Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: s9vUl0IpLJxmEiDLQY/g4Cu2sTxoJTB5ykJPOeTlSO4=
Subject key identifier: C0:5B:6C:4D:41:B5:EF:C4:33:6A:FA:41:01:3B:06:24:C9:91:C4:92
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 0197B632DEA5B5DE79FC2D25FDCB3C6F72B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 1018
Signing time: Sat 28 Jun 2025 11:01:16 +0000
Manifest this update: Sat 28 Jun 2025 11:01:16 +0000
Manifest next update: Sun 29 Jun 2025 11:01:16 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: 3drN/HgXltr8ne6IZMt5s1XhJbrfM9pqoCkiDlaSaW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:de:a5:b5:de:79:fc:2d:25:fd:cb:3c:6f:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jun 28 11:01:16 2025 GMT
Not After : Jun 29 11:01:16 2025 GMT
Subject: CN=c05b6c4d41b5efc4336afa41013b0624c991c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:f0:44:ca:27:a8:f3:2d:c3:f2:fd:48:8c:
d3:6a:4c:04:05:e6:bf:17:2e:39:b7:a6:e5:1a:69:
17:3f:42:ec:8f:ce:05:2d:32:0d:a5:73:85:35:b4:
5a:eb:f2:8a:a1:cd:2f:0d:2a:8f:ab:ee:a9:09:6a:
32:14:63:5c:4b:c9:df:52:33:a0:f5:6b:21:e3:a1:
05:55:78:f7:c4:21:61:c9:34:49:2c:be:90:8a:b7:
f9:8e:19:33:5a:f0:6b:8d:11:b6:b1:3d:d9:11:a4:
3c:46:da:29:10:5d:db:68:5f:15:ef:5a:d2:27:eb:
55:27:19:f9:bb:ff:87:53:77:52:01:fa:a7:49:98:
2b:ec:cd:76:1c:f7:ac:36:f4:5c:27:6d:2d:7b:34:
8e:d5:e8:ae:6a:37:76:1e:13:41:f5:f7:ea:53:19:
a6:42:4a:65:3f:a4:aa:1e:92:1b:54:d9:55:f7:61:
7c:7a:14:c2:ef:df:03:5b:82:f0:79:4e:9f:98:07:
14:bf:0a:61:ec:4a:a6:1d:ca:2f:82:c3:1a:36:e2:
db:81:d2:20:80:84:f2:c4:4f:45:a7:28:f4:f9:9f:
0b:ca:3d:d7:55:bd:6f:0d:d1:dc:79:90:42:51:d9:
56:72:74:77:be:cc:82:e2:a3:30:e6:0f:3c:0e:ab:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:6C:4D:41:B5:EF:C4:33:6A:FA:41:01:3B:06:24:C9:91:C4:92
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9e:65:b5:82:52:35:cf:37:02:fd:a4:d4:de:92:a5:af:4f:
b4:c8:cc:be:e7:ac:85:d0:b0:97:55:0a:23:45:f2:75:db:84:
6d:a6:f4:ad:1a:b4:67:73:cc:20:c1:35:e7:b4:fd:56:2c:c1:
b0:cd:25:36:38:2d:1c:1b:db:cf:12:6f:c2:7b:06:be:4c:37:
d0:34:3d:cc:17:ed:a4:4e:62:a8:26:81:06:0f:3e:a0:e4:d0:
fd:44:b1:9b:4f:52:ca:99:83:e7:57:2d:62:42:ce:a3:2b:6e:
31:8a:76:eb:4d:d8:50:e5:cd:b9:5b:d7:55:70:bb:56:4b:b1:
09:48:70:33:84:20:9e:27:60:e0:29:b7:ef:d1:d3:85:45:83:
fe:b7:ab:13:4e:60:a6:b4:2e:b2:89:61:5a:2a:78:0e:6f:d4:
be:8c:ec:53:7d:ab:f4:96:30:29:6d:2e:62:26:9d:91:e4:22:
70:97:28:9c:9f:32:b1:b1:96:ab:02:11:76:7c:0e:dd:ca:31:
ed:34:c3:72:3a:e0:a6:fd:8e:6d:01:b5:63:ac:27:67:1e:05:
69:61:e9:4a:a4:2e:73:6a:02:d1:3c:81:53:8c:f1:71:68:12:
0d:08:c9:55:86:4e:29:13:73:8a:50:35:f4:d0:0c:c5:73:82:
68:0e:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:41 2025 by rpki-client