Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: OFxD9gG/WF62FnnhEWt4x22+DtmkCWDsVDd5MnUdZoY=
Subject key identifier: 08:73:F1:9B:F7:43:45:FF:4A:A4:68:CA:7B:64:EC:BD:A8:93:7C:BF
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 0197B70E8FECE29E16F4CD7CB5DD6E3948BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1539
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: fgrpF6c2q+vP8C+73/Bp3tg5UhWgDNnZ1seogbpxF4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8f:ec:e2:9e:16:f4:cd:7c:b5:dd:6e:39:48:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=0873f19bf74345ff4aa468ca7b64ecbda8937cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:48:65:63:77:e2:cd:dc:b8:fe:2b:70:ef:
36:0d:d0:9d:db:66:57:72:cb:f2:ce:39:15:d5:14:
72:aa:d1:b8:4d:36:9d:81:5e:09:04:76:e8:46:7a:
1b:37:89:40:d7:1b:d5:a2:a3:a2:b2:23:fb:ef:6c:
9d:03:bb:7d:a5:e7:e1:58:9f:58:4c:60:f4:dd:ff:
e4:2e:f2:4c:8a:c2:82:fd:eb:49:01:5c:ed:f0:60:
a8:2e:89:89:53:0a:8c:c5:bb:67:04:21:df:f9:f3:
c7:2c:f9:81:c0:b5:53:1a:64:0c:7a:3c:bd:82:15:
93:81:b9:84:3c:0a:cb:b3:54:b7:29:85:c4:d5:c5:
7e:45:5d:3b:00:33:8d:ec:e9:9f:7c:44:f9:38:4b:
54:14:be:93:22:88:4a:41:79:7d:0e:64:bc:b3:ea:
b1:32:72:b5:b8:41:6c:f4:5c:d1:4d:09:40:4c:ed:
8c:d1:18:9f:b6:1a:5f:cb:b3:af:cf:60:46:ad:10:
98:6f:cb:ee:62:1c:e9:b1:bd:5b:a7:f8:81:0f:24:
a6:64:b0:d4:49:ae:d0:8b:ac:d3:a6:3b:93:2f:0f:
d6:a2:a5:b1:5a:cb:b0:39:7d:58:df:78:94:24:c8:
1a:87:01:ba:11:da:55:21:5b:05:c7:5c:fb:e2:8c:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:F1:9B:F7:43:45:FF:4A:A4:68:CA:7B:64:EC:BD:A8:93:7C:BF
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:74:e3:b4:24:2c:41:de:d0:00:d1:46:82:cf:c6:29:99:
23:af:1f:a6:30:eb:3b:92:12:07:92:2c:c4:14:fa:6c:de:c6:
96:18:2c:9e:f2:2e:96:d8:cf:64:d4:99:c6:ae:d3:c3:a4:f8:
04:98:e1:76:9b:14:a8:85:40:7e:d3:02:48:d7:4f:1b:7c:a6:
bb:2f:00:95:c6:a3:e5:34:05:04:06:87:43:ae:31:87:0a:5f:
98:96:48:60:f3:31:0f:6e:ad:35:a3:6a:4b:a9:1f:d5:b9:8b:
1a:7a:84:43:18:ac:cc:f3:b0:3d:4b:c1:27:92:7a:54:b3:df:
bb:f4:b9:38:4c:d4:b1:85:73:a3:ad:54:de:46:8a:9b:71:24:
0d:ad:99:27:30:a5:96:48:93:24:11:60:21:f2:1a:fd:92:1b:
df:23:87:27:18:6e:69:93:b7:aa:3a:a8:13:85:92:a4:17:e7:
0f:0b:d4:15:89:61:b6:eb:48:9f:17:b3:8a:ea:a9:3f:ed:b5:
a4:ee:58:2f:4d:84:3e:f2:6f:95:23:b6:eb:c4:c6:6f:83:c6:
cb:c8:d7:46:d1:e7:f7:f7:20:8a:aa:d5:8a:30:87:57:3d:9c:
f1:47:40:06:27:f9:1f:e9:02:5a:68:1a:78:a4:ea:fc:4b:db:
91:ed:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:52 2025 by rpki-client