Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: 6SYwN2mI2Y6FutzBMsi2lBwGEEN0/BDAiwaqwOPWp4M=
Subject key identifier: E5:D4:D6:F8:F0:C8:3A:18:24:46:B6:5A:36:D8:BD:35:DE:11:72:08
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01976DAB80A104F18CFF6AFEF1D7F0B84EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 0F80
Signing time: Sat 14 Jun 2025 09:00:45 +0000
Manifest this update: Sat 14 Jun 2025 09:00:45 +0000
Manifest next update: Sun 15 Jun 2025 09:00:45 +0000
Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: Rvs7XOz1JQ/4WLjXy4UYVMyfAhNcczZmFVUzA9ptdeA=)
2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:80:a1:04:f1:8c:ff:6a:fe:f1:d7:f0:b8:4e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jun 14 09:00:45 2025 GMT
Not After : Jun 15 09:00:45 2025 GMT
Subject: CN=e5d4d6f8f0c83a182446b65a36d8bd35de117208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:88:69:b3:61:93:69:07:94:69:df:61:0b:
44:ca:a7:2c:f1:c6:89:23:28:a8:43:0a:8e:d0:9c:
e8:45:cd:13:31:64:0a:59:5a:2e:96:86:b6:d2:25:
09:48:96:07:12:2d:f0:22:d9:1f:bb:bc:82:4a:c3:
05:c5:12:a6:40:c3:a7:ea:9b:d7:60:6f:8e:f0:6a:
da:13:69:8c:6b:96:8f:e2:38:28:e5:d7:93:e6:71:
de:87:4b:1b:a6:9b:45:4f:6c:8c:17:0d:67:bf:3b:
aa:c3:d1:b4:d7:9d:0e:f3:e7:ab:60:3f:01:17:48:
b1:a4:d6:bc:8f:93:7b:f1:f1:a1:f3:93:81:cc:61:
5f:da:38:2c:6d:84:76:ae:87:81:e2:74:6e:fc:e9:
1c:a7:79:4f:d0:a7:39:9f:47:4f:0c:cf:0c:f9:f3:
ab:5f:ac:81:16:22:81:4f:98:ec:9b:de:4d:9b:f6:
e5:ea:4a:c9:da:9b:8f:58:42:1e:1c:f8:4d:79:fa:
1e:9c:17:9f:61:36:83:a7:7d:3f:b5:29:19:cb:ec:
ac:ea:c8:e5:11:d0:21:38:49:9e:b6:41:f3:0c:2d:
26:f9:8e:3e:63:c2:72:67:e7:77:74:a1:cd:c4:3c:
b8:f6:d5:db:71:6d:b6:58:2f:54:64:74:78:4c:9d:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D4:D6:F8:F0:C8:3A:18:24:46:B6:5A:36:D8:BD:35:DE:11:72:08
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:26:db:b1:e6:6e:a9:2d:14:14:f6:b4:f2:4c:b0:5d:fa:7b:
12:ad:40:9f:e6:fa:ff:f3:58:ec:98:1e:c1:07:f1:23:f7:5a:
f9:9d:21:5b:94:09:1b:45:18:ef:01:73:c8:4f:ed:42:29:4a:
05:6f:11:31:7f:07:00:2c:b8:c2:50:0e:0d:31:1e:af:e6:03:
af:db:d0:47:ef:66:ba:85:f9:83:5d:d8:28:c7:0e:ed:3f:32:
cd:e6:72:c5:9e:1f:4f:e2:9e:41:0b:f9:d2:29:36:fc:6a:92:
16:46:39:2d:14:a5:0a:af:b4:36:21:7b:e1:64:8b:09:cd:8a:
ae:31:b5:ca:ed:3c:79:57:c9:c9:85:64:69:06:49:0e:a8:b4:
31:45:a9:de:fa:8e:82:49:fc:0b:66:6b:db:6d:6d:0b:58:7d:
fb:29:5c:94:54:6d:3a:77:99:c1:2d:04:44:ba:41:57:4a:33:
a5:95:21:8c:d8:0d:7d:2b:2c:aa:ad:eb:b3:a4:d4:65:60:62:
eb:6f:2c:25:35:f2:68:13:d0:ff:c6:b4:aa:bc:80:22:c8:5f:
6d:ee:ed:d4:c5:cd:ef:2d:78:ed:02:b1:ad:fa:be:eb:7f:a6:
66:b8:61:de:03:a2:9a:68:db:16:93:b9:19:f2:06:c3:ee:83:
a1:bc:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:38 2025 by rpki-client