Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: rEBzZ2xYS60FnWn7AHyI0snw5y9nNegHXBKDXTGxNNY=
Subject key identifier: EF:CE:AE:1E:05:9C:D6:AA:C0:25:C5:3C:31:13:D2:3A:CA:33:24:D8
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 019788469D168D121670C04800E6236BE20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0BDC
Signing time: Thu 19 Jun 2025 13:00:18 +0000
Manifest this update: Thu 19 Jun 2025 13:00:18 +0000
Manifest next update: Fri 20 Jun 2025 13:00:18 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: r65cnfQKF/ZGcLyXte5n3uGwUcGuiLPV5mixBW+UF1c=)
2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:46:9d:16:8d:12:16:70:c0:48:00:e6:23:6b:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Jun 19 13:00:18 2025 GMT
Not After : Jun 20 13:00:18 2025 GMT
Subject: CN=efceae1e059cd6aac025c53c3113d23aca3324d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:09:31:bc:4a:6f:c6:29:30:6d:64:15:99:
13:72:e5:9a:39:15:4a:03:4b:51:80:17:2b:b2:63:
b4:9f:de:a0:75:2f:b8:d6:c1:e3:ff:13:f4:58:9a:
85:e8:31:86:78:9d:dd:43:63:27:b1:b8:a1:e3:84:
8c:0c:23:3d:80:81:65:46:e3:bb:56:87:c6:6a:17:
fd:83:d7:b3:0e:7d:7e:3c:da:d2:03:49:b7:8b:ae:
c8:81:79:2b:15:95:c0:ae:a1:a1:4f:46:17:89:e8:
e8:f1:d7:79:d7:72:e5:1b:db:53:3f:21:17:8a:ff:
b1:79:d0:36:b8:66:57:c9:e8:31:4a:90:b4:bd:9f:
66:35:f1:3a:c2:8e:57:48:9e:9a:d2:88:df:8f:ae:
6f:26:ea:fa:9a:ee:c7:7f:1e:01:38:e2:a1:b7:3e:
2a:53:72:d3:8a:13:88:cb:3c:39:cb:cf:3a:aa:ee:
d4:a2:19:4e:c1:dc:e8:73:de:d8:e4:13:d8:96:8a:
5c:1b:0f:b8:e8:00:04:46:7d:5c:5f:64:54:82:a2:
0e:ab:fc:0b:2e:0a:6b:e4:06:7f:ed:1d:07:62:dd:
9c:3f:9a:27:9e:4c:26:e9:16:c3:2a:8a:c8:91:88:
95:cd:82:b1:26:16:bf:cd:11:2a:ce:38:e3:af:89:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:AE:1E:05:9C:D6:AA:C0:25:C5:3C:31:13:D2:3A:CA:33:24:D8
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:73:16:c0:7c:e3:f4:b8:99:68:e4:2f:a2:c5:82:91:a7:
05:07:4f:16:26:06:c4:c1:40:63:9b:19:78:4b:4c:2e:0a:75:
91:03:f5:38:8c:98:30:b7:bc:19:85:eb:22:e8:bf:eb:3f:25:
9d:2c:6f:eb:e8:4e:ae:bb:3a:af:91:30:5a:c4:03:d6:93:05:
7d:4a:95:c9:21:d3:34:85:0b:60:84:39:51:45:de:14:18:ad:
e4:64:2b:ed:ae:8a:44:a9:50:e6:08:f4:64:16:8b:9b:af:93:
c7:81:8f:09:56:b8:0b:b3:b4:ba:85:6d:06:bc:b3:b9:e4:60:
39:ac:70:fb:ab:84:ab:6b:d6:eb:5b:1e:43:98:d7:45:c2:42:
84:85:46:b2:d4:bd:93:71:d3:ff:bb:f6:ec:fa:3a:8f:ee:3d:
d3:bc:a1:77:ce:64:32:38:c8:00:8a:b6:e0:c6:56:f3:71:b7:
90:35:a0:24:74:e2:7e:6d:04:b1:65:2c:38:ac:9b:ef:81:b9:
e8:3a:e7:0c:f3:49:b9:f5:05:e3:03:8a:72:1b:5b:18:c6:10:
09:12:4a:36:88:67:73:57:8b:a2:96:75:d1:5a:64:4d:01:52:
e4:6d:07:68:3e:ef:af:19:3f:d8:49:61:14:6c:27:60:2a:91:
68:d6:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:32:45 2025 by rpki-client