Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
File: NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json)
Hash identifier: MK7sy0URRBIoYWM7y4haxTGng0ANf8M+E3qGCA/Zn5w=
Subject key identifier: B1:A5:A0:85:C0:D4:5A:6E:A2:BA:AF:08:47:CE:6E:32:A0:7D:21:8C
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 0197B70F3A9CED3D56F1FC2739362BEF893B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
Manifest number: 0F1A
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=)
2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=)
3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=)
4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: okkvy4J99/tBSc7eMlwro9GTACRNaRScastw/FyQqAk=)
5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3a:9c:ed:3d:56:f1:fc:27:39:36:2b:ef:89:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=b1a5a085c0d45a6ea2baaf0847ce6e32a07d218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:08:e1:70:24:25:c7:39:0a:a6:5e:4c:a8:
d4:3b:6f:41:f2:d8:82:47:cd:39:89:a0:67:25:01:
0d:ea:d7:8b:34:2c:55:e5:d4:07:ae:16:d5:8a:8f:
2f:c6:e6:b9:b6:60:8c:fa:3c:7d:05:e3:54:29:ed:
54:00:50:af:c9:e8:13:44:b4:25:9b:a9:66:17:6d:
26:c7:ab:3f:50:0b:ae:5e:3c:60:36:aa:1b:5d:df:
42:44:1c:69:1f:5b:87:9d:71:2d:61:22:ad:3c:1f:
15:c5:0c:19:12:e6:6f:39:68:1b:04:6b:a6:1d:31:
1b:c2:6c:d9:a8:58:dd:2c:d3:09:55:7b:e2:e6:dc:
35:5d:93:6c:01:6b:41:54:2d:9e:ae:08:a0:98:24:
8e:8b:99:1b:ed:9f:77:5e:23:3b:e0:f3:da:4c:a3:
e2:d3:b8:2c:8c:ef:bb:0b:b3:93:fe:0b:d2:2e:df:
ed:8a:13:a9:40:b6:01:ce:cd:ff:95:19:c7:3d:52:
af:20:e6:67:2f:33:15:64:e8:6a:42:d9:54:b0:2d:
d6:86:83:8e:dc:0f:ed:b9:c4:90:47:99:08:01:15:
a0:40:60:59:02:2b:e9:7e:86:51:8b:be:51:e3:42:
21:bc:d8:7d:50:2f:3b:d0:aa:48:33:ce:28:a6:1e:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:A0:85:C0:D4:5A:6E:A2:BA:AF:08:47:CE:6E:32:A0:7D:21:8C
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:fa:96:4d:e9:dd:89:ba:9d:26:91:e0:61:1d:bf:6a:ec:
f5:67:4b:f3:ca:3e:c5:d4:c2:83:ed:58:30:0a:ed:c5:dc:8f:
2e:ff:8b:9c:3f:a1:98:3c:d3:b5:7a:b2:b9:5c:0c:a2:b9:03:
8c:5e:39:ad:2e:b7:98:2a:ee:a3:5f:db:e2:b4:ed:e9:f3:24:
75:16:0b:dd:00:d5:02:f9:4b:de:18:44:76:6a:10:f3:a1:43:
ad:a1:69:21:98:8d:4d:12:66:35:bc:cf:7a:75:75:ff:b3:28:
eb:c7:06:72:52:f4:d6:ae:b1:b6:ac:48:d7:1d:d0:2a:e3:49:
95:7a:6f:3b:99:fc:a0:a9:76:fb:fa:af:77:cb:cb:a1:ba:9a:
88:04:a9:b9:1c:09:ae:f9:cd:48:7d:62:4d:1f:b8:3c:30:6f:
21:9b:83:d0:c4:20:3f:2a:f5:af:92:f6:3d:9a:b2:13:47:14:
bd:96:cc:43:e8:c3:e9:8b:cb:d1:32:1b:b3:8d:c8:58:3a:ff:
8a:65:67:b9:1e:14:a3:f5:9a:47:37:3c:d6:11:14:0d:b8:1d:
5f:11:c7:cb:dd:c3:90:25:fa:8d:34:c7:e3:d5:1e:2d:74:03:
aa:e5:ec:23:c8:9c:4b:2c:d4:5d:7a:a9:53:3e:c1:e2:5b:da:
0f:a8:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:47 2025 by rpki-client