Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
File: NAahLsxTolGnXOe6yqyeQa7otMo.mft (raw, json)
Hash identifier: ZE+r+sC7hLsVNrQI2OWq6G+XYo2vo/F9e1wE0hkNxZE=
Subject key identifier: DE:B3:6F:C0:1F:80:1F:C7:DB:06:6D:6B:1C:D1:EE:69:9C:E9:EC:CC
Authority key identifier: 34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
Certificate issuer: /CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Certificate serial: 01977941F617D4C72249365C9189414F91B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 15:00:55 +0000
Manifest this update: Mon 16 Jun 2025 15:00:55 +0000
Manifest next update: Tue 17 Jun 2025 15:00:55 +0000
Files and hashes: 1: 9N71vXZ6iYuqWW-If0CgsO_Wjpg.roa (hash: plP8bbCihgTmT1C8mtLaGAuAfGPMZ93aIA1Z/LkRd90=)
2: NAahLsxTolGnXOe6yqyeQa7otMo.crl (hash: VkEcBaFoG89fGHIeMaXOw8A+uBBOphsuIs2c/ScTqfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:f6:17:d4:c7:22:49:36:5c:91:89:41:4f:91:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3406a12ecc53a251a75ce7bacaac9e41aee8b4ca
Validity
Not Before: Jun 16 15:00:55 2025 GMT
Not After : Jun 17 15:00:55 2025 GMT
Subject: CN=deb36fc01f801fc7db066d6b1cd1ee699ce9eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:c6:ea:4d:bf:92:d4:b0:5d:9b:50:44:66:
8e:93:c7:2d:b2:3b:02:e3:fb:53:94:0a:6b:fa:4f:
ad:e0:d1:30:0a:79:b0:e6:ed:ad:99:53:83:64:72:
f6:02:3a:6d:70:e4:15:45:14:5e:07:e0:15:9c:96:
cc:4c:44:a0:20:3d:51:01:99:03:5f:dc:4d:a4:2a:
e9:92:f7:db:47:55:1f:bc:f3:b8:d0:2b:d7:cb:0e:
f0:d2:b8:e2:a3:7c:f4:55:96:ff:7a:88:ba:88:03:
7a:33:49:c7:d0:0d:b4:9f:62:2c:b4:b2:d2:dc:fa:
65:7b:c3:41:da:0c:ae:cc:bb:8f:af:21:70:be:86:
fc:6b:d2:83:32:52:bd:1c:cd:7b:0e:ac:4f:83:44:
57:06:41:ed:dc:21:90:52:8f:c6:3e:7e:39:3b:7b:
59:f6:db:b9:af:ca:22:70:9c:3c:1a:fb:4d:c1:da:
69:0a:62:a7:d9:74:29:2a:59:f2:d3:4c:6e:74:4f:
d0:37:4f:dd:2a:d3:18:50:d9:c5:f1:47:3e:de:20:
4b:5f:30:35:c6:c0:38:dc:78:cf:bc:48:1c:1e:72:
4e:40:04:e6:bd:87:f5:31:14:e5:18:1e:d5:5d:6f:
43:89:45:61:8d:6c:a3:f6:f9:aa:10:32:01:2d:bc:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:6F:C0:1F:80:1F:C7:DB:06:6D:6B:1C:D1:EE:69:9C:E9:EC:CC
X509v3 Authority Key Identifier:
keyid:34:06:A1:2E:CC:53:A2:51:A7:5C:E7:BA:CA:AC:9E:41:AE:E8:B4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAahLsxTolGnXOe6yqyeQa7otMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/87f92e-4e67-4ac9-96c5-a779baaa7599/1/NAahLsxTolGnXOe6yqyeQa7otMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:36:20:e7:1a:17:90:82:8f:cb:78:ec:3a:ab:e2:b9:45:
82:51:b1:c6:a8:a7:0b:f3:70:5e:ea:a9:72:9e:1d:b0:63:66:
28:71:26:44:90:4d:64:d8:f7:4d:56:45:72:a8:6a:dc:ba:d5:
b5:d8:63:2a:73:e3:29:ec:f1:5d:89:b5:3b:5a:a1:25:c2:c6:
dc:b2:10:59:f1:ee:48:fe:21:68:eb:17:8f:ae:2f:da:af:63:
1b:f5:f7:e9:d6:96:01:32:18:13:4f:3e:02:75:24:da:c4:b9:
99:4c:a6:75:1a:89:01:e6:38:54:c4:ef:c6:e2:04:d9:74:fb:
3e:b7:a2:4f:7a:9e:91:41:be:9c:31:ad:15:00:78:73:62:1f:
7e:9a:d0:0f:d8:cd:ae:59:23:ea:ab:34:d3:48:c4:f2:f8:5b:
bd:93:8e:ee:46:00:87:d5:21:61:ab:f6:23:a2:45:17:4f:7d:
a6:9c:96:1e:46:77:58:d8:95:0b:5a:46:83:a7:09:9f:98:ae:
d3:6a:8f:dd:92:6a:d7:c0:af:68:b3:d2:ff:1c:7f:7d:40:e0:
8a:02:e5:4a:00:9d:70:da:86:e2:f6:d0:5a:e0:6f:ff:d0:a1:
d6:c4:65:48:a6:e5:02:3b:a1:50:8a:ec:95:28:c6:fa:0c:d2:
96:70:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:38:48 2025 by rpki-client