Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: nERmLOe0OTEFGSwxLKHxbTFgyuCl/hqFdipY/SQyiok=
Subject key identifier: D8:83:1C:36:E7:DA:2D:34:6B:EC:3C:6C:A0:C8:38:B4:11:59:74:5D
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0197B632BD728CB7EC5E68B9280DDAD9C3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0D65
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: mXRaDPWQvTc5bcVQUz4QkklIyRfqzk/1oXDvORQx2cI=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bd:72:8c:b7:ec:5e:68:b9:28:0d:da:d9:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=d8831c36e7da2d346bec3c6ca0c838b41159745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:49:f6:f8:fd:ae:a8:0d:92:d5:e6:35:13:
55:1c:7e:3c:9d:eb:30:88:b9:b3:c1:36:b5:d4:0c:
a2:0a:cf:43:51:4e:15:76:d2:20:bf:e3:fa:bf:4b:
82:71:5e:9f:2a:d6:3b:2f:a4:f0:51:ea:6e:a3:8f:
6d:0b:07:80:6b:69:83:95:9f:ec:7f:e5:d7:15:5a:
d9:1c:eb:a3:62:3c:fe:62:26:93:73:67:8d:f6:7c:
64:dc:e9:cb:fc:d9:2d:9a:55:1c:e6:2d:03:34:0c:
c5:83:0d:64:ff:f0:be:e0:d9:36:fc:ea:fd:50:51:
5c:8c:48:70:15:c6:6f:32:50:12:a0:ea:f5:92:0d:
30:d5:95:cc:24:50:59:3f:e5:fd:3f:68:66:9d:e7:
bf:92:4a:81:a7:fa:8a:19:57:9d:da:a3:d7:2f:0e:
d3:40:36:e7:42:cb:84:fe:6d:a8:a1:fc:c7:db:a1:
0a:c9:e9:49:c6:a4:c9:91:6f:d6:8a:7d:40:f9:23:
ec:f7:f2:2e:a3:79:eb:23:d0:10:93:ab:81:46:99:
51:01:6e:4e:30:65:e7:1d:3d:64:06:65:4f:ad:5d:
44:11:ad:0a:81:9a:6c:f3:09:fc:d2:07:63:ca:08:
04:85:da:4f:2f:61:65:8e:b4:95:79:54:f2:cd:3c:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:1C:36:E7:DA:2D:34:6B:EC:3C:6C:A0:C8:38:B4:11:59:74:5D
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1f:46:33:38:fc:06:b0:78:ff:32:55:29:3d:13:6f:77:37:
73:ec:73:f2:11:be:ef:7e:5a:1d:58:33:19:a1:81:f4:68:20:
e9:e1:87:fb:86:b7:f9:ee:76:8d:66:a7:95:64:b0:f1:6e:93:
c9:77:a5:c8:31:ff:5b:11:94:a1:37:3f:5c:75:16:04:17:80:
4f:de:a7:52:c6:c9:a1:1b:95:47:e1:9d:45:c0:80:bd:ee:84:
1f:54:f9:3b:48:a4:ea:c3:5f:1a:db:98:d7:de:54:c0:c5:12:
fc:e2:45:a7:41:f4:f0:03:02:32:36:a8:9d:58:5d:0f:d9:8d:
b9:1b:95:13:11:47:19:a1:3c:af:b4:32:ca:c4:0a:70:1a:4b:
8d:39:82:80:98:80:1b:16:5d:3d:d7:f0:e8:ae:6e:83:12:63:
54:a0:2e:1f:3d:56:95:ac:24:1b:fe:5a:be:41:4e:59:62:47:
d8:8c:e6:1d:4d:41:5a:2c:43:a1:d9:e9:49:98:89:fe:64:95:
2c:db:8d:a0:19:03:11:63:0b:14:54:7a:73:c4:dd:e7:79:e6:
67:a4:28:48:8c:f6:ec:48:f5:56:7b:fb:4d:fe:66:cf:7c:f5:
60:6a:73:cf:30:6e:54:3f:ad:48:b7:ea:34:b7:63:86:e4:70:
98:46:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:20 2025 by rpki-client