Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: RGuEvoAeESLB4/A4XRN2wiVoWAbvB/EqoOUsGkYOjQU=
Subject key identifier: 00:A8:15:15:3C:87:98:05:5E:71:AE:36:1B:4A:3F:EF:32:BF:A3:64
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 0197B5FBC821E1A4298B85778F0F8A6164F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 10:01:06 +0000
Manifest this update: Sat 28 Jun 2025 10:01:06 +0000
Manifest next update: Sun 29 Jun 2025 10:01:06 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: pbGnitNJbCcV3OWIfrExPW6Pc7H5bdcop9UjT1toxKQ=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:c8:21:e1:a4:29:8b:85:77:8f:0f:8a:61:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Jun 28 10:01:06 2025 GMT
Not After : Jun 29 10:01:06 2025 GMT
Subject: CN=00a815153c8798055e71ae361b4a3fef32bfa364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:e5:ad:26:6f:1a:d6:d2:2d:90:2f:01:35:
c4:a1:75:7d:eb:0a:23:8c:48:45:20:ba:78:10:e3:
10:1c:c2:c2:07:d5:3e:0e:b1:29:de:13:90:a6:99:
4c:31:c1:ea:c5:b6:60:fb:18:40:c4:78:9c:15:41:
dd:43:6e:ac:ff:eb:88:15:b7:25:0c:0a:18:a4:87:
ce:91:15:54:87:5f:7f:cc:55:fe:00:8d:7b:35:05:
75:a9:e7:00:fe:4f:c2:d3:11:0f:23:fc:3e:70:fa:
90:92:a1:22:b5:a7:60:41:2a:b5:60:dc:e9:87:8a:
26:53:6c:3a:99:75:90:aa:1a:37:b9:b3:5a:d5:13:
0c:6b:52:09:60:08:9a:3f:5c:69:61:a8:a9:cb:48:
cd:5b:7f:25:d2:3a:aa:e4:19:54:68:47:32:b5:2f:
7b:1c:b8:a3:37:89:9c:bf:c7:12:ef:88:bf:41:4e:
73:a0:ba:74:69:93:34:48:81:fc:75:73:8d:79:a4:
e1:8b:b7:fe:af:94:ca:49:15:df:08:30:50:60:0e:
2d:e8:ae:d4:26:e2:1b:bd:93:a2:dd:8f:d8:b1:04:
26:13:b2:ce:ce:b5:83:27:c4:04:6d:93:66:75:d6:
a7:a0:fe:6f:91:d4:24:94:43:48:74:c6:c6:86:0f:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:15:15:3C:87:98:05:5E:71:AE:36:1B:4A:3F:EF:32:BF:A3:64
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:c6:bd:b5:b2:01:ca:10:7e:e7:64:5f:51:3b:bc:54:db:
71:18:f6:3a:1d:7c:c1:70:b8:57:a5:9b:ad:c9:fe:7b:9f:73:
98:98:f3:1d:3c:0f:1c:c3:c0:7f:e5:01:2e:38:2b:41:73:58:
b3:46:a1:20:ab:ce:09:a6:ae:c2:51:db:90:fb:c2:bb:ff:95:
95:e6:d5:4c:9c:b0:e1:5d:f3:4e:60:c3:5e:6d:6d:10:b9:d0:
97:ee:16:2a:7d:a5:95:a5:68:8f:ba:72:05:21:49:d9:a1:58:
c3:ab:16:2b:57:34:66:bf:1c:1d:51:36:30:5e:1c:93:dd:39:
f0:35:58:64:8e:17:3d:9e:e1:aa:99:8d:d8:26:02:b0:2c:d4:
38:3c:fe:fc:08:ce:df:02:57:8c:99:a6:5c:4d:79:f3:2b:b9:
a1:5f:4b:35:38:e0:b6:a1:e2:6b:58:da:d6:0a:17:87:aa:d0:
a6:cb:44:0d:d7:39:47:ab:1b:a9:8b:69:93:33:a2:60:a4:78:
d7:5d:38:ab:d4:d4:ff:4b:7e:45:0f:be:d3:b2:c3:16:bc:20:
95:63:31:74:a8:a8:e1:0f:f2:7e:1e:de:b7:48:4a:fd:a1:88:
c7:a0:8a:6d:c6:59:c4:89:03:c3:27:6b:c0:50:8f:65:74:fb:
c5:ea:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:46 2025 by rpki-client