Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: uE7ZbfiJNjLZ6zDsee2kcATE7Or6ParmIYMZfJXoyvg=
Subject key identifier: 8A:55:A8:55:DD:06:44:6D:24:DB:71:1E:36:08:4F:74:E5:80:65:9E
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 0197B820D53B776B997D385B0030C4C6D315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: azL5eZCRbdnC7reojK6xXtZzzehhqaakFVCELT/kj24=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d5:3b:77:6b:99:7d:38:5b:00:30:c4:c6:d3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=8a55a855dd06446d24db711e36084f74e580659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:4b:b8:9d:d0:b9:7c:39:4e:d0:a2:b3:b6:
d1:a7:6e:d6:c6:45:bd:ee:75:b0:5f:5b:50:44:23:
e4:fe:b3:a1:8f:e3:70:00:12:76:fc:d2:b9:22:ce:
33:42:4f:4d:fc:2d:b7:00:8b:26:71:56:29:81:a0:
30:2c:2f:c1:76:ca:3c:77:f0:e8:5a:fc:f4:5c:22:
34:bf:f3:75:21:12:92:92:fc:96:b4:3d:4b:73:5c:
47:0a:2d:1e:fb:f0:5b:6f:81:cc:6a:1a:1c:e7:7e:
7e:be:49:7d:98:12:d2:51:95:55:00:78:37:b2:a0:
d9:49:95:eb:d5:c1:41:a0:61:4e:b9:35:e7:0b:66:
fb:4d:5d:aa:a7:d2:74:87:cb:a3:02:9f:1d:da:b9:
44:86:a3:d9:a2:2b:4d:69:5a:57:e9:1d:a7:af:16:
73:73:35:75:d9:51:1f:df:0d:99:6f:81:9b:a8:72:
52:c6:a8:c1:4a:9c:8e:23:16:d0:ab:fd:6f:a3:97:
4f:c4:40:28:44:28:19:f9:10:ca:f1:17:35:c0:51:
83:bb:ca:90:a7:bd:10:de:e5:9f:aa:12:dc:aa:11:
5e:ca:dc:96:fc:50:c9:0a:88:9a:32:2e:df:79:59:
6b:88:4b:d3:35:e5:f8:37:f8:e2:4f:f0:7c:2a:f5:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:A8:55:DD:06:44:6D:24:DB:71:1E:36:08:4F:74:E5:80:65:9E
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b1:c1:c9:d7:70:78:74:9c:2d:0d:a4:9b:9c:e5:db:27:00:
2b:a0:24:d6:10:62:2f:0f:ac:ec:4c:57:07:38:85:2f:3a:bb:
75:4c:59:21:2b:8e:5f:34:7f:f0:f9:e8:06:cb:7e:ce:ee:09:
cb:b2:00:4e:36:fc:2c:ff:16:c0:26:0a:9c:7f:ab:20:3d:fe:
4f:d2:33:06:89:92:a2:d0:6b:14:86:15:f8:14:27:57:57:b9:
d8:5a:5d:b6:3c:e0:96:fb:1e:f4:fe:24:1d:32:84:21:f8:13:
6e:28:5c:d1:2d:2d:44:72:2b:39:5c:93:51:8e:35:5e:92:1e:
02:7d:0a:ea:b3:55:93:95:47:dd:23:e9:aa:8b:83:ed:ea:39:
73:b0:a9:f4:91:14:8b:48:c4:cf:ab:84:d2:6a:b6:14:7a:ef:
24:a2:90:c9:a5:63:c2:fb:0e:22:dd:8c:2c:51:1b:ff:d1:f6:
fe:56:14:db:1a:b6:57:34:07:1e:a5:42:fd:b3:83:d9:46:b7:
56:cb:06:b9:06:12:c1:e7:7f:e5:5b:29:e3:11:57:51:df:ae:
ad:60:92:07:0b:bc:70:89:aa:aa:cd:9e:7d:94:db:50:aa:c6:
f5:6a:13:40:b2:21:8c:ca:24:ae:02:35:0b:16:8e:e2:c4:54:
53:e1:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:06 2025 by rpki-client