Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: DSIft/O/Cm+dUTBF8UNLqJhK8lFmxxqffZAckXLKBnE=
Subject key identifier: 12:52:81:BB:33:20:F5:4E:DE:A5:5D:AF:7A:B9:CC:CE:6A:EB:41:B1
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 01976BBD4EE61900B08A0F2B586CB9F9163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 10D3
Signing time: Sat 14 Jun 2025 00:00:57 +0000
Manifest this update: Sat 14 Jun 2025 00:00:57 +0000
Manifest next update: Sun 15 Jun 2025 00:00:57 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: X4vpAuooZoYHHoP3XUMdfnWMJ/f5s2SYlTX5/6ob7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4e:e6:19:00:b0:8a:0f:2b:58:6c:b9:f9:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Jun 14 00:00:57 2025 GMT
Not After : Jun 15 00:00:57 2025 GMT
Subject: CN=125281bb3320f54edea55daf7ab9ccce6aeb41b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:69:a3:79:52:c7:01:0e:6a:67:f1:65:46:
38:26:df:92:95:37:6c:91:42:68:c9:68:39:cd:9a:
66:e3:e7:c0:e5:d4:f2:cc:3c:74:c2:b3:69:24:72:
44:d2:fd:ee:f1:c0:3e:88:5f:0e:79:82:23:2d:49:
fd:2e:ba:42:74:49:57:7a:f3:69:19:c3:2e:61:90:
f9:16:01:3b:ca:67:ef:93:93:4a:71:31:80:f1:e7:
a5:f5:d8:34:ae:77:67:74:1e:c5:37:22:ef:49:8f:
92:73:13:ef:73:32:6a:d9:59:e8:12:c0:7c:89:ac:
ad:06:ab:81:0c:30:f6:18:a2:ca:10:e1:5a:aa:6b:
50:1f:aa:cf:d3:a1:e3:92:18:87:bc:cf:1c:80:fb:
03:3b:60:c9:a9:0a:14:39:c5:b4:2b:e5:13:03:b4:
5c:44:78:80:e6:d3:03:8b:c8:51:59:7c:c8:fb:71:
4b:5e:c8:3a:b3:fd:6c:7e:22:17:f4:45:1f:d5:d5:
a9:10:f3:eb:36:ef:ed:fd:68:07:8f:50:a0:89:5a:
12:13:bb:7b:52:81:56:95:31:28:af:d5:c8:86:84:
32:6b:a9:63:d7:91:c0:10:6e:61:49:f2:54:f2:a0:
16:34:d2:98:cd:38:72:26:8d:90:8a:c7:18:f1:a2:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:81:BB:33:20:F5:4E:DE:A5:5D:AF:7A:B9:CC:CE:6A:EB:41:B1
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:91:df:29:2e:cb:46:cd:8f:95:38:fc:c5:c9:b8:20:8e:
ae:75:e9:f2:ae:d1:84:45:87:33:04:87:98:15:8b:3a:74:f7:
61:e7:ab:0c:58:2f:fe:a2:73:53:b1:fb:05:af:6b:58:8f:5d:
69:0f:48:26:68:79:be:d1:85:f3:fc:c3:1c:6d:4a:f5:81:1e:
aa:30:71:99:3e:0f:18:ab:f4:17:d6:52:4e:75:9a:d0:b3:77:
a1:7c:80:a6:b8:2d:d9:bc:ff:c2:66:aa:e9:f1:88:34:e9:77:
d8:3e:c9:67:77:01:69:df:90:6a:b7:79:5f:b8:84:6e:ed:46:
b6:b1:12:a7:ed:73:e6:f2:09:0c:e6:4b:9d:97:01:70:56:63:
f9:15:72:a7:ea:53:4b:a8:33:a0:06:9e:1e:28:17:db:8e:72:
52:93:24:66:f0:c7:17:8d:16:9c:20:7c:60:89:74:a1:c1:55:
24:1d:de:bf:c0:7f:62:99:9e:5e:a1:ea:e3:6f:79:77:cb:6a:
3b:18:09:ca:0c:77:f8:2e:31:ac:40:85:68:76:8d:e6:1f:67:
ac:2a:68:d7:2c:02:59:d7:4b:d5:23:dd:ad:36:b6:35:c8:74:
22:92:a9:06:55:55:3b:8e:c5:da:2a:02:a7:6c:e0:ce:74:2e:
6f:f1:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:58 2025 by rpki-client