:7d:7c:c3:6e:df:55:5e:
de:4c:21:99:cc:4f:c6:3e:4d:c8:30:92:97:d1:ed:
98:1e:be:00:5b:d5:69:b9:44:a9:15:d6:d4:36:f5:
9b:37:58:39:6a:81:a9:e7:5f:16:46:a8:a7:8d:ee:
ac:82:39:0d:20:4f:5d:fe:51:1f:56:05:5c:07:e0:
75:e1:07:74:81:5e:ee:e0:b3:1c:ce:c1:20:cf:b7:
ca:04:0a:9a:83:83:92:7e:72:f1:40:c1:af:ca:e7:
66:a8:22:15:99:34:cc:8e:81:ac:3a:7e:c4:a1:29:
ca:e9:d4:ce:61:d2:8c:73:7f:63:69:42:36:a0:66:
76:44:81:a0:e1:c7:0c:08:7e:61:4d:1f:0d:6e:d2:
b2:fa:a6:f8:c1:e0:5b:8d:bd:4b:f5:95:11:65:2f:
a3:6b:cd:21:77:2a:c6:d0:0f:9e:34:65:1b:08:32:
fc:42:fd:3e:07:64:84:41:43:a2:4f:2d:9a:7e:bc:
6b:ec:c0:f5:04:53:95:1a:10:b8:f9:18:1c:04:a5:
33:14:28:95:bc:c6:73:97:01:ff:f5:d4:17:05:a3:
0c:65:78:1c:86:9e:84:7a:ba:45:e1:4f:4c:fe:6b:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:5D:76:3C:5D:1D:A9:A0:F6:52:6D:30:E6:32:1A:42:B7:DF:09
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0b:ca:27:8d:87:b1:61:84:ef:b2:e3:f4:82:0b:66:df:33:
78:55:81:81:3a:bf:ef:2d:03:7e:a0:13:c5:12:8d:2b:cf:13:
76:7d:67:eb:64:03:12:9f:37:85:b8:c9:9f:15:40:01:b5:47:
44:1e:04:d5:3e:24:fb:b9:08:f3:2a:07:c6:2f:6e:11:dd:2c:
5a:92:07:6d:bf:4b:9d:35:7d:0f:f4:51:65:be:4f:ec:76:93:
8b:26:df:b8:f8:6f:c4:02:3e:3f:15:2d:2e:58:c6:8b:7f:21:
72:15:2e:13:c5:e9:f2:62:ad:e6:00:77:0d:0d:0e:44:91:d3:
ea:6b:04:bf:6a:52:88:98:20:90:a4:e0:17:cb:7e:88:53:6d:
10:aa:c6:40:d6:d0:bc:eb:b3:25:93:6b:47:f4:ec:af:ce:db:
10:3f:a0:e5:9d:3c:6c:34:92:1e:ac:7f:75:46:97:75:04:bf:
8f:04:b2:39:bd:10:b6:30:69:5b:9c:ea:4b:bc:68:5f:b4:8d:
8b:75:c1:1a:2e:d4:76:26:a0:a6:f7:93:d8:01:2b:39:52:50:
03:97:84:13:88:ac:53:f3:75:83:0f:f4:40:9e:44:94:cf:41:
7f:da:5d:82:63:f9:09:35:b0:96:8a:30:f9:e2:e6:98:3a:46:
cd:80:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:48 2025 by rpki-client