Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: B3vrA5sNaOE/F/CNlJ1ev7JYRbcctnhucANsgRh7XM8=
Subject key identifier: 8C:1C:3F:1F:0B:0A:B6:B8:75:8B:04:C1:17:F0:3B:2A:34:33:9E:CF
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 01976E5089ACFF8F4EF7943488610141D4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 03DD
Signing time: Sat 14 Jun 2025 12:01:01 +0000
Manifest this update: Sat 14 Jun 2025 12:01:01 +0000
Manifest next update: Sun 15 Jun 2025 12:01:01 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: 3nlkpNmXrF/Zo5wPfPLtmZf2Y+M1X+3ipPKofrnyL7g=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:89:ac:ff:8f:4e:f7:94:34:88:61:01:41:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jun 14 12:01:01 2025 GMT
Not After : Jun 15 12:01:01 2025 GMT
Subject: CN=8c1c3f1f0b0ab6b8758b04c117f03b2a34339ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:71:93:3f:e0:a5:96:04:f9:f6:d9:36:ca:
c2:7d:06:69:f7:1a:55:e4:8b:c9:75:ae:43:ed:ac:
31:91:ad:d7:b5:93:c7:e7:28:ce:51:d5:8f:c2:f9:
70:59:4f:71:27:0e:31:36:d6:41:4c:f5:a2:dd:19:
3a:15:b7:d4:76:67:83:05:bc:b7:6a:7c:7b:b3:2b:
88:07:2b:6b:21:da:e4:c3:9e:44:b1:b0:14:95:d1:
62:19:da:71:e9:b3:6a:2c:f6:c8:d7:71:6e:d8:59:
77:16:a3:49:34:20:4d:f5:55:e4:74:0c:21:ee:61:
75:dc:5f:74:ff:19:36:a3:65:cd:3e:e6:02:80:a4:
28:62:69:de:18:c7:4b:8d:9d:29:f4:46:c8:80:af:
b5:48:ef:f4:aa:c0:4f:4f:f7:5f:a1:59:b3:3c:26:
8d:72:fb:71:1e:93:9e:8d:e7:e3:2c:d1:b0:5e:f5:
95:a0:91:d3:ad:8d:56:3d:87:0b:58:37:00:6b:51:
89:7f:17:a8:49:70:ac:b2:84:ce:fb:e3:1d:98:41:
b0:cb:06:41:fd:ea:aa:a0:ce:77:7e:e0:7b:69:44:
ca:2c:12:0d:6d:c4:67:55:6e:45:af:18:b6:66:b8:
e4:48:73:c6:9e:56:ea:1b:91:ad:bc:cc:e1:16:e0:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:3F:1F:0B:0A:B6:B8:75:8B:04:C1:17:F0:3B:2A:34:33:9E:CF
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9c:41:54:2d:5e:2e:de:69:42:32:6d:47:89:08:f8:db:bc:
cb:6a:5d:22:04:27:b1:57:03:19:b2:d3:3e:79:a2:37:b2:b3:
27:b7:c3:56:1d:d1:66:cc:c8:88:64:f5:8f:e9:61:12:9b:02:
46:1c:04:ed:06:a9:f8:40:c3:a1:8e:b9:4a:51:a3:16:cf:07:
6d:3c:dd:8f:95:9e:49:c6:74:71:5c:b4:3e:33:90:bd:3c:44:
f7:60:f9:1a:16:8d:70:89:3e:0c:68:1e:ec:ea:d3:73:1e:9e:
0f:da:70:4f:34:6c:9e:e3:ed:6c:8b:50:d4:b9:69:f0:c0:7e:
5c:ab:4e:24:88:0a:57:df:f1:e9:0a:45:d8:66:2e:65:a7:68:
cb:f6:65:a0:46:1d:dd:8a:99:65:42:99:8b:69:f3:72:3c:c3:
ba:56:03:09:83:5e:c5:63:30:15:87:51:c8:4f:cd:87:b5:8d:
0e:35:2f:ad:f8:5d:34:db:26:da:17:d6:db:43:d3:7e:24:b5:
3a:fc:2f:ec:30:db:2d:3b:3d:fc:a1:88:64:c3:f3:24:52:01:
5d:e1:9c:75:bf:aa:95:4f:99:c5:73:d1:86:13:1f:c7:d0:81:
50:8d:5b:fc:2a:d6:17:4f:e0:1c:94:2d:f7:84:40:19:2b:b9:
d1:39:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:23 2025 by rpki-client