Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: 1QhWy+QSoQFCeZ2bgKkQq92AYxAqNb4pDQ5h+F5j4Ac=
Subject key identifier: 05:F3:06:DF:75:95:8C:B8:CD:48:2D:E6:7E:3E:01:6C:EB:FF:DE:ED
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 0197BAB46E5EDC326675107F8ECC84BC85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 0F26
Signing time: Sun 29 Jun 2025 08:01:16 +0000
Manifest this update: Sun 29 Jun 2025 08:01:16 +0000
Manifest next update: Mon 30 Jun 2025 08:01:16 +0000
Files and hashes: 1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: dEFZK4EF/HzanNpnW183qDKlB6rlkSYS5Cz9xdO+/cc=)
2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:6e:5e:dc:32:66:75:10:7f:8e:cc:84:bc:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jun 29 08:01:16 2025 GMT
Not After : Jun 30 08:01:16 2025 GMT
Subject: CN=05f306df75958cb8cd482de67e3e016cebffdeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:f2:f2:11:12:f3:5f:3d:c8:38:c6:2c:78:
18:ae:0a:8f:29:4d:29:01:43:cf:e3:7f:da:25:6e:
2b:c1:1f:09:c5:97:8e:ef:7a:1f:fc:97:aa:06:bf:
80:83:86:56:c1:5a:e5:14:b3:ff:a3:18:f7:20:ac:
7f:06:47:86:c9:46:fd:c2:01:9a:3c:9f:47:50:cf:
d0:b3:96:02:7b:c9:f4:38:be:f8:54:1b:fb:b0:7c:
3b:be:ae:66:50:93:3f:99:8c:f7:94:ba:57:63:76:
d1:28:57:75:65:b7:67:cd:93:ea:70:82:16:ad:88:
f8:64:3d:10:ec:2b:f2:74:f2:ab:1e:38:89:8e:ed:
7a:09:59:6e:46:fa:f3:34:17:e7:39:06:60:3e:1e:
cd:57:17:2e:b9:62:92:89:fc:e0:ce:95:8f:bd:0a:
b1:34:b9:f5:4a:e7:63:52:59:6a:11:a9:06:fb:1c:
e2:d7:8b:3b:2e:3f:c9:6b:27:f9:e5:07:80:c8:22:
ee:bf:31:db:ea:63:b6:99:67:ce:cc:e5:04:27:9d:
8e:32:1c:64:1e:db:e7:e6:22:eb:fe:ae:3d:d7:3d:
f7:cc:23:51:b2:b9:66:c9:61:ef:5d:a4:cc:44:0b:
8e:ac:bf:58:f0:bd:d7:17:e2:ca:09:a5:8e:2a:20:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:06:DF:75:95:8C:B8:CD:48:2D:E6:7E:3E:01:6C:EB:FF:DE:ED
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:cc:51:1c:be:48:ff:13:5f:13:31:dc:ca:72:38:ad:bc:
33:ce:1c:21:ae:8e:dc:e7:60:06:49:69:67:d6:8d:fa:82:77:
ea:1c:00:10:82:a5:73:6f:9b:20:d8:7d:dd:a4:2b:aa:49:67:
0f:f7:b3:ce:8e:27:47:43:26:89:5c:77:49:83:2f:5f:c3:3b:
4d:e9:8a:19:7f:38:ad:cb:d5:39:47:54:5d:30:19:20:de:a2:
7c:b8:42:de:a3:c0:03:29:bf:e5:09:f9:a3:ff:57:a7:7b:68:
35:33:ae:eb:4f:45:d6:91:5f:5d:80:dc:31:9c:f3:d7:b0:f4:
11:95:fc:3b:65:c9:f7:d8:d3:ef:90:49:53:b4:75:0a:e6:a3:
8b:24:1c:70:ab:11:e3:95:2c:61:26:0c:29:38:24:76:64:07:
51:e9:f7:6e:d9:6f:13:05:d2:9b:ca:c4:f1:e7:49:a2:3e:9a:
53:1e:46:04:b6:e6:5f:79:cb:93:49:d8:7c:3f:74:74:65:47:
a2:08:43:cc:f3:c5:92:2c:58:97:ac:a9:5e:42:55:3e:c5:a5:
1f:0d:d1:ac:8c:cc:dd:7e:09:93:4e:c2:bc:76:bd:6f:61:af:
30:62:a4:03:f2:6c:28:2c:9c:8f:be:bf:2b:7b:af:e3:71:20:
a7:6c:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:08:07 2025 by rpki-client