Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: iHzoYubP+h3Iv3v6zh9PwL3/E5VHkuB4Xef2zTfROdE=
Subject key identifier: DC:B7:43:D5:0A:70:A2:1A:F6:89:87:79:95:82:27:E1:7F:C8:A6:74
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 01977866116BE09C6D66A3C342A7FB569147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0D45
Signing time: Mon 16 Jun 2025 11:00:44 +0000
Manifest this update: Mon 16 Jun 2025 11:00:44 +0000
Manifest next update: Tue 17 Jun 2025 11:00:44 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: dd5B/XHqFVthdySDbcmF2P2UHnVn50nrZFtv72EFo4Q=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:11:6b:e0:9c:6d:66:a3:c3:42:a7:fb:56:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jun 16 11:00:44 2025 GMT
Not After : Jun 17 11:00:44 2025 GMT
Subject: CN=dcb743d50a70a21af6898779958227e17fc8a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:a6:30:e2:a7:29:b7:fb:93:f3:4d:d0:cf:
6a:83:56:8a:84:a4:d8:a7:2d:bd:50:0a:8e:e1:bc:
f6:31:84:0a:b4:3c:19:c0:ed:53:0b:fc:14:6f:1e:
65:9c:7f:8c:cd:a9:ed:fc:2c:78:ce:54:b3:40:ed:
49:fb:77:92:a7:e7:40:8f:95:58:f5:06:6f:ea:ba:
10:39:4b:ed:5a:8f:b5:4e:cf:2f:9e:93:f4:7d:1d:
eb:3d:a5:ed:c5:f5:55:16:96:a5:81:ac:12:5c:4f:
48:bc:bc:c6:be:aa:98:0f:cf:1e:4a:88:be:90:b8:
15:0e:b6:8b:bb:69:21:e3:db:ac:07:b3:0e:ae:57:
36:93:b1:2e:6d:95:67:f0:72:c6:51:2b:f2:85:79:
2b:3d:c1:13:1b:c2:6c:bb:ec:8b:a0:df:f2:8a:9c:
ce:bd:be:a5:72:06:f3:c2:a5:04:3f:d9:fc:a8:33:
1c:3b:b7:c5:d9:30:ca:45:de:cd:ab:57:fc:35:70:
e4:a2:b0:fc:1e:7e:bc:e9:4d:fd:23:dd:44:06:41:
ef:06:49:99:29:25:77:30:51:57:03:70:e8:27:4a:
e0:ea:b5:9e:a4:0e:d9:6d:ad:57:6c:c5:5a:5e:ae:
e8:b3:8a:5c:d2:f9:85:08:4f:f7:59:7b:84:ed:f6:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:43:D5:0A:70:A2:1A:F6:89:87:79:95:82:27:E1:7F:C8:A6:74
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:cf:c5:5c:61:72:bf:43:24:43:ea:20:a3:af:08:32:2a:
62:f2:8e:4c:dc:0c:60:cc:a0:cf:68:3a:87:1d:d7:ea:57:7e:
31:e1:48:d1:b3:c8:ad:75:62:df:5b:1f:41:3f:59:32:74:72:
93:91:5f:52:98:15:05:58:fe:49:45:3e:1b:ee:03:79:f9:bb:
aa:4e:96:b8:4b:cd:35:73:4d:38:ae:df:7f:6a:b6:26:e0:93:
ec:cb:a0:44:d6:60:0f:1a:c1:ed:65:ab:09:90:16:1b:82:31:
73:9e:9f:cb:66:7f:e3:a9:cd:04:86:0f:55:ef:45:d6:61:ff:
0a:14:e8:7a:9c:cb:82:ba:26:6c:06:45:40:bb:73:32:07:68:
de:d0:48:80:d1:16:62:25:6a:9d:09:de:8c:5e:8f:8b:d3:b7:
e3:70:a6:ce:17:a3:0c:8b:e6:b1:ff:94:38:14:41:7d:27:ca:
8c:be:ae:af:07:b2:07:54:69:ac:5f:1f:c7:ba:08:98:8a:c8:
4a:bd:2e:1b:1c:68:30:e1:6d:0c:eb:af:4e:4b:7e:dd:d2:c9:
c4:a6:10:43:5b:93:40:19:f4:da:14:95:26:cf:6e:75:3d:8c:
b4:ea:dc:21:d6:32:6f:f8:89:5f:93:38:ab:aa:f1:bd:a9:ad:
48:84:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:28:25 2025 by rpki-client