Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: TSdC9Q+spVBy3nUiX7zo1HxF/oquM0G3xYKsy3wmfYg=
Subject key identifier: C7:3A:14:39:B2:A0:08:8C:BB:18:2A:39:9F:C7:7B:8F:66:ED:AC:FE
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019777F82B23B672A100FCBD31A902D9BF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0E13
Signing time: Mon 16 Jun 2025 09:00:42 +0000
Manifest this update: Mon 16 Jun 2025 09:00:42 +0000
Manifest next update: Tue 17 Jun 2025 09:00:42 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: VWH47Nf3YznriXEbsLqcsmvwiCK7ur6DvbX1dcXp9bU=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:2b:23:b6:72:a1:00:fc:bd:31:a9:02:d9:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jun 16 09:00:42 2025 GMT
Not After : Jun 17 09:00:42 2025 GMT
Subject: CN=c73a1439b2a0088cbb182a399fc77b8f66edacfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:8f:0d:6a:d7:fa:9e:00:14:9b:56:cb:ba:
e0:8c:c9:d7:b7:32:d6:b8:1c:26:cc:c4:d8:60:6a:
5d:26:ac:c0:1f:f4:1d:33:8e:8e:6b:23:cc:b5:8c:
67:8a:83:e0:03:b0:d2:25:b2:35:2c:16:0e:4a:84:
7d:d1:51:3e:dc:a4:e0:af:e7:ec:5f:95:09:30:07:
f9:b7:46:9b:9c:5a:28:42:dd:f3:62:b7:ad:95:ce:
cf:47:77:16:79:3b:72:83:6b:c2:da:40:d4:32:89:
06:7a:11:ac:5b:ee:5f:0d:8c:c9:1c:d8:82:9a:ef:
5b:f6:8b:be:ba:04:92:61:bc:40:f1:d9:70:84:c3:
4f:5f:fa:b9:ea:c3:6b:5b:12:98:58:8a:ee:e8:9b:
f5:cc:d4:1c:ac:71:f0:74:ce:96:65:94:1c:9a:96:
f1:aa:32:36:1b:52:da:49:1d:21:38:20:d1:1e:f1:
cf:46:6d:be:fe:b3:ef:e1:8b:ea:4f:dd:82:36:e5:
33:0d:d2:da:12:62:24:cd:77:ee:1a:a9:e7:22:3a:
91:66:d7:6c:37:99:50:60:66:9b:95:6e:4f:b3:9b:
70:a8:37:b2:34:73:43:9b:13:e9:79:90:61:0d:88:
f6:f7:56:91:b8:d6:0a:d5:66:ed:4a:fd:d7:6e:b8:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:14:39:B2:A0:08:8C:BB:18:2A:39:9F:C7:7B:8F:66:ED:AC:FE
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:b6:5a:54:c4:90:7d:e0:66:87:24:1e:37:da:db:c9:ba:
f8:64:7f:68:f4:cb:3e:08:1e:66:62:13:72:44:2f:0d:1b:09:
c5:b8:59:8f:bc:36:60:7c:1f:b1:2b:91:b6:c5:26:09:2b:85:
0c:0a:e3:d7:de:bd:5b:3e:5f:0c:aa:b0:d6:34:94:c5:33:e0:
c8:50:b3:57:ca:6c:79:a3:fa:3c:89:14:f4:f9:30:18:22:8e:
d6:31:69:bc:bf:72:09:db:a7:6a:36:ad:2b:16:05:0e:cc:01:
63:57:75:9d:51:d8:15:4a:8d:9f:c2:d8:54:b0:62:42:88:db:
6d:f4:36:21:99:93:9b:2f:1b:05:1b:a0:13:55:ec:ad:a8:b4:
fe:0a:7c:36:21:00:8a:b9:88:b9:a6:0c:12:6a:a6:d2:86:84:
be:19:cf:6d:e3:7d:d0:a8:55:00:5e:e0:c2:be:e0:db:d1:f9:
fd:e9:e0:cd:cb:ee:23:3a:78:f5:55:bd:e2:18:47:45:56:d3:
ea:02:5b:5f:7b:71:e6:f1:13:1e:7e:5c:6f:36:02:d8:bb:1b:
c2:eb:ed:15:4c:aa:17:e6:50:9b:cb:99:94:fc:2a:92:1a:b6:
89:66:9e:d7:c8:02:47:97:b2:42:bd:c8:1f:10:69:0f:08:76:
3a:40:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:26:55 2025 by rpki-client