Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: 5Vpu2+zjk5j4pDMWnZIcZK1WSWKntRc25dXG/YV70ek=
Subject key identifier: DF:BE:8E:1A:63:3A:35:F6:A0:7B:F9:96:40:76:52:D5:E3:DB:66:55
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 0197813244657CD16D18B1C87579F5C9E4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 156E
Signing time: Wed 18 Jun 2025 04:00:44 +0000
Manifest this update: Wed 18 Jun 2025 04:00:44 +0000
Manifest next update: Thu 19 Jun 2025 04:00:44 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: EVAqKMw1VQTMJKeMIvrqol1+UQOYvi4Q/AaRod7gpoc=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:32:44:65:7c:d1:6d:18:b1:c8:75:79:f5:c9:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Jun 18 04:00:44 2025 GMT
Not After : Jun 19 04:00:44 2025 GMT
Subject: CN=dfbe8e1a633a35f6a07bf996407652d5e3db6655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:c6:67:0c:2b:7e:56:9a:87:58:00:7b:cf:
60:99:06:2e:ec:97:dd:30:6a:23:0a:a4:b9:d1:02:
05:ce:9a:8a:e6:7f:b9:22:03:dd:25:a4:86:67:b3:
33:cd:4a:08:2e:f3:71:24:a4:18:9a:b5:29:32:b0:
63:55:5e:b9:bd:3e:e4:08:69:55:ab:10:e5:8a:2f:
44:06:6c:7c:93:58:01:96:80:2f:ba:70:e2:98:aa:
7d:30:f7:9b:f7:8f:2a:be:7c:1a:87:1f:b5:7b:21:
ae:54:90:44:2c:6c:de:0c:ab:70:b8:5a:ad:47:2e:
dd:ef:66:6a:89:95:14:c7:83:0f:41:7a:e1:26:54:
c9:a9:c3:07:4b:8f:0b:22:ff:83:92:5c:82:1a:38:
ac:46:ab:41:81:1c:ef:95:ca:02:e1:64:25:b5:e0:
70:b4:93:32:55:92:c9:62:cd:86:d2:4c:68:8c:8c:
af:05:ec:af:33:cc:82:70:af:d6:d2:51:1a:f2:b5:
08:be:f7:6f:0c:2b:24:53:a5:53:cd:f2:e6:a8:4b:
cc:4e:3a:d4:ab:1b:ec:77:12:b7:9e:e2:e1:13:c6:
ce:99:8d:78:74:7d:9f:49:32:33:1a:37:95:58:2f:
39:0a:6a:69:9b:00:b9:14:6e:6b:76:f2:8a:2c:f0:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:8E:1A:63:3A:35:F6:A0:7B:F9:96:40:76:52:D5:E3:DB:66:55
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:68:2a:fd:bd:72:e2:32:e5:89:f3:c4:e2:b9:e4:62:fb:6f:
e8:23:6e:cc:9b:40:0c:73:5c:03:8b:c9:bc:f8:34:72:13:34:
b7:c5:42:ad:9a:b3:21:1f:c4:ba:7f:79:31:29:1a:40:56:b7:
f7:b7:07:20:6b:a5:ea:f6:5c:68:e4:d2:82:d3:3b:91:b9:ce:
a4:04:48:61:6b:a8:c3:49:c3:c6:db:58:a2:8f:03:44:8d:eb:
7f:2c:4c:f3:9d:08:fb:6e:fd:51:3e:56:28:6b:90:86:63:b4:
05:6b:0c:81:6a:38:dd:8d:55:6e:cd:d7:41:a1:6d:06:78:4b:
74:c6:e6:73:cf:61:08:f0:f2:85:b6:bb:92:82:2e:38:d4:63:
77:39:0e:df:05:07:6f:42:cf:f7:97:5b:87:bd:12:ee:b0:85:
06:cc:d0:72:e8:33:95:4d:4a:82:a9:e9:f3:c7:5d:a0:a6:39:
75:4d:cb:7f:e7:31:0a:64:0c:4d:1f:d3:6e:db:cb:75:c0:09:
2e:c9:ef:63:0d:e4:10:ce:80:10:6d:66:99:ba:92:4b:3f:a3:
65:2c:9c:cb:c6:c6:57:0c:7f:4d:45:82:1c:1c:c3:2a:29:f0:
f4:87:1d:e3:39:82:56:29:e0:ee:c3:79:05:1a:a8:50:2e:40:
f3:ac:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:46:37 2025 by rpki-client