Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: hdbEG/cMhyUJMriQrM++k5XLxP7OxWnGqtnGEb4xA4M=
Subject key identifier: 06:99:58:93:B3:67:C1:47:C1:3F:25:F7:DA:01:00:C3:5B:14:71:BF
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 019770076AC2D87B5F488E6CC0C0C9C81E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0F57
Signing time: Sat 14 Jun 2025 20:00:23 +0000
Manifest this update: Sat 14 Jun 2025 20:00:23 +0000
Manifest next update: Sun 15 Jun 2025 20:00:23 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: C50Oc9+/uz2vQ0zi1p0eeW2S1DtdPAlQ9viTQkRiTx4=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:6a:c2:d8:7b:5f:48:8e:6c:c0:c0:c9:c8:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jun 14 20:00:23 2025 GMT
Not After : Jun 15 20:00:23 2025 GMT
Subject: CN=06995893b367c147c13f25f7da0100c35b1471bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:e2:ff:51:58:c3:7f:f8:b2:ea:bc:89:d0:
4b:a8:22:ac:89:3e:fb:4c:ec:18:3f:17:8b:ed:a9:
75:79:54:82:4c:60:a2:4b:f6:ed:7c:dd:4c:b5:bf:
fc:5c:60:f3:4d:bd:eb:e1:f3:b1:e2:71:8b:49:30:
d4:ae:8f:39:74:98:cf:cf:a9:58:a7:86:0e:f4:69:
92:4c:36:4d:27:05:60:38:f9:4b:2d:2a:a7:c8:95:
05:28:9c:9e:e0:13:84:58:73:1c:87:66:7c:35:c6:
25:62:c2:c8:83:66:8a:df:f1:e0:33:af:1a:61:c5:
53:01:02:0c:35:15:4b:ba:62:d1:64:18:51:2f:b7:
31:24:c4:e0:80:7f:67:c8:79:61:9d:74:b1:61:32:
95:4f:31:8d:62:6f:a9:cc:cb:5a:a0:b1:f8:d3:e4:
bb:71:d3:85:1b:c5:bc:15:f0:5f:5e:56:f0:18:b2:
93:58:34:6e:63:5a:de:91:c5:39:82:f5:d2:f3:cb:
b1:fa:95:f9:53:10:85:16:ba:4c:ca:f1:8b:f3:0b:
2e:40:48:ca:ba:0c:4f:da:4d:8c:4c:33:ec:52:1b:
77:8a:a9:cf:ed:b0:28:b6:96:89:cd:4b:88:db:6d:
2c:56:ba:34:e1:e3:27:95:0e:bf:df:23:1c:75:9a:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:58:93:B3:67:C1:47:C1:3F:25:F7:DA:01:00:C3:5B:14:71:BF
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:c4:72:81:c3:c1:af:13:fa:fe:c7:30:b1:cd:d4:40:e9:
4b:c8:5d:17:22:a2:52:e6:e9:8f:ec:cd:b9:1e:c7:f0:e2:77:
a4:a0:29:19:50:b5:c9:6a:5e:85:b8:cf:d3:28:f9:e6:04:9a:
b5:2f:24:72:c1:d4:70:b7:fe:54:11:38:a4:f9:97:63:dc:1c:
43:13:f6:d7:c5:5a:66:a3:44:34:fa:2c:95:0e:c9:ef:42:52:
89:47:bf:b5:8d:db:26:19:11:8a:b2:1c:79:7b:ea:c8:14:4b:
ce:86:58:f4:3f:b5:23:8d:db:51:7d:ca:00:39:12:e7:61:1a:
f0:92:e5:df:43:11:22:51:f6:aa:4a:96:75:0d:d8:97:c8:9f:
67:c8:49:5e:ae:20:75:e1:2b:bb:33:74:ca:61:cb:fb:3f:b6:
f3:a4:5f:f5:5d:a9:82:9d:83:dc:81:a0:78:32:f1:0f:ce:e5:
9b:bb:1b:a8:9f:61:9d:01:fb:45:86:7f:39:99:b9:d7:95:6d:
5f:36:87:99:40:e1:13:22:62:99:c8:83:fb:ee:47:b1:d3:96:
d7:72:f7:4a:1d:b1:52:05:68:65:88:e3:2f:14:a9:90:46:16:
4c:b2:f2:d9:8f:34:8f:ef:c2:2c:5a:ea:e0:06:44:c7:9f:d6:
f5:1a:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:36 2025 by rpki-client