Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: zK7cpSF47ZBzK/3DkQDtu81ZzyPG08a6qA86hLs86Uw=
Subject key identifier: 5E:CD:EA:C8:A9:53:2D:5A:82:5D:B7:2C:66:A9:1B:CB:12:9C:32:1B
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0197C45C5B9A0A6A7D66996CDB9E8A7570D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0A64
Signing time: Tue 01 Jul 2025 05:01:16 +0000
Manifest this update: Tue 01 Jul 2025 05:01:16 +0000
Manifest next update: Wed 02 Jul 2025 05:01:16 +0000
Files and hashes: 1: C0uiO_SbsEDc0tLkrH3qOQghgck.roa (hash: l6nudC+hnX+HTOH70KjEsckS/CblYhfgW6Lz16yxKjw=)
2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
3: IilMeITi2WRlzRXCm9op0c2uedk.roa (hash: UrspHFNf1bj1Z6XmUbLX3sSXcdX5yH0r772wbyb2ttQ=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 0HfEPU8nz5QWq76O6oWlI02WAWVl9pA5tgLidjtGiw4=)
5: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:5b:9a:0a:6a:7d:66:99:6c:db:9e:8a:75:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jul 1 05:01:16 2025 GMT
Not After : Jul 2 05:01:16 2025 GMT
Subject: CN=5ecdeac8a9532d5a825db72c66a91bcb129c321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:7d:02:7a:2b:65:b6:e8:fb:62:ad:a8:df:
14:d2:79:74:9d:e5:54:4e:30:4c:10:7b:6b:cb:20:
f9:f2:62:2e:d6:d1:48:20:e9:03:86:3a:a0:f8:09:
7b:97:c3:22:d3:50:3f:0d:b6:39:fb:bc:bf:33:06:
83:41:f8:af:2c:0c:6c:be:bc:71:8d:83:05:bb:15:
e4:3c:1b:0a:c4:e4:17:cb:de:13:91:eb:1d:7a:d1:
21:97:04:9e:1d:fd:e0:5c:7b:28:1a:f0:55:04:d6:
0d:a5:b0:55:06:c9:2d:ea:b5:dc:26:ca:18:c9:35:
e4:95:01:86:92:08:23:b8:c4:ac:f4:ae:d2:cb:e7:
16:f0:f7:b2:bc:f4:2b:04:37:90:e5:74:4d:8c:ef:
07:8a:ef:b5:5e:41:aa:6e:7a:a9:9f:07:b0:1c:c1:
be:ba:b4:c1:10:0a:ce:3c:9c:ea:a6:a6:72:73:48:
8f:9a:ff:da:cc:6f:b3:a1:89:28:d1:74:8e:66:9c:
26:ea:34:86:fb:fb:0f:b4:d5:72:09:3a:55:0d:7e:
62:4d:97:30:07:4a:39:1b:f3:f9:bb:69:ff:dc:6f:
c6:3d:7b:41:8a:26:12:4b:5f:f2:06:19:25:16:ac:
55:3b:36:3b:56:e7:e2:02:b0:36:ef:b1:35:40:f0:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:EA:C8:A9:53:2D:5A:82:5D:B7:2C:66:A9:1B:CB:12:9C:32:1B
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:ae:69:2e:04:5c:a8:7f:9d:7f:e5:86:8a:1d:4a:c5:51:
1e:74:6b:16:da:c7:ba:53:01:9d:c5:20:b2:3f:77:00:02:41:
af:5f:34:32:0a:f7:64:42:1d:eb:b3:8e:ca:66:84:8f:de:6b:
b9:d8:5c:8e:57:33:92:58:ad:d5:44:b4:a4:78:a9:14:d1:c8:
1f:44:09:92:85:1c:24:79:c4:64:30:68:0d:56:26:00:66:79:
09:ab:14:92:49:4c:f7:5b:07:bc:27:59:38:37:51:9b:bc:7c:
5b:40:ab:26:80:f1:23:c2:52:74:b8:f5:33:1f:15:bc:91:b8:
35:a7:b2:4b:2e:9c:68:24:ea:7e:a8:d7:f4:be:12:63:46:13:
44:a6:9b:7d:a9:15:8a:a5:9d:6d:d7:dc:e0:79:9f:24:cd:7d:
98:85:4c:38:69:cd:f0:a5:7b:c9:2f:0c:df:d8:13:e7:1b:31:
8c:6f:79:5d:af:0a:6a:e6:10:88:8a:39:37:07:f1:3c:7c:5b:
b5:0f:a2:f0:86:4c:11:7c:c3:d2:27:a5:98:6d:80:24:00:26:
15:1f:6e:6e:9d:55:89:8d:fe:1b:fe:d6:74:c6:a0:0b:19:1e:
a8:59:b5:12:e1:6a:35:0e:8c:e6:aa:93:b1:0d:4c:aa:a0:29:
d7:38:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:02:07 2025 by rpki-client