Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: hgmTyKS6wkUFxv9STJ6Gg4lF553Qt7g1KqIUaAJ2sz0=
Subject key identifier: F3:C0:53:F0:E2:58:CA:6A:0A:DC:FD:6C:6F:19:1A:AC:E0:98:87:2B
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 0197B74597B188032ED8C84E3383D4246033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 04DE
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: aJA9sRtCsMryXD1Ogv5Buuft+76VBlTk+JWCwallBfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:97:b1:88:03:2e:d8:c8:4e:33:83:d4:24:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=f3c053f0e258ca6a0adcfd6c6f191aace098872b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:0c:e6:59:1e:15:f3:a1:00:1d:75:b9:fb:
07:46:e2:80:88:7d:8c:d1:25:41:68:59:12:fb:e0:
26:a8:95:38:d8:77:39:e7:7b:d9:7a:e0:a3:35:bf:
f9:50:ce:29:fa:da:e8:b0:92:05:52:7f:e1:48:c2:
b8:ca:96:1b:0a:63:99:24:b5:a3:3e:a4:01:24:58:
89:4b:eb:a8:c5:38:7a:fc:c5:e5:6f:40:55:e6:d8:
23:4a:e8:a6:d0:fa:3e:55:2b:88:91:46:1d:76:c9:
59:ef:d9:d4:58:fb:00:4f:12:43:d3:be:48:6f:f3:
85:58:ec:22:e2:33:ad:a5:ad:a7:1b:af:63:26:48:
f9:45:e7:02:2d:28:14:fc:79:02:f5:8f:98:c3:0d:
23:5f:e5:73:7b:d1:a0:3a:53:d0:46:c6:ef:16:ec:
f5:76:c5:54:7b:0a:85:5d:e4:cc:25:e9:6e:5a:fc:
68:3a:b3:84:08:df:ea:6d:9a:3c:af:50:60:c4:c2:
7c:21:03:50:54:1a:cd:68:89:93:42:40:48:b6:f6:
30:bb:4c:0d:9c:c3:06:0e:db:bc:78:e3:15:8f:95:
db:b7:ff:32:65:a8:2c:df:fc:0e:09:3c:13:98:00:
18:ec:bf:29:3a:e2:84:5e:2d:f1:84:97:48:c5:62:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:53:F0:E2:58:CA:6A:0A:DC:FD:6C:6F:19:1A:AC:E0:98:87:2B
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:9a:ec:4c:79:01:b8:a3:28:81:4a:15:2c:3c:fd:7b:1f:
af:c5:96:a6:cf:d3:1f:11:e2:a1:52:31:d3:21:71:39:27:73:
e7:90:b1:28:86:30:b4:36:8e:c5:8b:04:27:f0:fc:aa:85:18:
12:cd:68:ee:a1:59:97:07:07:9f:4f:a9:b2:dc:71:d3:85:3b:
49:80:27:ca:15:a5:11:0f:7f:fe:4c:0c:bd:b5:b4:48:54:44:
e1:5f:e9:48:49:f9:bd:2b:2d:18:f2:c5:3c:d0:75:4d:0a:77:
d8:8a:10:3c:74:21:d7:7d:e7:e0:5d:86:b5:4e:8c:85:c0:d1:
ee:c6:1e:5c:81:d6:7a:84:c7:dd:13:9c:aa:b7:5f:50:70:66:
52:b5:a5:d9:6c:a7:df:13:a8:dd:63:3f:5b:8c:ed:e0:28:41:
a2:6c:18:e8:f1:8c:51:92:ee:34:b4:f0:a2:02:d6:20:b7:26:
6d:6c:b8:31:62:65:b8:65:c2:35:03:53:82:5b:a2:7c:d5:e1:
79:7d:18:89:08:09:b4:b2:04:17:23:f1:26:39:db:ba:de:fd:
e4:5a:34:ab:b8:ba:ff:f9:22:2c:2f:53:52:4c:20:75:35:c8:
13:4f:fa:28:23:4b:4e:04:89:4e:ec:f8:0d:a7:fe:6a:10:0b:
13:9f:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:54 2025 by rpki-client