Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: OL5JQOnsuBJFcZO7qRn3vCarsGUI8+LGzKKSWvdKX5c=
Subject key identifier: 99:E2:AC:0E:1C:04:4E:63:C5:39:41:14:60:EE:52:5F:E7:FB:CE:09
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0197CE041F8555A34E8C6F3071D96D83FAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 02:01:06 +0000
Manifest this update: Thu 03 Jul 2025 02:01:06 +0000
Manifest next update: Fri 04 Jul 2025 02:01:06 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: h0J1xwcdp1BA+RW02WeKsU0JskZ4qGsmf1WXSxikWfc=)
5: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
6: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:04:1f:85:55:a3:4e:8c:6f:30:71:d9:6d:83:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jul 3 02:01:06 2025 GMT
Not After : Jul 4 02:01:06 2025 GMT
Subject: CN=99e2ac0e1c044e63c539411460ee525fe7fbce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:c2:5b:e8:5c:19:ab:30:ee:84:69:c6:bf:
9f:ef:43:74:4d:d7:98:6f:43:12:0d:c4:55:9b:cc:
0e:76:82:9b:45:48:54:2f:92:86:a0:78:f7:d2:5c:
e9:55:c8:95:3c:f0:fc:26:70:bf:99:3b:01:7b:34:
d3:4a:08:7d:e4:be:ee:7d:7b:e8:31:bb:61:1f:62:
fd:75:66:70:9a:c1:4a:b2:94:a6:7c:98:35:ed:4c:
eb:80:a5:0e:d9:68:7a:f7:eb:85:4f:50:8f:85:7b:
8f:39:9c:f2:64:71:b4:ec:72:57:21:81:f8:b3:f5:
ef:c4:a3:63:b4:b1:31:0c:97:8e:23:98:dc:ee:7a:
d6:1c:92:d2:e6:56:38:d7:fa:0e:f1:9f:80:1d:4c:
75:26:c3:6d:f1:2f:52:4f:7e:33:dc:5e:ae:99:00:
4e:f3:bb:6d:7f:0a:b7:20:69:66:47:fa:27:96:18:
5c:79:21:10:0b:78:97:fb:51:56:55:ae:0e:8c:5d:
5e:be:4f:ba:45:7b:89:25:95:27:1f:a8:41:cd:d6:
6b:b8:e5:4d:36:17:00:a6:00:44:f6:3c:12:18:ef:
7c:64:50:c1:fd:ea:ca:9e:e2:09:0a:23:40:bd:2d:
31:5e:35:26:fe:d6:f6:c4:07:3d:9d:64:75:1c:74:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E2:AC:0E:1C:04:4E:63:C5:39:41:14:60:EE:52:5F:E7:FB:CE:09
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:42:c9:15:94:fa:fb:cb:f0:33:7f:4e:43:18:13:b3:13:
e0:02:38:e7:05:83:4e:73:0d:33:1e:e3:63:bb:95:b0:57:5d:
a1:fc:37:82:1b:19:7c:23:31:f0:3c:b7:f9:2c:6d:9e:3b:71:
1d:0c:7d:ac:03:f3:9c:ae:8a:aa:8e:94:13:ab:e7:93:95:79:
19:14:b4:6b:62:b5:47:a5:6a:68:00:14:ec:68:90:e6:11:27:
ba:e5:38:48:00:36:40:c3:a2:81:9a:eb:84:15:ce:69:89:4e:
dd:3d:94:17:c2:80:f7:f9:c8:97:2e:8c:ce:39:52:74:0a:0b:
46:0f:fe:a3:6a:c4:2c:7d:22:3a:4a:2a:52:27:48:16:b5:1c:
62:64:03:34:ed:08:0a:ba:a2:f8:f0:f8:c8:1d:e8:f4:52:f3:
ee:17:78:52:63:ed:a0:ff:16:2e:8b:ba:2a:46:7c:b9:b3:71:
cc:aa:b4:6b:ce:54:05:78:42:87:ed:56:60:65:08:82:d7:7d:
16:f7:62:01:d8:ea:a0:f8:9d:e6:d0:8f:c6:08:99:43:70:83:
22:a0:bf:e8:39:de:e1:43:64:1e:7b:a0:99:b1:8b:cf:78:dd:
ee:79:85:f4:63:e2:d7:34:94:f4:b8:f9:d3:8e:66:84:b3:00:
11:7a:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:33:32 2025 by rpki-client