
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: QMHrx+BtnHd+Ic4/1A1pCRdsEKFexXMuvGh1KbLAKDw=
Subject key identifier: 9C:90:9B:62:94:BA:13:64:8E:DD:79:B8:7A:5F:BD:4C:1A:7B:15:6A
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 0197B7B36B4C967DA901CD93551A19024ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 05EF
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: GvcXrYEmETQUHZ2nYqCJrTX4i+ZLaNweRtJDifAG704=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6b:4c:96:7d:a9:01:cd:93:55:1a:19:02:4e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=9c909b6294ba13648edd79b87a5fbd4c1a7b156a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:04:73:04:5f:db:ba:cc:4d:66:c1:e0:53:
08:d2:2f:11:78:f7:fa:89:b4:5c:08:58:3d:92:bf:
26:1c:52:1a:06:dd:71:d0:61:55:8f:41:5c:9a:1b:
fa:e3:ac:5b:8b:f5:17:41:10:f6:b7:ec:ae:88:d7:
cd:8b:7b:0c:6c:e4:d8:c7:50:94:25:d9:ef:a4:2b:
83:f2:8a:62:4b:cc:14:57:1b:b4:87:29:6f:1d:35:
9a:98:02:c5:83:7f:cc:4a:64:75:bc:43:59:82:c8:
04:aa:4a:44:c9:3a:a8:3c:9c:75:18:0d:ff:93:5c:
96:47:71:ff:14:1c:d7:2b:a1:f6:c7:de:90:bf:75:
4e:c9:50:84:8d:5f:77:8f:01:f0:33:12:2d:7c:34:
7a:8f:cc:2d:5e:66:67:89:80:79:ba:49:8e:ae:f2:
eb:d7:83:6f:e6:c0:b0:a9:1f:8f:7a:5c:3a:17:9b:
e7:08:9b:2c:67:e2:6b:55:a6:10:e0:76:5f:c2:e4:
e4:2e:07:a7:a3:04:2d:e8:39:7b:d6:2e:6d:9f:21:
60:a7:d2:c9:9f:cc:aa:bd:48:fc:e0:47:1c:46:7f:
62:2b:05:b3:e1:03:f6:b5:69:88:39:76:b4:2e:d2:
98:e2:37:3e:14:18:43:e5:d3:e7:55:55:9b:7a:b7:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:9B:62:94:BA:13:64:8E:DD:79:B8:7A:5F:BD:4C:1A:7B:15:6A
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:4f:83:71:17:5b:56:4e:65:91:49:81:a6:29:e4:80:46:
60:0d:98:e7:b2:a9:60:8c:5f:73:e8:77:2e:07:b6:2a:2a:b3:
dd:fa:0d:df:77:12:4a:ef:b1:84:18:de:c0:98:c0:36:f9:2f:
09:9e:83:33:16:87:3c:79:81:ca:07:a1:34:fa:38:c2:3f:dc:
44:58:c1:05:fc:32:9a:ca:26:2a:bf:f4:8c:d1:53:1b:0e:9b:
79:13:eb:9f:fd:c2:98:0a:15:bb:14:45:57:29:09:b7:05:7b:
e3:c4:2f:eb:0f:53:6f:79:fb:c5:af:78:18:d5:40:de:9a:f2:
ba:22:87:96:19:66:b9:b0:06:5a:21:98:a3:81:1c:50:61:c1:
09:40:61:36:ba:88:0a:9a:4a:04:80:0c:26:b5:a0:93:7d:f8:
64:6a:b7:0b:89:dd:39:dd:b6:23:09:b3:98:1a:75:45:8f:6c:
68:75:ee:53:59:3d:7f:bd:40:b3:ed:c3:4c:37:a4:6e:a0:08:
48:ec:e7:63:14:f2:c6:b2:03:21:54:63:ae:12:1d:49:0d:f1:
a2:bb:ab:5e:82:57:8f:55:aa:c6:f3:4e:38:c8:de:84:20:9d:
d5:ef:24:bd:54:c6:b2:be:aa:f0:1c:6a:c7:82:26:00:2f:0a:
79:a2:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:25 2025 by rpki-client