Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: TfjFWPBYK7sPhkEFTA8zyRV4tm3XecFEb60UN5FKGPw=
Subject key identifier: 63:17:07:ED:1F:0A:D0:42:97:84:AE:74:9C:70:8D:42:0D:E5:01:AF
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 01977187E98C3DAA39BA9BD90AC3C725FC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 1223
Signing time: Sun 15 Jun 2025 03:00:21 +0000
Manifest this update: Sun 15 Jun 2025 03:00:21 +0000
Manifest next update: Mon 16 Jun 2025 03:00:21 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: Nx5GNM9KpylW++IUPQcdZxXL/A0n9zp9oFgshQvH0/k=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:e9:8c:3d:aa:39:ba:9b:d9:0a:c3:c7:25:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Jun 15 03:00:21 2025 GMT
Not After : Jun 16 03:00:21 2025 GMT
Subject: CN=631707ed1f0ad0429784ae749c708d420de501af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:ea:6f:af:fe:5d:09:12:38:68:3c:60:2e:
eb:75:fe:82:77:e8:0c:0f:ec:e7:03:ff:bc:ec:f6:
5e:06:4b:6b:72:d5:27:df:ce:75:6c:39:92:91:0d:
48:d8:10:02:4d:94:12:0c:fc:ab:07:24:ed:17:8b:
21:3d:7d:75:79:70:c1:41:d5:8b:1e:86:5e:fc:82:
d9:ef:21:5c:d1:7d:16:5c:b5:13:01:1f:2b:31:04:
13:cf:9b:fc:e4:60:58:9f:7a:2a:ec:3e:b0:82:bf:
4c:b6:be:7d:07:e2:c5:0b:47:db:d4:8d:87:94:58:
ad:61:36:d2:ed:71:7e:d3:16:d2:cf:7d:95:d7:8f:
a9:fd:9e:e6:05:75:64:7a:54:7b:27:95:6f:e1:b4:
a1:84:6b:96:19:ca:60:b7:c8:dc:a2:c2:17:f8:cd:
03:42:22:36:ad:f8:26:68:e5:0a:a2:ee:8d:42:88:
dc:87:6e:33:82:87:8a:f2:67:79:47:b8:65:0c:af:
6f:3f:21:09:b4:2c:65:f1:c2:e5:6e:82:65:50:8a:
05:7c:a4:d6:34:ac:90:6b:eb:79:c5:99:fb:8a:8a:
ce:f0:60:33:62:b5:7c:7c:69:64:b8:79:c4:5c:d8:
94:42:37:81:6f:41:01:fd:c8:05:7c:7a:f7:08:5b:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:07:ED:1F:0A:D0:42:97:84:AE:74:9C:70:8D:42:0D:E5:01:AF
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c3:58:af:2b:c6:71:e5:76:b2:90:bc:1c:bf:6c:f3:9b:3a:
e8:8f:67:9e:fe:b5:97:d7:b9:3e:a9:31:aa:31:1c:e4:b6:74:
28:00:19:42:59:69:9e:02:a2:89:94:12:56:ed:34:2a:46:4d:
8f:c4:af:af:3a:2d:b9:ec:ca:1a:e4:39:82:f4:e5:03:e9:49:
19:cf:af:b2:10:b5:c4:fa:c6:11:47:17:ce:95:9b:47:2f:4e:
63:9e:0b:00:27:47:25:a4:0b:d6:26:e8:8f:ac:fc:98:ac:fe:
aa:f9:19:7c:dc:b2:23:de:49:dc:5e:37:e6:2a:ac:f4:89:5b:
17:5a:77:60:0c:8f:0b:71:d1:fd:19:db:12:c2:18:54:7c:74:
8b:a8:99:59:53:f6:db:e1:b1:3a:50:ee:be:b0:9e:61:28:8f:
11:de:af:08:32:3c:17:96:24:43:6c:7d:c2:d6:50:50:88:83:
f2:e5:17:f2:6e:37:3e:90:72:85:84:8c:77:fa:65:37:86:52:
97:55:68:ba:17:b2:bd:0b:62:75:b5:cf:7f:30:a7:30:37:4e:
ee:c5:87:ff:36:70:aa:cb:b3:ab:23:36:3e:1f:a2:38:b4:e8:
b0:2e:65:9b:de:19:8a:94:f7:eb:09:fc:d6:be:6a:51:59:fa:
7e:4f:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:41 2025 by rpki-client