Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: F6ncu/VXoOlyWRP9HZyMsilc8FTbILLKX6nGUYUzRvY=
Subject key identifier: 08:A5:F1:02:17:E4:27:14:E9:10:E5:95:88:06:44:78:69:D2:BB:AC
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 0197B6D74FAE4EDE31023A2E8006A258987B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 1195
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: 4idvPRBgRx/TbCVWxZfXuzhuCRHPvWLvJk0IWPBZINo=)
2: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (hash: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:ae:4e:de:31:02:3a:2e:80:06:a2:58:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=08a5f10217e42714e910e5958806447869d2bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:cd:8b:af:20:52:c9:d2:c3:4c:54:01:74:
d6:3c:3e:64:2f:78:ad:6e:ad:36:9d:6e:62:1b:4e:
3c:cc:1b:c0:6d:79:e6:25:47:25:a9:ed:ed:9c:2e:
67:1f:7a:33:18:7f:e0:7e:4f:ac:72:97:20:f1:bb:
59:d8:ac:4d:8f:4a:eb:26:0b:6e:9e:3f:e2:89:02:
48:ce:bb:55:e2:fa:27:ab:1a:82:1d:db:06:a4:9b:
be:5b:f9:be:5d:43:43:ca:e6:69:60:63:4a:24:42:
a3:31:c4:5f:29:14:64:82:53:02:d0:ff:b1:42:b8:
15:3f:e1:6e:b8:d1:58:5d:59:8c:32:bd:7a:55:65:
92:32:30:4a:98:62:27:69:dc:63:5e:eb:53:09:d6:
35:3a:df:ab:bd:d7:f8:03:be:61:bf:9e:16:68:13:
eb:0f:ca:2e:9c:7b:eb:3b:7f:5a:38:14:87:f6:06:
60:c7:16:66:e4:03:e5:d4:44:52:96:a9:e5:55:11:
3d:d3:14:70:cf:cf:4a:a8:e5:92:b4:8c:54:17:c5:
27:c6:71:7e:03:d5:59:c8:df:e9:9a:d4:05:df:4d:
6a:2b:10:bb:f7:73:14:e6:d2:c5:f5:df:92:f2:33:
cc:a7:89:13:fc:f1:af:10:00:0b:d3:95:66:8b:07:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:F1:02:17:E4:27:14:E9:10:E5:95:88:06:44:78:69:D2:BB:AC
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8b:b8:dd:2d:33:44:48:19:05:61:da:b0:bd:30:79:48:43:
12:a8:91:77:27:ae:79:77:f1:5c:d2:85:b0:42:db:04:f9:07:
d6:14:ce:73:2f:0d:bd:f4:78:98:d0:c3:5a:27:60:bf:94:91:
bc:31:c2:2b:fb:a8:dd:04:b8:52:7c:cb:43:7c:69:87:42:57:
6f:e5:da:da:e5:4e:ae:c1:73:70:f7:f7:f0:22:e3:7e:bb:e6:
24:77:48:50:6e:9f:76:8d:6d:1e:aa:07:c1:b0:14:d6:8e:68:
c8:12:38:97:20:0a:f8:10:f7:b4:1a:2e:ed:95:59:31:f9:a8:
49:38:fc:02:20:86:47:39:76:e8:89:11:4d:1b:4e:e0:fb:b5:
39:0f:19:d3:bf:8a:7b:df:91:5e:18:51:20:a4:d9:08:5a:22:
da:aa:14:f8:c7:72:e9:ea:6a:07:e1:b4:6a:5e:fc:f3:4a:59:
65:b6:6d:c5:f3:1e:55:b4:dc:63:c3:25:95:c9:cc:ae:15:3c:
ef:23:eb:25:56:5b:59:ca:b1:b7:52:0a:58:81:ee:79:4d:d1:
98:99:3d:75:dc:5c:de:af:ba:fd:7c:2c:c6:82:09:2e:60:cb:
12:1f:63:0e:99:a6:22:8a:22:45:41:df:50:4d:99:21:b6:94:
77:c2:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:31 2025 by rpki-client