Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: OS///zZ8kM+fK+h9UJWxrmd24DpWghGkUPJBHtxesoY=
Subject key identifier: 25:02:DF:FB:5B:7F:6F:F3:ED:A2:71:18:AF:09:7F:8A:61:2B:4B:9C
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01976F2C66A66AA0F78F82AB7A53190365B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 16:01:10 +0000
Manifest this update: Sat 14 Jun 2025 16:01:10 +0000
Manifest next update: Sun 15 Jun 2025 16:01:10 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: 2gpYUEPec9GcMAf5dktbTOT/qzCkbAESte3PAW1OX2g=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:66:a6:6a:a0:f7:8f:82:ab:7a:53:19:03:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jun 14 16:01:10 2025 GMT
Not After : Jun 15 16:01:10 2025 GMT
Subject: CN=2502dffb5b7f6ff3eda27118af097f8a612b4b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:74:ce:7d:03:c6:ab:c6:df:30:62:c6:1c:
fc:d1:41:3b:a5:9e:03:b2:fe:21:65:50:1b:bc:8a:
fa:e3:98:ec:4c:18:a8:00:42:1c:f6:6c:6f:cf:2e:
95:22:9f:f8:c0:b4:83:32:3f:a9:77:f7:9c:2a:4b:
be:0a:c4:51:0b:62:eb:5b:f4:d9:b0:5a:e4:d8:b6:
66:e4:e6:98:99:79:d0:09:b3:14:5f:33:bf:ee:a2:
2d:a7:4b:2d:d5:50:82:a0:1d:99:ee:9e:9c:ee:e9:
45:ce:d7:e8:67:3c:a2:e2:2c:8d:05:eb:0d:b9:5a:
44:bc:33:f3:e0:72:1e:d5:54:83:a3:a3:b7:d6:a7:
91:ba:31:37:50:9a:16:a0:a9:2e:9d:fc:0d:ff:46:
f5:ab:f6:9c:fd:24:d7:f4:21:da:6d:d7:ff:51:66:
c7:3b:97:d1:b1:34:b4:96:54:91:4c:37:a8:c7:00:
12:74:c7:3f:6a:be:3c:69:d1:b5:5d:54:d6:52:3a:
24:b5:7d:f4:b4:1d:57:01:8f:70:fd:58:9a:5d:aa:
96:ca:d1:54:be:a2:6d:08:3c:a5:97:65:aa:f9:b8:
f9:fd:dd:1f:21:61:f8:bd:7e:46:d1:e3:2a:00:7f:
b0:57:88:07:22:5e:7a:90:81:02:b1:2f:f6:ca:8b:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:DF:FB:5B:7F:6F:F3:ED:A2:71:18:AF:09:7F:8A:61:2B:4B:9C
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:49:5e:0d:01:3e:a2:40:7a:30:21:11:64:a6:21:03:6a:00:
f0:a7:d4:fd:c4:11:c0:9c:41:9a:cb:68:9b:f2:10:d6:a5:dd:
1b:80:38:b0:7d:a8:15:83:93:4f:74:20:07:40:75:64:1d:16:
93:8a:4c:f9:1e:34:93:b0:b5:4c:4f:5f:2e:7d:ec:5b:69:c2:
42:0f:7a:f8:3f:7b:c9:25:b1:e5:85:50:09:df:6c:22:76:2f:
d4:d2:96:ec:a9:17:a7:0c:f5:51:e1:e4:88:23:95:a1:ef:a4:
3c:6e:f5:86:66:ee:da:c3:49:d2:9b:0a:91:9d:2c:ba:87:dc:
21:ce:9d:53:46:86:a2:28:ae:fd:90:e3:ea:77:12:82:b7:bd:
97:3e:54:4b:5b:c3:62:5d:4f:2b:ce:0f:4d:4b:dc:4b:d2:dd:
42:ff:b3:d4:d9:33:2f:ac:cd:88:84:b2:13:ce:9a:93:99:7c:
33:87:f2:75:34:27:6b:8e:82:fd:7f:fa:81:db:dc:df:33:42:
fa:d3:cb:b7:44:b3:30:05:2d:ea:9f:d6:b8:85:13:72:69:eb:
78:64:be:29:fe:00:32:0b:3c:0d:bb:f2:71:73:ac:e0:f7:db:
38:9b:b5:e8:a4:4f:13:db:3c:f7:61:39:db:50:0d:0e:72:70:
42:2a:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:58:55 2025 by rpki-client