Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: YyoSfwl2HGEkQohLvJpARYJdb8jAkFVx3GoR+J0ASBE=
Subject key identifier: 47:10:C2:C5:CE:3C:F8:90:49:59:42:AA:7E:0A:63:8E:2F:47:D3:AF
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 0197B8215C93C765C4F2AF3CA7F50814320D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 104B
Signing time: Sat 28 Jun 2025 20:01:23 +0000
Manifest this update: Sat 28 Jun 2025 20:01:23 +0000
Manifest next update: Sun 29 Jun 2025 20:01:23 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: +wo8cmcWQjM7o5TB0YP4K987Hqfr2oQxtRSJSL7DOeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5c:93:c7:65:c4:f2:af:3c:a7:f5:08:14:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Jun 28 20:01:23 2025 GMT
Not After : Jun 29 20:01:23 2025 GMT
Subject: CN=4710c2c5ce3cf890495942aa7e0a638e2f47d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:1a:8e:90:5a:be:46:96:60:c2:2b:c5:dc:
7f:4d:b9:58:1e:d2:08:92:ab:b8:16:c7:8f:07:5f:
12:ab:7c:c3:5b:2a:86:e0:b9:5a:44:9f:4c:c6:75:
69:94:64:b7:0e:8d:b9:fd:87:bb:e3:e8:11:60:01:
d3:b1:b6:f7:4c:27:b6:79:a1:b9:6e:ea:0f:ab:9e:
44:37:ac:96:9d:58:7e:47:6d:88:35:49:cc:5a:c5:
5c:ed:d5:b4:aa:8e:02:17:3b:bd:8d:49:51:f0:4c:
86:b5:93:00:e7:44:ea:08:f2:be:83:0f:13:12:ef:
91:92:4c:a1:e3:d8:36:74:f2:7b:5c:4f:7f:f7:b1:
47:cd:b8:a2:38:77:0a:3a:11:a4:1c:7a:8d:51:1a:
f7:1f:63:d1:bc:2b:28:1e:71:d6:37:44:44:97:7d:
cd:3a:99:2c:d6:1d:90:7b:13:1c:50:d4:9b:eb:7a:
96:49:f1:1a:15:13:51:b9:61:04:6c:ee:09:7e:8a:
0e:cf:3e:fe:41:65:c1:50:c8:69:f8:c4:76:50:78:
ea:2c:40:95:45:49:8e:25:01:6c:89:18:06:9c:c5:
a4:cb:e0:81:7c:13:c0:82:1c:30:2d:82:d5:d2:3c:
da:55:d1:30:f2:e9:e9:ac:6d:ca:54:fd:ba:58:80:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:C2:C5:CE:3C:F8:90:49:59:42:AA:7E:0A:63:8E:2F:47:D3:AF
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:51:89:4f:85:1b:fb:a0:2f:60:bb:f7:11:ef:b1:5d:51:
66:ba:e4:bf:ca:f2:79:90:5d:d7:76:cc:02:cb:5c:a6:22:b9:
f4:18:31:4d:ed:ca:57:38:83:0a:97:ad:9a:cf:79:bf:9b:7b:
ef:48:4a:bb:96:35:7c:d7:b6:68:b0:fd:af:af:fc:cb:4b:3f:
ca:3b:dd:9b:ca:29:2d:d4:d4:d6:09:0b:ba:b8:9b:74:f5:ae:
0c:8c:e2:42:7d:16:9d:ae:b7:82:ce:90:f5:c7:d1:39:be:9c:
52:67:0c:9f:01:5b:50:69:fd:02:0e:05:77:bb:b8:17:8b:f6:
35:52:2b:bb:8d:34:83:58:4d:7d:b8:18:3d:b2:1d:54:bf:b5:
8a:ab:1b:da:8f:16:41:43:1b:ed:c5:b5:76:bd:cf:62:22:96:
f7:3b:6d:1c:ba:be:13:08:f9:1b:8a:e8:ec:8f:ff:02:70:24:
f8:59:48:f1:73:2f:c1:00:4a:f2:02:9f:2c:19:a9:32:7c:0e:
61:6c:b5:9c:dd:1c:33:03:55:21:e0:6f:4a:0b:b2:a5:53:b5:
f5:e1:4b:12:6d:5a:cf:77:f4:e4:62:c2:95:a4:80:77:79:af:
62:95:3d:1a:e5:ef:0b:28:0b:5c:53:70:29:64:6b:5c:d7:a4:
b7:43:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:36 2025 by rpki-client