Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: e10gM1I1sOeZ9u4X+6MLTLTsPDQD2uLmglWMk8xPKZo=
Subject key identifier: 1D:C8:38:DC:F4:5D:96:C9:57:B2:51:A8:C6:2E:09:DC:3F:A0:40:7F
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 0197B77C5D6E04398242BE0E6188300C28C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 12EF
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: RvFqyTZvhTov1Ic3AlqVQqghPaOCDlBFFg48vW/JpBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5d:6e:04:39:82:42:be:0e:61:88:30:0c:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=1dc838dcf45d96c957b251a8c62e09dc3fa0407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:7f:fa:bf:de:ce:a4:e3:f6:46:f9:77:6b:
52:7f:f5:90:76:10:aa:59:4c:c7:cf:68:15:d3:7d:
da:d8:66:8d:5a:43:89:4c:62:9c:7d:10:6b:75:4f:
ee:28:f9:9f:73:5c:b4:7f:22:05:31:a8:23:b4:c5:
5d:b9:19:9e:24:8c:55:02:69:b6:ff:df:de:6f:09:
78:fd:37:7a:0f:84:6a:e9:d0:70:d5:70:43:83:96:
8f:47:24:74:a1:11:bb:f5:ea:7a:93:e9:98:c2:74:
4d:e9:42:03:fa:a7:e1:d6:27:26:8f:5d:9b:6a:c8:
b5:9c:2d:75:9d:56:7d:b7:e1:ad:d4:19:7c:8d:11:
b6:3d:cd:b1:49:b3:11:1a:6f:e1:7a:c7:49:fd:ba:
37:83:95:51:8a:3b:39:69:98:a6:2b:6c:e6:82:da:
a5:1b:b9:bb:09:ca:8c:54:75:ce:97:85:26:5d:a2:
f4:cd:1c:4a:ad:f4:3d:3e:14:30:6e:95:8d:8e:95:
4a:17:51:49:22:5b:c7:4f:9b:c1:b4:c4:97:b3:95:
39:82:0c:66:5f:72:12:e5:c5:f2:e6:5f:e3:41:2c:
94:55:94:a4:6a:7f:e9:0a:b7:73:f2:8e:4b:17:16:
59:12:39:e0:a5:fa:20:9b:e2:21:88:ea:2e:24:30:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:38:DC:F4:5D:96:C9:57:B2:51:A8:C6:2E:09:DC:3F:A0:40:7F
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:6c:f4:ff:ca:42:fa:f9:a5:cc:30:ee:ee:74:36:31:36:
aa:95:1d:d0:07:e5:7a:c4:2a:08:e7:f2:4d:95:20:1f:14:4d:
5f:a4:1f:39:81:11:df:a9:49:a7:59:70:41:ee:18:48:fc:a5:
a9:9c:89:95:f0:15:2c:d6:5c:56:0a:2b:b9:79:a9:03:0e:45:
53:18:e4:65:b5:47:be:2f:fa:0b:85:61:01:77:84:91:27:7e:
d8:90:3f:97:a3:c6:db:85:19:99:f8:d3:15:b6:3b:7d:1a:3d:
db:8c:db:5d:4f:ce:ff:6e:17:a0:3e:bb:91:7e:34:7a:83:9d:
b9:f7:48:71:3f:2e:11:0d:b6:ae:9f:3e:62:b1:d4:70:24:5a:
dd:8f:32:46:0f:a8:5e:7e:d2:31:30:a1:4f:4c:34:f1:4a:e8:
77:b9:00:5f:8e:fc:26:c2:95:b6:71:af:ba:c2:b5:52:48:f5:
ea:b7:07:4c:e0:fa:3c:8a:3a:83:23:f4:3b:b3:75:d6:34:65:
e1:3f:7e:82:d3:ad:86:f5:17:2a:6c:7c:a2:1b:53:09:53:ba:
ca:cc:f6:b2:9c:c9:29:12:c3:92:b4:00:cb:0e:68:7e:4b:1f:
8f:54:3a:1b:a6:6b:59:f3:9b:10:fc:39:75:35:7e:14:fa:f3:
18:7e:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:57 2025 by rpki-client