Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
File: NJI6ntps8kDsh5WeHcONNh951ho.mft (raw, json)
Hash identifier: Q9CLe6/dEtQgj/viCq2whpaDVmq+UcmjOB4GkDP7koM=
Subject key identifier: 39:1A:0F:7A:68:EF:F5:1D:D2:F4:B2:B0:83:17:94:50:70:25:90:CD
Authority key identifier: 34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
Certificate issuer: /CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Certificate serial: 01976E86FA0A1BA5ECFC42B4030F4B61D0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
Manifest number: 039F
Signing time: Sat 14 Jun 2025 13:00:28 +0000
Manifest this update: Sat 14 Jun 2025 13:00:28 +0000
Manifest next update: Sun 15 Jun 2025 13:00:28 +0000
Files and hashes: 1: NJI6ntps8kDsh5WeHcONNh951ho.crl (hash: EnHpn3ibtqIZwjWg9eVCX+ETWR1BWz1GhASL0vtOLow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:fa:0a:1b:a5:ec:fc:42:b4:03:0f:4b:61:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34923a9eda6cf240ec87959e1dc38d361f79d61a
Validity
Not Before: Jun 14 13:00:28 2025 GMT
Not After : Jun 15 13:00:28 2025 GMT
Subject: CN=391a0f7a68eff51dd2f4b2b083179450702590cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:93:03:29:10:86:ee:c6:9c:7f:d6:c7:e4:
84:5c:82:e1:c9:60:87:42:f3:64:ec:78:04:2b:4e:
e2:5a:c7:a7:a1:89:19:12:9f:92:99:ab:de:e8:0e:
38:28:68:60:c3:74:22:10:9c:48:c5:b5:40:2c:22:
0a:a1:86:78:07:8a:61:a7:61:d8:9e:b2:6b:d9:31:
7e:b7:03:5f:b8:ff:76:76:67:f9:e9:1c:08:db:38:
7f:e0:12:3e:2e:b8:04:bc:3a:51:52:61:12:30:70:
88:7d:a4:2d:9d:3a:b0:e0:8e:1f:95:92:de:fc:33:
57:be:72:9c:51:5e:46:52:d8:cc:76:ae:17:c8:b9:
c1:cd:55:c1:49:89:a0:dc:08:e0:ba:43:44:9a:2e:
98:5b:41:84:d2:ed:11:35:c9:00:ee:4b:40:0b:49:
6e:53:50:21:e8:5f:f5:00:15:59:d7:57:7e:b4:0e:
51:7b:d5:84:75:58:f0:fb:bb:cc:64:2d:6c:e9:3d:
6e:e4:88:91:c0:d6:3c:84:aa:d6:93:64:fd:e6:58:
e5:e6:5d:27:ff:04:27:88:c3:54:f0:aa:31:51:9b:
57:6f:36:8b:6e:08:68:e1:b8:b5:56:09:a7:86:bf:
62:81:79:94:91:07:30:28:2b:82:57:2e:0d:1a:c3:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:0F:7A:68:EF:F5:1D:D2:F4:B2:B0:83:17:94:50:70:25:90:CD
X509v3 Authority Key Identifier:
keyid:34:92:3A:9E:DA:6C:F2:40:EC:87:95:9E:1D:C3:8D:36:1F:79:D6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJI6ntps8kDsh5WeHcONNh951ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/043d5c-db3d-4445-b071-1f8f3ad04680/1/NJI6ntps8kDsh5WeHcONNh951ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:ad:6d:14:f6:ca:91:c6:86:29:4e:4d:e1:f3:f4:bc:5f:
7c:47:90:0a:8d:f5:9f:d9:1e:10:0f:8c:f4:ab:45:02:85:24:
1a:4a:1a:0c:a0:2c:ee:25:56:b8:29:58:32:d8:8a:ea:9a:32:
ad:11:2e:80:1c:30:40:00:59:d8:55:c1:76:e5:3c:00:89:d5:
84:66:43:9d:0e:d3:0c:77:57:a4:4b:4a:79:dd:8e:6c:3b:a4:
86:80:76:f3:f5:a1:c4:ff:df:77:47:04:c1:1f:a5:66:8d:6b:
85:71:7a:ef:04:0e:e7:f9:e5:e8:ff:f2:da:77:1d:bd:67:f9:
58:7c:59:07:de:d0:55:fa:a3:34:f8:1f:5e:6d:2c:1c:03:ad:
a4:94:0b:68:03:0d:25:27:14:c2:3f:cc:a2:df:c4:c0:20:90:
32:ec:d1:ce:36:6d:a0:df:16:0a:31:53:ae:d3:e8:fb:af:d8:
24:46:d4:ad:66:7f:43:f1:e6:20:aa:38:e1:2a:38:d3:2a:04:
86:5f:f9:10:69:5c:b9:06:b3:25:12:71:a8:84:c7:f4:02:e5:
f9:1c:c8:82:b5:f0:75:06:c5:07:99:52:4d:5a:d8:52:71:83:
fd:c9:8c:0c:93:dd:19:0c:5e:04:bc:97:2f:ae:ed:08:93:46:
5b:37:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:19 2025 by rpki-client