Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: yxSRic4hU9DEOOf99MyUpZaTwykIgV0KJsUjL17GhfU=
Subject key identifier: 8E:29:6C:98:5A:C1:26:AC:08:91:F5:05:FB:32:20:4C:78:D6:82:E3
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 01976D0655DCFAE39937642DA1CCD57D8EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 0539
Signing time: Sat 14 Jun 2025 06:00:21 +0000
Manifest this update: Sat 14 Jun 2025 06:00:21 +0000
Manifest next update: Sun 15 Jun 2025 06:00:21 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: fp8nEHGMgQeokHFqf9S9MQoHdROiJqe5M6nllPiPlnk=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:55:dc:fa:e3:99:37:64:2d:a1:cc:d5:7d:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jun 14 06:00:21 2025 GMT
Not After : Jun 15 06:00:21 2025 GMT
Subject: CN=8e296c985ac126ac0891f505fb32204c78d682e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:b9:82:3b:e0:86:60:c8:a9:a6:88:ec:18:
6a:3f:ff:93:cb:77:a2:d1:b0:61:23:e3:81:e3:6a:
59:12:c4:9f:50:65:6a:3c:85:38:79:49:e8:26:24:
07:46:b1:0e:27:11:8b:21:24:52:db:90:c8:04:92:
20:ff:86:09:3e:c3:dc:16:8d:2b:29:24:73:80:89:
f9:fe:b9:d6:09:1b:2f:23:40:60:17:75:b5:59:94:
28:32:88:f2:57:d4:a6:40:52:b7:1c:c8:3b:d1:21:
5f:06:cf:3d:dc:5b:8e:0d:24:e6:0c:57:b7:38:17:
c3:bd:a8:a4:b4:74:fa:0b:36:1a:ff:48:f5:f3:6f:
7b:16:23:7f:88:12:8b:6d:ac:c4:fb:06:c9:24:d6:
4e:39:75:d4:95:cf:a6:a2:b9:4a:9c:df:c0:53:b9:
01:ba:0d:c5:70:ea:81:4d:a1:1b:11:d1:4e:aa:2e:
f7:86:13:27:a7:a8:66:fe:69:b8:d6:06:5d:da:b0:
30:59:e3:bf:dd:1c:b7:49:88:f2:10:ad:75:e2:31:
f4:ce:10:8a:41:71:3c:7a:f6:ec:eb:49:e4:fe:35:
88:58:21:44:73:ca:9a:fc:3d:cf:e1:02:11:f1:8c:
1a:1e:8e:1f:56:ac:1e:f2:d1:39:e9:a4:ee:dc:67:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:6C:98:5A:C1:26:AC:08:91:F5:05:FB:32:20:4C:78:D6:82:E3
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:65:d2:b7:ed:d5:d9:0c:3e:d9:d4:34:45:b4:a1:b7:32:
5c:ff:1f:d8:5c:0b:ce:ca:5f:cc:35:9a:ef:34:f4:76:4a:8a:
fb:f1:40:06:68:df:17:51:1e:dd:60:9d:56:24:b2:15:ce:3a:
36:eb:ee:3a:d3:3c:a7:6d:b5:d2:a5:f0:3b:2b:1f:1e:db:6a:
7d:79:2b:8c:9c:09:5f:84:19:e0:63:15:2a:ca:d6:1c:c7:61:
e1:7e:6e:6b:51:2d:d0:73:81:6e:8f:32:f3:f4:7a:0c:1c:e4:
5a:7b:08:3c:62:e1:77:f9:44:4b:d5:ec:d8:1a:3f:4d:d8:c9:
33:b6:37:c8:f1:e2:1d:98:78:02:50:11:bb:54:14:5c:78:e2:
9d:25:e5:c0:cf:71:40:7f:2f:72:26:71:8e:67:8e:d0:3a:03:
f7:64:59:67:e8:34:da:5c:b5:19:c9:f3:8c:17:0b:fa:4d:2e:
04:c1:de:bb:16:e1:30:8a:23:5f:f8:1e:b2:04:49:31:2b:02:
53:a4:70:e2:3d:59:2c:d0:1a:5a:1d:fa:99:2e:7a:86:19:67:
fa:27:b6:9b:cc:e9:1c:2b:b0:44:98:4b:ea:b9:4c:18:5e:72:
5d:82:a8:0b:d4:9e:49:5c:2c:9e:f2:48:99:61:97:a5:e8:39:
9a:2a:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:02:06 2025 by rpki-client