Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: q9dulM67ZvcJCRsetIVCQQyY2JMeY79Mp/IlsAMaeTc=
Subject key identifier: 4E:5E:C5:5E:3D:CF:15:E5:D3:F5:62:71:26:D8:55:6C:DC:24:73:CC
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 0197B632DAA15F15B2E0A2AF30D9099043D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 11:01:15 +0000
Manifest this update: Sat 28 Jun 2025 11:01:15 +0000
Manifest next update: Sun 29 Jun 2025 11:01:15 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: AF5IaIU/q+P3GzBOp6PKdYvrkq6qsLPX1wzfa1CdZ2E=)
2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:da:a1:5f:15:b2:e0:a2:af:30:d9:09:90:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Jun 28 11:01:15 2025 GMT
Not After : Jun 29 11:01:15 2025 GMT
Subject: CN=4e5ec55e3dcf15e5d3f5627126d8556cdc2473cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:e9:6a:bf:65:3d:ae:90:59:f6:82:c5:0b:
80:db:1e:03:27:78:f5:5d:06:3b:4a:07:7e:47:8e:
c8:dd:a7:82:56:3b:83:12:1f:7a:62:f0:13:53:21:
fb:0c:cb:f0:08:28:ab:cc:5e:12:9d:b0:1e:8a:23:
bf:fa:99:2d:45:c8:eb:d1:60:ba:dc:75:76:dc:23:
97:5f:88:11:dc:ca:e5:ad:c4:0d:b5:4d:54:d7:e1:
42:83:78:5f:3f:fc:7f:c8:2c:7c:f8:a8:b6:62:74:
b7:2b:1e:12:20:55:04:97:11:23:7e:1a:a5:c5:cb:
2d:2b:a5:a4:d1:7c:a8:26:48:83:5e:de:ea:7c:ce:
c6:44:43:af:3d:fa:f5:00:e9:f5:31:dc:c6:54:7d:
30:4f:1c:30:ce:e1:5b:a7:48:04:d2:7e:29:c8:b4:
17:b1:9b:9f:25:97:18:ac:f0:f9:55:fe:b2:dc:1f:
a4:8e:29:5a:3a:da:3c:ec:1a:79:94:fe:55:63:63:
d4:c6:35:39:bc:a4:ea:49:92:83:b5:e0:92:1a:c0:
d2:f4:0f:49:b2:0e:ad:90:84:77:f4:0a:3d:ad:e7:
0d:14:72:5d:42:a7:e3:06:6e:37:88:66:dd:44:ab:
48:f1:fd:6c:fb:95:9b:2f:a0:53:57:ae:49:6f:15:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:C5:5E:3D:CF:15:E5:D3:F5:62:71:26:D8:55:6C:DC:24:73:CC
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:09:ea:a8:80:b1:63:1c:90:74:f9:74:99:ba:f9:51:be:fe:
eb:d8:d0:67:e0:17:ad:8c:2a:6e:46:0f:24:84:5d:3c:c2:60:
0a:94:14:6b:85:7b:49:22:1e:59:05:a3:e9:4b:35:a3:44:61:
67:21:46:28:c7:eb:c7:c4:9a:e3:d2:f8:27:44:28:8c:34:5b:
6b:d0:36:d8:69:c6:97:9c:ca:69:f5:fd:f4:be:cc:7b:a6:b4:
5d:a9:57:fb:3c:f9:be:c5:2e:e4:da:5f:f2:b1:5b:08:c8:80:
fb:54:29:ac:35:43:13:b1:bc:b0:19:3c:9b:c5:ce:d7:d5:b7:
45:2c:93:21:18:b3:19:9e:79:73:6a:81:9c:8f:c3:90:39:63:
8c:14:92:65:1f:79:5d:c1:ee:32:8f:37:4f:67:7f:44:8b:36:
ec:cc:ab:86:3f:0a:d2:01:6e:8f:82:81:a0:5e:6d:7d:55:0c:
47:36:23:32:44:02:1e:20:31:7e:6a:04:0e:c6:b1:82:7d:6d:
77:1e:76:08:4b:af:f6:29:2b:36:ec:c4:87:f0:56:11:51:92:
59:9e:a9:50:71:3b:68:b8:10:76:ec:2a:34:3e:05:3a:b2:1b:
81:6b:34:a6:d7:52:61:fb:34:9b:ae:2a:26:21:c3:ce:d6:33:
4b:ee:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:44 2025 by rpki-client