Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: cH2/mRkQqaoZ3uhBPwx/U5VYKfOddqQTztZ5zs9PLnY=
Subject key identifier: E4:3D:2C:54:63:18:E7:B3:82:1B:22:EF:B6:2E:78:50:74:6B:B9:57
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0197B5C4DDFA998F75741C688272450B00A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0E33
Signing time: Sat 28 Jun 2025 09:01:07 +0000
Manifest this update: Sat 28 Jun 2025 09:01:07 +0000
Manifest next update: Sun 29 Jun 2025 09:01:07 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: EghMDb2G9tJlYvLJmEi+0YX2c6o1E6aAyGIgnGtDgPY=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:dd:fa:99:8f:75:74:1c:68:82:72:45:0b:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jun 28 09:01:07 2025 GMT
Not After : Jun 29 09:01:07 2025 GMT
Subject: CN=e43d2c546318e7b3821b22efb62e7850746bb957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:3e:ad:f7:3b:80:da:fd:f5:bd:ca:0b:62:
4a:61:cd:91:28:e6:de:c4:87:4e:95:e6:a2:e7:d5:
1e:80:ae:43:14:cb:b1:05:0c:38:07:76:c1:64:03:
89:42:13:a5:05:77:4c:bd:4f:95:c6:a3:62:e6:7c:
6c:64:c2:c5:e9:6c:05:ab:0a:cb:af:95:45:e9:e7:
3d:2d:68:75:47:55:3f:4e:f3:87:8b:42:11:26:ec:
13:3f:6c:3a:19:38:df:fe:60:a9:73:2b:17:26:5c:
45:02:80:af:01:b4:9d:1b:8a:d3:72:66:27:57:d8:
4e:0f:76:ba:87:4b:5e:89:b1:c9:7e:0b:f6:18:27:
bf:d2:30:37:c2:34:bb:4e:95:25:06:37:5f:bd:1e:
09:c8:53:84:87:85:01:9b:ae:ae:d9:3e:de:97:bd:
19:91:b4:42:b9:33:cf:58:17:c3:5c:48:1d:f4:dd:
33:0d:20:04:03:5b:39:58:97:51:08:28:cf:48:8b:
f7:95:39:11:3f:5c:0e:e6:1d:44:86:37:2c:85:43:
16:16:f2:5e:c3:08:80:0e:e5:41:7a:a9:a3:e7:dc:
55:ca:1c:32:31:37:3c:fe:a1:e5:08:e0:3d:3f:fe:
a4:87:f8:a2:e3:4e:f5:6f:e3:c5:b5:8a:07:85:02:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:2C:54:63:18:E7:B3:82:1B:22:EF:B6:2E:78:50:74:6B:B9:57
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f0:48:78:3d:44:8b:d8:ee:55:dd:36:b1:d2:4c:16:14:cb:
de:e3:04:d1:22:ae:de:af:33:46:76:37:b3:7c:c7:7a:1d:6d:
1a:fc:63:0a:44:30:1d:50:5e:9c:53:82:40:d8:b8:f9:80:0b:
a4:02:d7:4f:f7:f3:0d:d2:cf:f7:64:fe:b1:f8:4c:a4:c2:2f:
bf:34:8a:43:83:49:e7:9c:f7:76:95:16:3f:f4:66:0c:ea:f5:
26:8a:ab:13:0b:21:a0:50:30:41:94:29:0c:9f:27:b9:1d:36:
0a:09:d7:51:fc:62:4b:f2:9f:b7:a1:d9:c1:ba:aa:b6:80:00:
ee:26:bc:f7:09:f9:34:fd:55:7d:a3:58:ab:11:f0:23:83:8d:
e8:5c:69:d0:29:12:3b:d2:55:0a:6e:1b:4d:81:61:0e:d4:cf:
2f:0b:91:d2:a8:3d:ae:24:03:c0:49:86:d2:d5:a1:9b:a4:d0:
c1:b1:b1:4b:d7:39:8a:08:1b:fc:e1:b2:fe:ac:67:e5:b0:81:
8e:70:84:df:3e:bc:4d:09:42:43:d4:98:e4:f5:ad:8a:c0:42:
6b:ac:a1:62:f1:57:be:30:93:83:f9:c4:72:35:38:50:c4:aa:
d9:f5:61:9a:bb:4e:c6:55:0a:e4:7c:6f:94:d5:61:f3:35:9c:
80:21:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:26 2025 by rpki-client