Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: S9bTaisNwMNHU53Tzwrpy7yIQGyoMrCgUOwqcDfY8jg=
Subject key identifier: E3:99:D2:BB:E1:54:7D:E3:ED:9A:BF:18:EE:D8:97:C9:0E:E8:ED:22
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 01976DAB64DACC756646CA9155212EE93EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 1033
Signing time: Sat 14 Jun 2025 09:00:38 +0000
Manifest this update: Sat 14 Jun 2025 09:00:38 +0000
Manifest next update: Sun 15 Jun 2025 09:00:38 +0000
Files and hashes: 1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: TFk6sfL7psjL/RD+IkmJShMkBkmbF5ytvXX7ObnpEAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:64:da:cc:75:66:46:ca:91:55:21:2e:e9:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jun 14 09:00:38 2025 GMT
Not After : Jun 15 09:00:38 2025 GMT
Subject: CN=e399d2bbe1547de3ed9abf18eed897c90ee8ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:37:3b:19:97:a4:42:1e:bc:ee:72:5c:e0:
e0:70:14:ba:d6:e5:f6:04:6e:11:63:c4:c3:a5:72:
4d:62:7c:7f:80:2d:ec:37:af:4d:2e:5e:f4:bf:ea:
94:b7:7a:63:25:cc:96:c7:e4:09:95:a8:25:4d:38:
2d:aa:43:aa:95:f0:38:bb:b7:7d:b5:45:f0:49:45:
17:1d:57:5d:00:78:6b:b4:7c:61:f8:f4:4d:c0:07:
16:4e:5f:3e:34:21:6d:65:5c:22:5b:c7:16:c8:a7:
64:c1:24:fc:83:37:66:f3:83:08:0e:c8:6e:82:44:
f5:f5:70:98:c0:23:9b:db:d7:b5:ca:9a:8d:fe:9d:
ce:3d:c3:af:b5:3c:27:51:bc:a8:fd:58:9f:c8:9e:
7d:96:17:78:32:bc:bb:ff:f4:20:49:bc:21:d6:ca:
fa:9f:b8:e1:a7:63:1d:b9:d5:50:d6:9a:19:61:54:
5c:4d:30:8e:15:a8:a1:9c:80:08:83:50:fa:af:f7:
43:96:3b:d4:15:d5:11:15:58:3d:b8:ab:89:b4:99:
73:19:62:a1:82:33:a2:78:f7:a8:9c:a9:85:10:de:
ac:9b:be:17:42:80:09:35:e3:32:61:5e:10:26:2d:
9d:ae:8d:a4:15:9b:86:7e:c3:73:89:7f:b2:26:6b:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:D2:BB:E1:54:7D:E3:ED:9A:BF:18:EE:D8:97:C9:0E:E8:ED:22
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:ce:90:19:e1:f6:2d:c9:bd:67:60:2d:f3:a3:86:8f:8e:
12:ef:21:e5:f4:eb:7c:87:98:97:c0:85:cd:b8:8b:a7:07:50:
f0:85:36:ab:ad:1c:28:67:04:d5:a7:42:04:8a:10:90:b4:15:
57:59:f4:f4:e4:a5:09:61:aa:c2:26:27:81:ae:2e:21:5c:1d:
73:61:2a:66:51:bc:a8:46:f3:8d:97:35:a7:d8:b7:e9:09:1c:
8c:65:ad:8d:04:d8:ed:4a:ca:54:dc:aa:90:f4:9e:13:5b:5d:
ee:1a:d9:59:75:aa:89:86:2c:41:c1:b4:7d:5d:b8:4c:b1:f8:
d3:cf:b3:07:39:6d:7e:d7:9e:14:79:13:06:bd:bb:4f:5a:3f:
10:a7:c7:f4:a8:ac:23:52:52:60:a2:84:e5:0d:11:48:77:a9:
84:01:f0:10:ac:7b:14:59:5f:eb:6e:88:4c:ed:e8:f5:ed:15:
2c:eb:e6:47:27:d9:44:09:37:c6:8e:dd:02:81:39:48:dc:71:
32:80:1b:5e:25:cf:bb:35:54:99:ff:83:ad:2b:af:b6:c6:7f:
9b:73:2f:f9:af:bb:8c:20:4b:fe:3f:df:50:31:25:35:90:25:
8f:43:f5:df:66:70:39:bc:43:e3:7a:50:96:4f:ca:aa:9f:69:
61:3c:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:25 2025 by rpki-client