Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: aTveCD/sYXNGIoWK98FZr5mI1D1Q3XJN2N8hXv5OKts=
Subject key identifier: E3:03:87:A2:3E:87:82:C5:36:EA:70:D5:68:C0:F2:6D:9D:0F:F6:EF
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01976CCFBF191E0B171E3877A3B1516D203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 149B
Signing time: Sat 14 Jun 2025 05:00:43 +0000
Manifest this update: Sat 14 Jun 2025 05:00:43 +0000
Manifest next update: Sun 15 Jun 2025 05:00:43 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: 9v9ozq1YhmqG4Nm3nAcCUOGlx5nhfO8Z/71tEkXfB8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:bf:19:1e:0b:17:1e:38:77:a3:b1:51:6d:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jun 14 05:00:43 2025 GMT
Not After : Jun 15 05:00:43 2025 GMT
Subject: CN=e30387a23e8782c536ea70d568c0f26d9d0ff6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:bf:95:0c:68:08:f9:6a:48:12:9a:3b:df:
eb:56:dc:8c:6d:2c:61:61:2a:c4:91:42:10:64:cb:
3c:ad:52:27:ff:53:70:68:62:c6:a8:90:82:f8:70:
7e:ce:ea:ce:e4:86:3e:43:99:a5:c8:d4:cc:8f:9c:
3b:28:52:7e:26:c9:fa:69:75:38:10:e9:db:e5:e9:
76:dd:d8:36:2f:7c:e1:82:ac:4d:34:98:61:77:9b:
91:01:b2:0f:41:82:a7:c6:31:25:e7:16:31:4a:ae:
e9:70:1f:f3:ae:40:46:de:8c:30:df:d6:a8:34:e8:
38:c5:96:07:2f:b9:1e:c4:61:2f:45:44:17:a5:2d:
e4:d1:93:1d:f0:21:26:e1:81:8a:04:34:84:ca:28:
c3:ad:ef:72:47:a7:7f:3b:09:a3:7b:83:bc:e8:8b:
13:62:fa:0d:a2:0d:67:d5:58:28:5e:41:1c:1a:c0:
9e:3a:38:fb:52:1e:a7:86:65:c5:da:86:65:12:d7:
01:35:b6:bd:90:db:fd:40:c5:5e:8b:7f:b7:3a:cd:
8b:63:ab:e1:a7:55:c2:42:d8:77:42:19:86:9c:0e:
8e:53:af:39:9f:e0:8c:37:f3:a2:8e:10:6f:3c:a7:
b5:1f:f5:94:87:cb:09:69:02:2c:36:d2:18:e3:1d:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:87:A2:3E:87:82:C5:36:EA:70:D5:68:C0:F2:6D:9D:0F:F6:EF
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:14:09:2a:4a:95:1d:43:f3:65:b5:e9:1c:25:09:97:3b:
76:a2:e7:00:e8:b7:54:a8:24:ef:3e:d5:eb:0e:ba:d9:e2:59:
9a:21:76:96:88:7d:02:c4:00:51:1c:90:c5:be:ae:49:6e:85:
3d:a3:64:24:5c:60:91:19:18:a0:24:b2:5f:e0:85:74:e1:d0:
f6:c8:9a:69:f6:f4:f3:04:91:e4:00:a8:9a:a2:14:c1:c6:e6:
6a:ae:2c:37:e3:f3:1f:7a:8d:23:85:6c:31:1b:13:3e:53:57:
6f:45:21:8f:c2:4d:30:fd:34:aa:78:50:9e:0f:91:4b:fb:4e:
92:83:17:bd:b6:a2:e1:1d:b6:1c:41:73:3d:d8:d3:88:69:25:
a7:f4:bc:51:c4:f4:36:09:7b:e3:6d:6b:ac:71:c9:7b:85:16:
15:47:f0:8c:a4:9a:3c:22:02:3e:0b:db:28:38:5a:3e:6a:d1:
d0:6a:67:e1:e2:01:f8:b9:72:61:0a:07:ad:c5:6b:0f:f8:cc:
fe:1a:a4:4f:e8:4f:39:3d:f6:df:86:6b:60:5f:61:a3:17:d3:
80:a9:58:07:d8:e4:00:bc:d3:d8:f9:f8:e9:2b:c0:34:2a:32:
1e:f2:b8:8b:ab:16:1f:58:de:7e:56:f0:9d:65:a6:8a:f4:82:
ad:95:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:17 2025 by rpki-client