Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: udkhoSNJowuw8JrTKIMKJqdURsULKKai9Qvd28a0imM=
Subject key identifier: F1:2F:AA:17:05:12:C6:D2:A0:26:4A:15:85:33:FD:35:22:A9:0A:50
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 0197B77CAFC842304E4FB7EFE43C72DC16FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0EEC
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: M6HaEDS5wrmdtN+6d27/jfLXQhtUDxaUVrh2J2FB0GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:af:c8:42:30:4e:4f:b7:ef:e4:3c:72:dc:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=f12faa170512c6d2a0264a158533fd3522a90a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:5b:5b:36:05:04:be:fc:33:6d:dc:e9:fd:
6c:3a:db:aa:b1:f6:cb:e7:63:00:f9:a9:d0:d1:14:
07:8b:80:00:01:df:fd:b1:84:96:5f:ce:11:d1:fd:
41:c8:2d:21:64:83:7f:b3:dd:19:03:7c:91:6e:41:
cf:c8:1d:a4:85:fc:9e:88:05:a1:13:16:cb:a9:16:
07:96:5c:60:ff:cf:08:28:b7:89:f8:40:d9:3d:13:
f5:36:31:da:b5:b4:23:19:82:87:02:ad:1e:32:fb:
f7:f7:68:4b:b8:58:98:87:3e:4a:b4:44:f4:de:d3:
b3:c9:2c:7f:78:46:29:bb:2e:bb:bd:34:a8:a7:b3:
c1:38:28:c0:d0:1a:3c:f5:11:0a:58:d5:07:ea:73:
73:42:8b:6c:26:1a:e5:9e:fe:8f:68:38:6b:dc:64:
bb:0e:de:8e:e2:da:96:ad:64:45:c4:93:89:36:b6:
8f:ad:70:08:37:c9:7c:d1:70:56:2f:f4:c5:5b:c0:
29:76:01:72:78:48:72:7d:a9:93:44:53:2f:f1:55:
6d:8e:7b:01:f2:66:23:42:37:bb:b0:88:36:3e:fa:
91:b8:dd:fa:c7:e5:53:c8:d0:42:a2:83:77:5a:aa:
a3:4b:2e:e6:5c:fc:07:da:c6:07:2e:42:ef:30:47:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:AA:17:05:12:C6:D2:A0:26:4A:15:85:33:FD:35:22:A9:0A:50
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:92:cc:8a:aa:cc:6c:ec:8b:2e:2d:68:ed:d3:8e:ad:68:
f4:8a:4a:ce:ce:af:22:c8:02:1e:2a:d2:35:4c:81:81:d5:7b:
f5:48:90:b7:ae:f5:7f:89:d7:26:c5:2b:1c:63:51:e1:f8:8a:
f1:5e:ca:73:06:37:c6:b2:19:35:21:65:89:8e:96:37:4d:66:
93:b1:95:2a:28:ba:db:cf:03:d4:0f:ae:04:77:f8:81:ce:81:
59:2d:80:95:a7:ce:86:df:d4:d5:90:e5:a9:f8:a0:87:2e:21:
9e:b8:c4:59:89:c9:f2:67:d1:66:6f:d5:9e:39:6a:d3:80:bc:
1a:26:a8:21:06:76:42:0d:81:07:7f:78:69:1d:8d:a0:13:6e:
e8:8b:98:ec:70:0d:da:17:33:e3:99:0e:f9:b1:d8:9a:33:b6:
1e:83:d8:21:d2:54:77:01:5e:b3:76:fc:f9:40:27:dc:71:05:
64:2e:cb:0a:ae:63:48:e1:fe:39:79:ba:dd:ea:da:36:01:17:
3b:0e:0d:b0:4e:91:9e:24:ec:7e:8d:ef:1f:60:b5:b9:df:ab:
25:df:95:69:e9:a8:ab:d1:fa:85:16:4a:a7:2d:5c:71:67:b6:
48:16:1b:ce:da:c9:0d:84:da:e8:d4:36:9a:90:d3:f6:87:80:
de:c0:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:46 2025 by rpki-client