Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: AY2YdL/BbbzWSb6YzaRiVOY9gKcn3hiGsElvWaWiPDU=
Subject key identifier: 34:60:C3:AD:86:F7:95:7E:CF:EB:8C:02:2F:29:62:53:53:42:7D:80
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 01976960E88A2EA59497FA7BB1531416BCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 029A
Signing time: Fri 13 Jun 2025 13:00:48 +0000
Manifest this update: Fri 13 Jun 2025 13:00:48 +0000
Manifest next update: Sat 14 Jun 2025 13:00:48 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: aKceSmjRsPtflEBYaqli2u9zay8yvyIdUcgbhyVxwzY=)
2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e8:8a:2e:a5:94:97:fa:7b:b1:53:14:16:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Jun 13 13:00:48 2025 GMT
Not After : Jun 14 13:00:48 2025 GMT
Subject: CN=3460c3ad86f7957ecfeb8c022f29625353427d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:de:4d:e7:3d:86:2e:3d:0e:61:be:39:0e:
6c:57:a1:b5:32:a9:2e:aa:fb:4e:8d:54:14:9e:41:
a9:3b:b5:42:51:85:d2:fe:7e:80:e9:bc:07:9d:32:
32:cc:58:54:90:98:fc:c5:aa:ff:de:d0:f1:99:53:
8a:6b:40:1d:75:52:a6:86:e2:08:3e:52:b8:aa:ff:
48:f7:b0:94:80:24:a3:be:bd:79:f9:f9:93:d6:b4:
06:7b:41:53:2f:a6:0e:19:9e:c3:fd:b8:5e:d6:fe:
eb:52:09:d0:a6:fd:5c:f7:e9:0f:e6:aa:72:a0:c1:
f9:9e:c0:52:d3:7c:6d:41:a7:53:83:fa:ef:e1:e3:
c6:69:34:53:a3:5b:ca:2e:b7:cc:2a:9b:e9:d7:52:
79:2b:5d:48:82:e9:eb:08:f0:36:47:8a:95:57:9f:
23:f5:ef:4e:0c:43:1d:16:81:25:dd:0e:38:2b:c4:
6d:7a:d1:a5:33:1c:e6:ff:f5:54:ad:ec:02:e5:ae:
36:2c:26:35:81:82:f5:36:86:a3:4b:fb:02:bb:08:
35:cf:dd:42:b0:a5:f5:e6:b9:6f:76:69:a9:c4:23:
6b:a2:c6:4f:8b:d0:40:f2:4d:b4:32:8e:18:ca:ee:
6e:7b:c3:2d:2b:41:d8:54:a2:f6:c7:28:54:f3:62:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:C3:AD:86:F7:95:7E:CF:EB:8C:02:2F:29:62:53:53:42:7D:80
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a8:50:bd:b9:1b:56:88:d5:bf:8f:6e:51:4a:92:3a:a6:48:
57:02:1d:ba:1b:b1:0a:03:4a:fa:2a:9c:f3:6d:56:4e:56:9d:
2d:48:58:4f:22:3b:ff:4a:4e:76:5e:4f:2c:95:26:93:85:4c:
21:ac:33:51:2b:3c:ab:7d:6f:5d:47:f4:2d:f2:67:a6:59:a4:
fa:f6:62:40:be:c9:28:0e:e1:4b:90:66:62:27:9d:89:08:bf:
7f:6a:fb:c0:6a:a5:6a:c5:79:9a:d1:34:fa:d8:be:64:8a:f3:
b4:f1:17:94:86:16:e4:71:44:50:a2:2e:94:28:8f:c8:c9:33:
2a:c9:cb:a5:8c:4f:96:b6:fc:57:fa:1d:fd:78:c5:02:8d:06:
e4:ca:3d:88:48:19:80:43:40:8a:29:ed:01:8a:35:4c:c5:74:
15:ed:c8:78:bd:49:97:d4:a6:c6:f9:3d:6f:63:b9:cd:4e:d2:
f5:e4:ff:d0:b8:69:42:07:8e:fc:95:bb:49:3f:a9:d3:49:1d:
3f:8d:f9:a4:df:41:63:41:0f:ce:cb:16:4b:71:62:db:4d:cd:
1e:49:b2:70:09:af:3e:2a:86:a7:71:64:28:82:fe:70:57:ce:
08:29:d5:96:0b:88:54:ad:df:28:95:1c:fe:be:ac:7a:52:e1:
40:c1:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:44 2025 by rpki-client