Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: gnCE9RscBQiAjOB0XymI8uJzIIaGS4XuuyrhYiskxIs=
Subject key identifier: 6C:CF:C8:BA:71:77:6D:BE:92:09:5F:51:E2:B1:AF:86:17:96:C3:80
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 0197B6A185492B706AB820DADC2FFEBAEAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: 64tIIjI9eNxpICbWMMbGskMLJDukhL/I7p5OtvaOqKU=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:85:49:2b:70:6a:b8:20:da:dc:2f:fe:ba:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=6ccfc8ba71776dbe92095f51e2b1af861796c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:71:b3:b8:4e:ab:46:7d:f8:68:62:fd:52:
48:a2:ac:3f:9c:e9:86:e9:5c:86:46:e9:25:8e:ba:
ba:27:2b:fd:07:ac:e4:e3:f9:e3:20:a2:15:2e:e4:
39:90:4f:6a:c4:77:b6:4c:07:24:0c:1c:62:2b:88:
6a:fd:ab:4b:55:c4:2c:2d:fb:8b:70:d7:67:10:d8:
e5:ac:13:b4:96:83:42:9a:3f:15:60:d1:c2:97:00:
5a:ab:58:52:98:59:9b:ff:f8:88:bf:38:2a:73:43:
c4:eb:59:62:0b:0e:2e:8a:34:43:22:a7:1c:ba:75:
63:c1:e4:2d:1a:e1:89:7c:fd:e3:25:66:9e:bd:3b:
91:87:fd:88:32:88:9f:34:0d:bb:6e:28:bd:35:2b:
49:61:6c:c4:17:3d:93:2c:b7:60:cb:1e:6c:3b:ca:
fd:c0:06:39:00:c4:68:9c:ec:ca:43:45:8c:a8:b8:
82:92:36:95:29:35:a7:a5:58:5c:03:30:cd:ea:6d:
34:d4:14:8e:fa:d2:60:15:fa:a3:24:77:82:f3:d8:
55:b8:12:a2:85:95:9f:5c:ba:45:97:fb:c0:5a:0b:
59:c1:a6:b0:ac:46:61:c5:6d:8b:37:05:8b:c2:05:
da:83:20:7f:f9:90:80:1e:c4:d2:f8:26:01:db:89:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:C8:BA:71:77:6D:BE:92:09:5F:51:E2:B1:AF:86:17:96:C3:80
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:e8:f4:87:c9:4d:1b:c3:eb:c1:6a:a6:a7:83:7c:ad:b9:
36:e2:55:4b:82:ba:91:80:62:b9:5d:58:b6:2c:84:bf:2b:ab:
0f:fc:9d:d2:50:ea:5f:c2:d5:e7:d6:15:10:6a:84:8b:80:91:
0d:30:34:5b:16:46:56:f2:65:6b:16:90:01:92:f1:27:bb:72:
e7:20:a4:b3:92:8e:5f:fe:2a:1a:86:cd:0d:ea:f5:0e:97:fd:
e0:db:bd:48:1b:58:1c:40:6b:ce:37:32:b6:50:ec:a2:e9:01:
3f:24:99:15:db:8d:ad:ea:a4:fb:9d:8e:77:6d:aa:10:22:5c:
94:3c:46:c4:60:ba:a8:c6:22:b2:ec:a0:dc:7d:2b:25:fe:20:
8f:59:02:44:36:19:c4:18:d3:37:e3:c4:1d:8e:19:83:56:05:
73:5f:25:46:2f:2c:34:f9:4d:4b:63:59:91:4e:f8:c1:2d:a9:
0e:5d:81:c2:ac:71:74:3f:96:55:5f:2a:6f:7b:c7:de:30:7b:
af:b4:75:25:1d:14:3d:dc:4f:92:2e:b4:1d:a4:09:70:c2:79:
5b:59:04:f7:ed:8c:3d:b6:1d:ce:0b:e7:d4:fe:05:dc:67:56:
da:af:fc:08:3b:7a:1e:72:ec:5b:9d:72:03:a2:e7:b0:29:e5:
40:9f:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:42 2025 by rpki-client