Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: WlQsa6ypc92yz4tUSD32MFsUtCvzMimjsr2/XIadNzY=
Subject key identifier: BF:EA:6A:51:70:87:2F:23:08:78:36:25:48:0B:24:5D:62:41:49:09
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 0197C64AAE02ADE4AFE6EC35B395DA54EF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 14:01:12 +0000
Manifest this update: Tue 01 Jul 2025 14:01:12 +0000
Manifest next update: Wed 02 Jul 2025 14:01:12 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: 0+nQLChkqirkFZJZTSWyT1F2yj50rb+AyFRWjKbygds=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:ae:02:ad:e4:af:e6:ec:35:b3:95:da:54:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jul 1 14:01:12 2025 GMT
Not After : Jul 2 14:01:12 2025 GMT
Subject: CN=bfea6a5170872f2308783625480b245d62414909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:d8:80:f3:09:2b:1c:8d:6e:78:38:62:93:
c9:09:b5:fb:f8:1d:3b:b5:56:f3:e8:7f:2b:a9:aa:
58:1d:fc:db:8d:ba:e4:b2:5e:39:05:36:21:2c:ad:
7a:3f:6d:d6:99:72:27:3b:a6:29:4e:3e:86:ec:41:
03:b7:a3:a6:e9:65:96:13:f2:37:16:43:ca:3f:9e:
0d:30:0b:57:fe:11:5b:0a:d6:32:4e:e1:1f:18:f8:
bb:0e:f2:6f:ee:2e:e7:13:0b:9d:02:b8:74:12:93:
43:dc:84:33:e9:c3:33:cd:70:38:24:8e:00:c7:a8:
20:1a:1c:00:7c:1c:da:78:8b:b6:8d:26:5f:78:5a:
37:fd:a8:0c:17:90:45:e6:67:19:9b:ae:a5:c9:32:
6d:9e:38:7c:41:b2:aa:a0:8a:bc:2a:2e:d8:23:3e:
6e:a2:70:73:29:0d:fb:3d:d9:10:8c:35:3e:a0:28:
76:71:65:6c:b3:bd:44:3e:be:1d:b8:7e:7a:4d:51:
55:b0:69:3c:fc:82:68:77:e2:a9:76:84:8f:a8:34:
d4:3f:21:75:ae:67:8f:c9:a3:bf:db:99:ee:95:4c:
29:4e:53:04:32:59:d0:6e:0a:ab:12:17:e5:d7:85:
f3:37:ee:41:38:f6:8b:29:3f:22:6a:e5:6f:22:18:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:6A:51:70:87:2F:23:08:78:36:25:48:0B:24:5D:62:41:49:09
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:34:d0:98:15:ed:38:32:de:db:17:5d:91:cd:1b:bc:4a:0b:
98:17:bc:95:8a:09:b3:69:2d:4f:39:4b:9b:39:90:34:97:99:
7e:16:b1:e4:2d:3d:99:3e:c5:df:d5:c4:4d:89:c2:8a:cc:51:
c4:84:59:31:3c:21:50:df:34:18:5f:21:7a:5c:69:1d:c4:d1:
d0:8f:5a:bf:79:23:c7:f2:18:d3:d5:a1:af:d5:e1:4b:cc:6b:
51:9f:29:ed:72:c7:1c:f0:64:21:c7:4a:c7:39:0f:10:d3:66:
0b:51:0f:e8:48:ff:c3:f2:55:3d:43:62:b7:c3:aa:a3:f6:5b:
d0:b0:fd:29:5f:67:1d:e6:bd:68:04:5f:79:e6:4d:ce:b4:07:
3c:71:5b:db:de:41:13:60:bf:dc:17:40:69:bb:d2:f6:7d:84:
17:0a:9e:c5:42:ea:ec:94:b4:ae:f2:4c:12:56:3e:28:4e:bb:
7e:35:da:b1:46:37:f0:a8:25:02:8e:c2:cd:8a:4c:aa:c6:db:
3d:c9:6e:08:03:d7:6e:3c:fb:3b:3f:07:41:f4:65:79:72:0e:
63:3c:99:9b:e2:71:d4:a9:e1:16:65:d5:8e:ac:21:e0:72:78:
39:58:08:30:1f:c8:af:38:0c:f4:b4:e5:63:03:e1:12:e5:13:
d1:10:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:48 2025 by rpki-client