Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: g730SX9b5HEMGyolroUzPxWiQZ7xYLOnTonzPdxDjGg=
Subject key identifier: 7F:C6:91:D4:B6:5A:A0:35:6B:0C:1D:06:F1:B9:49:58:4C:A3:D7:E8
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0197B6A1F2DBB93A831D9E5A833D75A88A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: B9bryqbdnu3a31NyRs+T3qZq2y8cCQ3jYPZQqfLuCJY=)
2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f2:db:b9:3a:83:1d:9e:5a:83:3d:75:a8:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=7fc691d4b65aa0356b0c1d06f1b949584ca3d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:52:d2:95:b9:00:bd:2a:30:ca:23:5c:ff:
8c:b4:9c:b4:a3:5e:ab:42:3b:c1:21:47:11:ce:34:
4a:3b:86:3a:a7:06:29:31:6c:75:78:94:fc:c5:9b:
02:42:53:7c:25:d0:d5:44:b7:78:5b:7d:97:05:21:
d7:76:c4:a7:f0:45:99:e1:18:02:17:c8:93:4b:0f:
43:a8:21:9a:b3:22:b2:28:83:44:59:0d:af:4c:6f:
6d:eb:c9:c1:17:1b:af:9a:3c:ad:bd:4a:52:69:37:
1d:b7:07:e7:96:d0:ad:2f:86:fe:01:86:00:9e:35:
ed:ca:e7:e9:82:0e:dd:8e:58:e1:f7:36:b5:45:3c:
94:61:d7:d2:52:79:09:c0:d3:a2:3b:dd:b6:01:40:
da:e4:1f:7d:bf:09:b8:2d:b3:c4:83:a7:31:c1:7c:
d4:7c:f2:aa:f0:d8:65:fa:f4:e9:69:fc:e9:7f:d9:
0c:36:8d:dc:09:73:f4:01:9d:6b:08:d2:ce:d7:0e:
5d:80:e5:cf:95:6c:a2:91:a3:46:5a:3a:30:7e:c9:
ed:e7:fa:da:74:c9:dd:a6:b4:8e:fb:9d:35:6e:03:
60:a0:0a:a2:a2:5f:9b:27:30:0e:fe:bb:8d:4f:e6:
13:49:5a:e5:c3:41:55:5e:b8:61:53:19:f8:08:52:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:91:D4:B6:5A:A0:35:6B:0C:1D:06:F1:B9:49:58:4C:A3:D7:E8
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f1:c1:0d:3e:14:c1:90:db:fb:85:1f:35:ac:3b:0b:0e:f5:
86:35:fc:f0:16:50:4e:c4:c7:e9:5c:4a:16:ea:6e:62:d7:7b:
a0:fe:fe:4b:d3:4f:dc:2e:83:b2:48:a6:11:6a:46:9f:84:8a:
70:b4:93:1a:16:05:9c:58:83:30:6f:87:b8:bd:e2:92:00:f7:
4c:33:f9:e0:11:3a:19:7d:77:c7:e5:73:d7:70:68:c0:e9:70:
fb:70:31:e4:c0:4e:8e:67:27:20:f1:9a:36:a1:f4:23:e9:cb:
8d:7d:f7:c8:be:5b:00:5e:95:07:1e:45:4a:dd:a5:60:6e:30:
90:58:20:6a:52:e5:ea:98:d7:65:78:03:90:1d:7b:8b:13:e0:
7d:09:b1:ff:1e:c4:2c:b0:2c:cf:1e:2e:5e:c3:7f:08:50:cf:
1f:c3:56:77:73:49:09:43:f0:15:ea:e3:e5:d7:d0:c8:c2:f8:
32:9c:31:c3:33:07:b7:5f:38:41:d8:60:de:26:d4:73:42:38:
cd:e7:10:cd:c5:d6:4a:14:28:41:80:95:0f:33:6e:b6:ed:c5:
45:3b:61:6d:08:d0:38:7f:7b:50:ec:85:6d:dc:5e:db:c4:86:
34:32:6d:c9:5b:c2:59:dd:8c:e2:65:02:4b:bf:46:57:48:8f:
c9:71:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:43 2025 by rpki-client