
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: ZWrRVrVFd+tU/9uF8M50AA4hadNoBwBxRGydarhEsP4=
Subject key identifier: C4:6B:03:11:F8:1E:41:0C:A9:B5:F9:8A:EF:7D:E9:4B:4D:3B:3A:2C
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 0197BA0F41F7D2DC7A9C13D3293A94BF0A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 05:00:51 +0000
Manifest this update: Sun 29 Jun 2025 05:00:51 +0000
Manifest next update: Mon 30 Jun 2025 05:00:51 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: ThM57Bnn1SzjCoo+NaOqDnc6RSzjPAJ1Lt5HGGO/nKk=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:41:f7:d2:dc:7a:9c:13:d3:29:3a:94:bf:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jun 29 05:00:51 2025 GMT
Not After : Jun 30 05:00:51 2025 GMT
Subject: CN=c46b0311f81e410ca9b5f98aef7de94b4d3b3a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:ea:86:14:81:5c:71:f5:eb:7c:83:7c:bc:
f9:7d:7e:85:bf:15:fb:62:ec:fa:80:27:7f:7e:2d:
bf:15:71:66:e5:20:ca:d4:b6:df:f6:68:a5:54:dd:
b0:c9:25:d8:f8:12:46:15:8a:95:04:11:fe:4c:11:
34:64:ee:c1:9a:eb:8a:49:a5:2e:ac:67:16:27:75:
89:20:5e:14:e0:aa:5e:3b:35:39:82:b5:01:96:91:
87:69:48:98:1d:ba:4f:54:ad:0c:45:56:ef:62:f8:
0b:78:1d:1f:aa:af:06:23:80:7e:3d:94:8b:4e:e3:
9a:42:76:a7:56:f2:8f:be:d5:71:f7:32:1c:c5:ec:
2b:44:98:77:8a:8d:0a:a2:9b:a8:a9:e3:d5:ed:49:
76:2c:2b:7b:2d:c1:dd:95:42:6d:08:0a:e1:68:1c:
c3:a6:71:45:33:f1:4d:d3:23:d1:0f:e8:1d:11:00:
68:6b:de:c1:4f:0e:bb:b1:41:31:e2:19:59:75:5e:
95:33:18:12:07:81:7c:fd:22:43:be:05:eb:81:65:
bd:5e:d5:88:f6:80:52:91:c5:83:e5:86:b7:93:1d:
5a:2c:74:ff:a4:b3:9e:7e:d9:00:18:a6:c8:0c:10:
9c:23:11:9b:6e:bf:46:40:cd:07:6d:0a:e4:f6:5f:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:03:11:F8:1E:41:0C:A9:B5:F9:8A:EF:7D:E9:4B:4D:3B:3A:2C
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e5:1f:1f:e0:b9:1e:cc:1e:72:83:9d:8c:d9:29:78:c7:42:
17:e8:74:6d:a1:89:f2:9b:9e:1d:15:06:f1:f6:b1:a0:01:92:
4b:68:e5:80:9b:38:eb:1d:9a:26:86:5a:9a:da:29:c5:85:b1:
23:a0:81:ba:27:72:0a:32:e6:dc:2b:3a:88:a0:9a:d1:db:45:
3b:ae:c6:bf:9e:75:fb:fd:ac:11:20:ef:4f:01:98:5a:a1:01:
23:35:2a:ce:62:e1:7e:10:34:ff:af:e4:a3:d6:50:b5:f5:52:
10:7c:0c:be:39:ca:28:81:43:d6:68:84:77:fb:f0:82:cb:a0:
2a:a4:5f:75:7b:e1:b2:e8:6a:53:c7:c8:24:64:1e:ef:63:82:
c1:4c:7b:a2:85:9e:60:90:b6:05:cc:02:0f:2a:42:99:76:62:
fd:5b:07:74:7e:ef:26:a3:bf:d6:ab:35:cd:0d:86:f3:31:ce:
d9:d6:be:ec:a7:f3:74:b3:00:11:0b:b4:83:ba:87:8b:23:b9:
7f:d1:3e:b7:39:f4:24:d1:e6:f5:97:e2:3e:39:9c:e7:67:33:
6c:87:2d:91:f6:89:4d:df:8f:3c:c4:e4:d6:e5:b8:f5:6a:24:
c8:40:18:9f:07:ce:d8:1b:ed:0c:a2:58:eb:cb:c5:2e:dc:d6:
bd:70:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:25:00 2025 by rpki-client