Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: UuDujwxd7BlWhuUIA/KAxUicSd7bFsJ+N9t3PnelD5c=
Subject key identifier: B1:FB:A7:DC:BC:B5:52:A5:17:33:BC:35:03:85:E4:F7:47:9E:5E:C5
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 01976BF3F99134D01B6CCFAD702BBF1D94C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: fJ6MSkL5FGwQNjUW7+OFgm83MrdiLW3aApibSOi38gk=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f9:91:34:d0:1b:6c:cf:ad:70:2b:bf:1d:94:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=b1fba7dcbcb552a51733bc350385e4f7479e5ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:ec:39:83:36:fd:89:66:23:81:e8:2f:1d:
9c:2a:0d:7c:4f:74:75:b1:4b:e0:de:88:5d:17:61:
cf:e3:fa:93:20:e8:0b:55:9d:e1:6a:2e:a5:d2:b3:
e4:69:b2:8b:e4:77:ff:62:ff:29:c2:fa:cf:56:5e:
c6:c3:68:41:ef:7c:78:3e:8a:92:7a:da:14:68:bb:
ba:0f:45:fc:91:3e:c6:0e:bb:4a:4d:40:36:e9:d7:
36:8b:8c:29:7a:c5:a0:e3:2e:8f:d1:dc:e6:6f:a2:
32:ce:ac:9d:3b:b7:92:09:f6:aa:c7:3b:c1:39:d3:
5f:9f:3a:a9:4e:4e:2d:bf:c1:99:f4:d6:b9:5d:d3:
20:bf:5f:d5:39:51:47:c0:39:4a:15:04:d2:c3:08:
d3:d3:c2:c9:2e:87:5c:cf:44:b8:5b:a2:aa:dd:c3:
17:85:52:85:6d:2c:7c:7f:cc:c5:02:b5:5d:91:c7:
5f:d3:a6:cb:4a:e6:55:46:95:50:1d:c7:cb:16:4b:
7f:65:9a:52:39:a4:4f:03:83:20:c6:41:31:9c:c4:
39:3d:82:b1:8d:7a:c6:80:c6:44:96:80:70:b4:bb:
aa:cc:8d:2e:85:8a:53:7c:8a:9c:b7:aa:29:ce:2a:
00:0e:55:99:f7:e4:f1:8d:72:99:a9:d7:ba:bd:1a:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:A7:DC:BC:B5:52:A5:17:33:BC:35:03:85:E4:F7:47:9E:5E:C5
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:ab:51:60:78:63:8b:5a:50:1e:a8:6e:59:85:79:b7:aa:
b5:34:9f:76:4c:6c:c3:7c:d2:7b:38:fb:c1:da:2b:6b:bd:20:
d0:17:cd:55:85:79:c0:93:f8:f2:b3:9e:46:7a:35:19:f6:6b:
1d:33:21:50:59:f7:9c:39:8e:bd:10:fe:aa:db:84:7f:bc:4f:
67:91:d7:df:20:85:35:22:0a:41:40:a1:4f:27:df:b8:48:d2:
05:e5:e1:e2:26:40:e7:78:96:44:24:2c:84:ad:42:7f:0c:6c:
2d:8b:77:5c:d6:03:bc:8d:a2:fb:5a:31:ce:d0:b0:7d:dc:03:
a2:25:18:0b:dc:44:ed:23:3e:f8:f7:b9:ac:04:b8:b9:37:2c:
a0:b6:fc:8e:51:17:25:de:0b:0c:5e:1f:19:af:a2:64:63:5a:
6b:f9:48:5e:e4:35:29:78:ac:f3:0f:c4:14:82:62:dc:37:21:
b2:03:6b:3a:a1:d5:5d:fd:75:13:16:08:ac:2f:5d:a8:96:c7:
89:57:e6:15:a8:30:3d:2b:47:c8:b6:58:3b:e2:5b:dd:1d:63:
31:ed:63:34:30:e5:31:b8:6b:85:fb:47:15:3e:7c:5e:3f:0e:
18:57:a0:e4:22:b4:d5:46:b1:3f:d6:c8:84:db:e9:e1:e0:28:
0c:c9:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:21 2025 by rpki-client