Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: wrC5cMaDZq942xZEomkJql+g93XQr6iaMagGX6wv7fE=
Subject key identifier: 51:1B:A6:FD:DB:E2:50:F2:7B:29:03:08:0E:FA:D6:B6:77:EA:98:CA
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 0197B8907340DF8209D1A0546D67BEA24544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0104
Signing time: Sat 28 Jun 2025 22:02:43 +0000
Manifest this update: Sat 28 Jun 2025 22:02:43 +0000
Manifest next update: Sun 29 Jun 2025 22:02:43 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: t7eqHUzXCQeBW4zyXPXjJPZ9GmbPeI+Fu67fr51usnk=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:73:40:df:82:09:d1:a0:54:6d:67:be:a2:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Jun 28 22:02:43 2025 GMT
Not After : Jun 29 22:02:43 2025 GMT
Subject: CN=511ba6fddbe250f27b2903080efad6b677ea98ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:a0:17:01:82:a6:75:47:62:8f:9c:41:bd:
3a:37:dd:f7:6e:94:49:7c:7d:1f:5b:5a:92:4d:08:
16:f9:71:97:4a:15:d6:c1:f0:03:72:f6:f3:93:51:
02:dc:15:3b:3d:77:35:bf:86:d7:a5:58:11:69:b5:
92:3d:7a:b9:f6:e8:2d:54:1b:34:98:d6:48:55:7f:
01:b2:31:fb:f6:aa:f0:5c:68:4c:94:6f:1c:01:a0:
77:4a:44:96:8d:01:11:f8:0d:f6:e1:b7:8e:a5:48:
72:3d:45:a1:fc:77:99:16:46:82:74:63:f7:49:8b:
da:55:8d:df:1e:f7:5e:16:db:ef:19:9a:b5:19:06:
44:79:18:00:69:07:d5:6d:b4:57:9c:35:c6:d8:3f:
de:3d:37:ca:14:4a:e6:35:ae:d7:7d:61:72:55:22:
45:06:d9:01:b1:f2:41:d1:89:6a:05:3a:f8:9e:99:
e3:5a:58:0c:81:c1:19:8e:48:bc:2b:69:6c:bd:d4:
d6:c3:a3:af:a0:27:c5:3e:89:38:e6:b8:6a:91:62:
41:69:b6:1d:b2:be:4a:af:b7:8e:bc:ab:9c:1d:08:
51:0c:9f:44:09:b7:b7:dc:08:66:8c:0a:d8:24:51:
17:42:7c:bc:52:6b:be:2a:32:df:fd:b2:7d:94:80:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:A6:FD:DB:E2:50:F2:7B:29:03:08:0E:FA:D6:B6:77:EA:98:CA
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:2c:dc:a3:7c:ef:99:ab:50:e5:fb:a5:ca:93:53:5e:31:
10:21:83:33:dc:60:a3:8b:e1:4c:6e:87:86:d5:80:d9:12:fa:
3e:86:a8:c4:f0:5f:a9:5d:4d:f5:68:a2:5d:dc:4f:80:8f:fd:
7d:31:4a:2f:77:1f:94:44:98:e4:0d:99:de:ce:31:15:af:55:
82:11:ec:10:26:e9:5d:6d:ae:c2:22:7b:94:4e:0e:aa:60:ff:
9a:67:af:56:36:91:ba:43:d1:2b:c2:5d:a5:0d:7b:36:c2:d4:
b5:e2:c7:df:76:a6:fe:58:0a:83:1d:d0:d4:27:21:76:3b:d8:
c0:20:d9:19:b1:6e:4d:9c:46:52:f1:4f:fa:77:2b:37:9b:4c:
de:b3:d0:ef:0f:08:d0:36:44:1e:27:ea:0b:c5:8b:cd:53:44:
fe:e0:27:22:0d:39:5f:cc:b7:e5:86:6f:19:ce:a5:8c:b3:b6:
3d:bc:e3:79:47:4a:ca:bf:27:41:42:20:37:b2:57:a3:36:96:
3b:87:dd:3c:0a:f8:81:dc:68:99:c6:84:d3:09:4f:0f:a9:75:
57:a0:8b:ba:f5:77:91:59:19:40:c1:b5:b0:cf:d6:9e:f5:b7:
ca:ae:c1:e4:99:4d:a9:de:d7:17:65:50:fb:9a:9c:7a:58:d5:
35:a6:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:54 2025 by rpki-client