Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: s/jzwPauyjOqsR3V5JN/7AUNBVAN/3Rl4yRsCDAqVrY=
Subject key identifier: D3:EF:AC:BC:38:79:68:72:B5:80:F5:E1:76:2B:A7:25:9B:C8:3D:B6
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 0197C86FA088E58CBBAB82D42F6A8E30E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 00:00:48 +0000
Manifest this update: Wed 02 Jul 2025 00:00:48 +0000
Manifest next update: Thu 03 Jul 2025 00:00:48 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: hqWo4krdHPCQrNia+0hcGlcbEEk72mXdP7b3lEa1pMU=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:a0:88:e5:8c:bb:ab:82:d4:2f:6a:8e:30:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jul 2 00:00:48 2025 GMT
Not After : Jul 3 00:00:48 2025 GMT
Subject: CN=d3efacbc38796872b580f5e1762ba7259bc83db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:36:67:b5:7e:6e:88:8c:6a:bb:41:f4:f1:
51:46:8a:98:c0:7e:1c:24:19:15:97:07:9b:93:78:
df:8f:ed:39:7c:ca:74:82:03:25:0b:6a:b0:70:c2:
5e:3a:7a:7a:27:87:17:98:f8:78:4e:60:63:9d:39:
17:54:23:ba:94:9c:bb:f6:3f:6b:76:f6:12:3c:87:
74:fe:e7:5c:8a:ed:d1:5b:f5:f5:d4:2c:c2:56:fd:
6f:9c:94:6a:3b:65:90:de:ff:1c:2d:22:9c:6c:1d:
46:91:93:8b:d6:c0:0a:64:94:a3:6c:e9:d8:53:af:
35:78:be:a1:27:25:e3:4a:6b:67:f2:21:8e:5c:7d:
0d:6e:49:82:5a:b7:d5:ca:75:63:c8:d7:27:49:e8:
01:7e:28:ca:31:d7:da:4e:d4:20:67:0a:8b:aa:9e:
b6:d2:7b:e1:40:c7:2a:f0:1b:93:c5:bb:03:7d:7e:
48:f2:d0:7f:a8:71:73:a5:67:87:18:ed:96:f9:7a:
04:b5:e8:59:4a:da:59:e9:c7:cd:c9:55:ef:57:7f:
a5:6a:a6:19:a8:d0:45:34:48:5f:ed:45:c3:d7:8c:
41:0e:c2:de:c7:d8:79:6c:70:fc:f7:46:83:91:66:
2b:b3:68:21:14:c9:75:7f:f4:fd:a5:ac:69:b2:38:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:AC:BC:38:79:68:72:B5:80:F5:E1:76:2B:A7:25:9B:C8:3D:B6
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:59:f2:ca:9a:4f:33:12:78:c1:04:b3:5c:8d:50:e8:02:
9d:af:bb:2c:00:38:2d:a5:21:76:ae:71:97:38:1c:be:1a:7f:
55:d0:3a:db:c4:7a:0d:3d:11:49:0d:60:f7:da:7d:2c:dc:e5:
fa:7e:d9:83:c9:a6:33:23:f8:67:ce:85:70:24:ad:76:27:a9:
6b:81:38:15:45:8f:f9:9a:a7:0c:01:e5:83:b6:98:73:eb:63:
66:13:03:cb:f4:f0:c2:50:f5:3d:7d:91:ec:44:52:16:d1:a1:
da:7e:2a:16:c9:07:c5:bf:9e:47:60:e3:00:59:96:6e:a6:36:
63:2e:47:f4:83:4a:6e:f5:8c:f0:0f:16:c6:19:62:da:5a:72:
7c:16:2a:83:6b:b2:d2:bd:4a:8e:45:e7:79:78:52:3a:cc:13:
a1:f7:ad:8a:ee:7e:17:8f:ca:1b:fa:5d:ac:77:43:2e:a8:b7:
fe:05:87:ea:66:8a:b5:d9:4f:85:75:c3:84:e2:0b:46:70:8b:
0c:71:75:8e:60:d7:5b:fd:d6:4c:a5:e0:26:f9:2a:9f:6f:a7:
1c:e6:91:4e:1b:76:f2:cf:b3:9b:ad:80:9b:54:3c:0d:36:e7:
e3:39:56:85:19:42:66:c1:6e:29:f0:5b:47:e9:0c:90:dc:0a:
41:4a:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:27:59 2025 by rpki-client