Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: NWp/NGxVHTROYL/+J95OtGRlvQpQfJlxmJRbGw0VaP0=
Subject key identifier: 41:5C:8A:A6:43:9F:15:BA:1C:5B:A3:B3:1D:C3:AD:25:3D:67:AC:3A
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 01976CCF60A7F112BD1C9F3234FE905882EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: TpRSJ+ZwGjfIti0dv5GpV8z62nHJTSTfTH2XCg2se+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:60:a7:f1:12:bd:1c:9f:32:34:fe:90:58:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=415c8aa6439f15ba1c5ba3b31dc3ad253d67ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:ec:27:34:e0:ee:ab:fa:1d:e7:3d:94:a2:
9e:8b:57:1a:2b:e8:ae:e0:92:47:20:88:41:af:07:
31:79:73:0e:89:d0:ea:a1:0b:28:ee:4b:91:e3:62:
7a:91:2e:a3:13:73:33:a8:47:52:2b:5f:57:a9:50:
25:c9:cd:44:aa:38:57:cd:0c:be:d3:ab:fc:ab:bd:
9d:96:f9:9c:7f:4f:b7:0c:e5:16:9e:1e:99:e5:7a:
9e:7a:05:0b:4c:d7:50:bd:2a:52:e8:59:52:2f:d0:
20:d9:d8:5e:67:f6:3a:e4:e6:cc:fc:7e:d6:03:55:
4a:88:35:dd:20:74:46:f2:3e:21:86:45:4e:15:ac:
c4:7c:20:e0:38:c3:0a:1d:e5:34:52:a4:61:5d:bd:
90:87:0d:d7:02:6e:9c:7d:5f:b2:d1:7a:36:78:a7:
9b:f8:9c:98:e9:82:3b:9e:3f:b1:b3:a3:e0:82:27:
02:13:49:9c:89:b9:19:f5:8d:21:08:f7:fc:da:c6:
58:36:aa:6f:15:77:2d:e2:fd:f4:02:46:7b:00:04:
b9:5d:97:f8:66:4d:d1:48:0a:c8:91:95:3e:75:90:
61:65:4a:8b:3e:29:77:fa:aa:4c:38:04:06:60:d5:
59:3b:74:25:6b:0f:48:03:a3:7a:6f:29:3b:4c:c5:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:8A:A6:43:9F:15:BA:1C:5B:A3:B3:1D:C3:AD:25:3D:67:AC:3A
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:dc:f7:69:a4:fc:7d:9e:4c:59:d8:a5:53:9d:28:13:d7:
5e:3b:9b:3e:27:7f:f2:22:69:1e:7c:52:15:cd:eb:6f:fd:27:
51:15:14:a1:cb:e7:c2:79:0a:5e:63:e7:a9:ce:fb:6c:30:dd:
68:52:db:6c:9e:5d:91:d3:4b:e0:2f:4a:2a:b1:f0:f4:92:37:
a0:5f:d3:cc:ba:55:b3:49:eb:3b:c8:30:17:2c:7b:e0:48:9b:
06:49:06:b6:5b:5c:43:39:51:67:4b:d6:93:61:bf:6f:bc:73:
7e:17:20:99:6c:f3:51:9c:7c:23:fe:ab:a6:5a:53:ba:c2:e7:
41:70:10:68:aa:42:4c:87:6c:19:9e:22:53:3d:1a:e5:fc:01:
23:80:96:37:36:54:7f:4f:68:98:01:47:e2:51:e5:3c:5b:a2:
62:9c:87:b4:47:49:5b:17:39:e1:75:f1:30:3b:82:8c:23:a1:
32:36:33:b6:29:d2:76:97:97:bd:be:0f:ad:0d:bb:53:ee:89:
64:47:0a:da:3d:03:43:8b:20:02:c9:c8:83:a9:f6:15:36:c4:
26:15:da:15:66:90:06:fc:2f:40:e7:ab:f9:a4:45:09:4f:64:
e8:5a:13:2e:a3:fa:f1:f8:e7:89:9d:6d:0c:35:c5:30:e5:d0:
70:4d:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:50 2025 by rpki-client