Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: yRvhfHL+zzSt34SoLS0LYw3YJpn00Kk3C2GZ+iik55A=
Subject key identifier: 76:E5:90:82:AA:4C:E4:F6:6A:06:F4:5F:0E:66:C3:8E:9A:6D:EA:89
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019768BBFB149A3E8CC3BA23152AF23E0F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:00:39 +0000
Manifest this update: Fri 13 Jun 2025 10:00:39 +0000
Manifest next update: Sat 14 Jun 2025 10:00:39 +0000
Files and hashes: 1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: 7qLSsnHQJzHEpuGka1jKX2DQQrssmSKuYkOjNZSbLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fb:14:9a:3e:8c:c3:ba:23:15:2a:f2:3e:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Jun 13 10:00:39 2025 GMT
Not After : Jun 14 10:00:39 2025 GMT
Subject: CN=76e59082aa4ce4f66a06f45f0e66c38e9a6dea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:9b:de:1f:cc:47:53:82:9f:ed:b4:c5:0c:
bf:24:83:84:e6:1f:1c:c2:9c:86:23:7e:70:00:96:
55:89:9c:c2:6c:ac:52:1f:18:10:dc:34:32:6b:97:
40:ff:34:b5:1c:22:c2:6b:0f:a2:02:b4:c8:c0:d0:
e1:98:8e:4d:cf:3b:f2:da:68:3c:b7:69:93:4c:3f:
33:87:6f:37:47:67:27:3e:df:83:b1:8a:25:52:2e:
fa:d1:77:fb:28:ed:3d:b3:a3:0c:98:11:a6:83:0e:
2a:86:53:37:e1:de:05:f3:b4:ee:e1:b9:03:fe:63:
f5:8d:1d:6d:5c:65:78:6a:89:12:fe:65:64:a5:c3:
70:63:a9:1c:aa:95:17:df:8d:fb:7a:a2:a7:68:9f:
d6:68:47:fa:bd:9b:47:b9:87:e1:7b:c3:cb:bf:39:
dd:68:d1:1a:59:a1:e6:82:6b:65:fc:f7:c6:e2:b5:
21:fa:5d:ea:9d:e6:14:e3:5b:be:48:82:99:1c:a6:
63:b9:eb:e4:87:db:dc:47:bf:b6:a3:46:9a:8f:32:
c9:cb:33:d9:32:72:41:42:30:d0:87:5f:17:a8:91:
de:ae:ce:39:75:d5:ee:2f:f0:11:35:c6:22:99:53:
49:c7:13:70:6e:7d:d9:84:ea:ce:d1:da:36:c5:50:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:90:82:AA:4C:E4:F6:6A:06:F4:5F:0E:66:C3:8E:9A:6D:EA:89
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bf:12:3f:2c:61:3d:df:a5:67:2a:4d:84:3c:ae:55:5d:2a:
b4:11:b3:82:b6:d1:96:48:5c:72:07:23:23:58:e8:ce:04:dd:
10:95:c3:8f:dc:e9:31:78:76:e8:f0:8b:b7:0f:c3:ef:b7:2f:
75:d7:d0:4a:15:a7:a5:49:48:b5:92:b2:17:85:d8:f7:34:67:
7f:57:e0:02:e7:23:55:12:e7:ca:53:55:bc:ad:65:f4:e2:1d:
30:be:86:b0:87:71:44:e7:6e:20:a6:cd:5d:e8:d1:2d:a9:8b:
d6:75:56:5c:2c:d7:02:68:a2:a8:25:44:0f:f6:64:e5:ba:93:
c8:41:59:6b:28:0d:44:70:c5:b8:73:f6:0c:e5:e4:1c:48:cf:
c3:51:50:8e:37:c3:a5:c0:18:c3:a7:e9:b4:ae:21:f6:65:d6:
44:da:07:49:01:2e:59:3f:17:90:61:36:f3:60:5d:d4:36:76:
e4:e8:89:1b:f0:61:8f:0f:75:57:a6:11:e8:5c:34:e5:a5:d8:
0a:9c:f0:e3:ec:a2:df:74:9d:e1:0e:04:db:36:de:78:fc:10:
fd:0d:9d:88:91:9d:d5:c0:d0:ad:f3:3d:cd:c0:d0:ba:d4:2f:
15:27:ab:57:7f:ac:4d:51:48:70:2d:db:f2:0b:16:37:dc:82:
cd:f6:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:56 2025 by rpki-client