Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: ZArDrqApHvYc/tX8CSSXY65Pc1FuuW/JLKhgtNlcwc4=
Subject key identifier: E2:5C:37:8E:4E:14:EC:F3:43:8F:4F:01:BC:AB:DB:92:30:02:B9:B2
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0197B6A1316A4A28BD2C4B3EF516FC1F0062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 055F
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: itEAOGRlSfYQFt19QO9vT3dubHS1nwimiUwZ/lKanQM=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:31:6a:4a:28:bd:2c:4b:3e:f5:16:fc:1f:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=e25c378e4e14ecf3438f4f01bcabdb923002b9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:d0:5e:51:9e:0c:ee:c6:aa:74:19:0f:d1:
bb:fb:9a:fc:a3:9e:bc:aa:14:f6:c4:6b:a4:27:af:
7f:88:4a:73:b3:b4:b3:d3:d9:f9:07:12:00:b7:1b:
a8:18:d9:5b:b5:79:ed:d3:d3:f6:2e:1e:b9:82:1d:
72:b3:05:bb:6f:f9:55:59:32:53:9d:c9:33:dc:06:
5b:8b:79:81:cf:68:6f:91:6a:25:4c:b5:61:ce:7a:
29:48:8d:2d:55:52:71:d6:11:d3:2c:ae:67:7a:12:
64:fb:d1:f3:e8:d5:80:8e:2d:ac:86:cd:b1:c7:3a:
7e:3b:46:5c:0d:fa:c3:3f:9f:69:f2:78:78:f8:fc:
ab:ad:74:8d:20:21:1c:92:51:c4:00:9c:51:07:c4:
78:db:e9:08:8b:88:88:ee:ac:f6:94:0b:c4:d3:2c:
40:c2:3a:09:56:f9:e6:cf:42:ad:56:5a:86:17:a8:
69:14:e3:58:71:10:51:e0:f9:52:24:30:9f:91:5b:
c2:d0:21:be:eb:d1:9d:42:49:24:e0:59:43:61:ef:
11:ab:d9:c5:3c:f2:2c:eb:f2:cd:f3:da:eb:f4:e3:
3b:0f:6f:eb:71:3b:03:a9:c6:ef:fa:65:b1:88:5f:
52:f9:34:c3:52:7f:3e:a1:01:9d:56:d0:c6:b0:27:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:37:8E:4E:14:EC:F3:43:8F:4F:01:BC:AB:DB:92:30:02:B9:B2
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fa:06:4d:28:fe:4f:43:74:fb:03:bc:31:67:dc:b4:3c:92:
b4:78:75:f8:55:7e:47:a7:75:9b:d9:27:52:12:d7:f6:06:c2:
dc:e9:60:75:5a:e5:65:15:68:3b:56:6a:48:58:56:10:96:1e:
de:97:56:39:16:09:f4:7d:f6:8e:d2:5b:02:74:01:23:26:b4:
77:55:99:7d:0d:df:c6:83:b0:ec:4a:fb:dc:37:95:8c:23:64:
e9:80:1e:94:8b:a2:4e:f5:58:57:2a:93:4e:72:b9:c7:bf:a8:
96:7e:ca:c4:e3:d0:88:95:d2:95:53:3b:c9:b5:15:d0:13:39:
08:48:6a:a9:57:a0:7c:ec:5d:cb:a4:a0:13:90:a6:bd:bb:17:
ce:35:8a:00:8e:e7:32:e7:0b:f0:11:96:31:c2:e9:a0:3e:c4:
8a:23:7a:d4:89:5a:48:f9:03:9b:3a:f0:1e:d2:66:ac:d9:f2:
a4:f6:c9:46:93:b1:da:07:c0:81:ac:71:ae:19:e3:ad:e2:4c:
4a:1b:1d:47:51:07:08:9a:11:3b:6d:a4:f0:e2:d9:df:0d:e1:
3c:1d:57:a3:96:28:06:2f:7e:a0:91:8e:2c:05:10:c1:c9:03:
21:1c:be:d7:58:7d:63:20:af:af:93:ec:30:45:fc:cd:38:d9:
1e:0e:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:55 2025 by rpki-client