Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: 0+sw+kY/yQ0I6Dk4T2kdcx5dIj6gEivleSn9ngTOcuo=
Subject key identifier: D3:9E:34:31:F0:E2:50:CC:AA:4F:07:9B:E0:56:9C:5B:D4:4C:C7:0B
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019788473E3BFA6CD9129FF6B5B3B98BA363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: EB
Signing time: Thu 19 Jun 2025 13:00:59 +0000
Manifest this update: Thu 19 Jun 2025 13:00:59 +0000
Manifest next update: Fri 20 Jun 2025 13:00:59 +0000
Files and hashes: 1: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: IsC6AvMsZwIy3zYxEt9vYkununY72n4G2giGHVJbD+Y=)
2: NkwYBQBRVrFsj-xUN7Cv_m6lwSA.roa (hash: gjr66sRTq1kait53s7UP3QklI69yHhHqmsXxB/qlKCc=)
3: V4v-VxZ-7OAHRrY5C50VFKZqDnc.roa (hash: 6nRk9oygeeOeb7rjfRo1H5M200eI6zr7Rlb7ujC3GZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:3e:3b:fa:6c:d9:12:9f:f6:b5:b3:b9:8b:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Jun 19 13:00:59 2025 GMT
Not After : Jun 20 13:00:59 2025 GMT
Subject: CN=d39e3431f0e250ccaa4f079be0569c5bd44cc70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:f5:c8:81:cc:fa:a6:a3:34:9b:fd:08:5f:
77:34:5f:10:5f:ee:6d:cc:71:8a:59:92:d2:fa:eb:
b6:4d:8f:30:36:e5:0e:47:4f:b4:4d:d3:f6:70:71:
53:ab:f5:3e:b4:99:65:ce:83:51:7c:66:e8:c2:de:
5e:d8:e1:65:d3:9d:f3:dd:c3:0b:f7:49:e7:3d:1a:
62:f6:82:7f:fe:c0:e3:83:36:12:b3:39:aa:3e:46:
86:c8:a8:7c:3b:69:92:12:8c:f7:08:c5:dd:26:55:
09:18:cf:f1:68:69:86:8b:64:a7:9e:3e:ef:81:71:
74:ed:41:15:ea:aa:c5:b4:b5:0c:bd:e8:c9:50:74:
64:4f:2a:98:16:ee:1f:75:9d:ab:bf:a7:51:82:35:
9f:d0:33:99:5c:73:76:d1:49:46:50:57:ef:e0:d7:
a2:2b:18:42:00:7b:d8:13:ae:37:9c:93:a0:5e:66:
06:c4:ee:6a:6f:37:c9:4f:49:11:cd:74:58:ba:5f:
60:93:b0:dd:67:32:11:23:67:b8:d6:56:61:71:ef:
cc:cb:cc:5f:44:70:03:49:cf:9e:9c:b9:8b:4a:eb:
c0:30:e1:e5:ed:ec:69:fe:62:64:68:24:b2:1f:89:
8e:bf:4d:c4:a1:d9:99:d8:55:79:78:18:38:c4:01:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:34:31:F0:E2:50:CC:AA:4F:07:9B:E0:56:9C:5B:D4:4C:C7:0B
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:47:22:fa:45:f9:f8:26:08:f1:83:c7:21:24:de:77:26:36:
02:80:99:0b:fe:00:01:89:eb:6b:28:e8:e4:0c:06:75:0d:22:
0d:dd:70:f4:8f:39:ed:32:72:a4:5c:34:e2:5e:2a:85:18:93:
84:8e:66:5e:7f:42:84:7b:55:8a:88:73:05:bd:d9:34:64:f6:
c6:3b:0e:ed:9c:6f:65:08:82:4f:e2:23:6f:e9:3c:80:e7:b8:
b2:14:e5:35:6e:26:49:c8:ab:8f:ff:85:e8:5a:21:62:fa:cb:
89:ef:f5:2e:9b:58:25:5f:a9:29:d7:ec:a0:99:7c:77:9a:e9:
ad:c0:6c:cd:50:82:3d:57:e1:6d:d1:a4:f2:a2:f1:f7:2b:d9:
86:dd:f8:cc:5c:00:c1:47:b5:95:97:09:f2:72:0e:f0:b2:1f:
84:c1:91:00:e2:ef:89:89:11:d7:84:6a:ed:39:22:28:fd:72:
86:d6:f3:89:36:7b:3b:31:14:fe:bd:20:b9:45:31:c1:c6:dc:
d7:59:99:14:69:75:30:d3:ba:fa:65:16:2c:e8:df:d0:f0:1f:
37:01:a6:a2:b1:13:85:c1:10:a7:3b:dc:a2:99:11:6c:5f:9c:
f0:ed:4b:78:9f:c2:e3:7e:34:22:9c:55:d6:0d:39:6f:de:9e:
d0:ae:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:29:16 2025 by rpki-client