Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: jt2LIrA+/x/gOjFEqcTNGhoOi8WmojlFANlLshgpDb8=
Subject key identifier: 57:0B:10:92:EA:F7:57:9C:89:6A:E6:7B:CA:15:F3:6F:9F:BE:4E:FC
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 01976BBCF9DF9E07BA9FC7AA449B84EAEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:36 +0000
Manifest this update: Sat 14 Jun 2025 00:00:36 +0000
Manifest next update: Sun 15 Jun 2025 00:00:36 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: O+2cRowpWvtSHuX/ac/jLWJPeDZe7Om2+Ar4BXXTbJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:f9:df:9e:07:ba:9f:c7:aa:44:9b:84:ea:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Jun 14 00:00:36 2025 GMT
Not After : Jun 15 00:00:36 2025 GMT
Subject: CN=570b1092eaf7579c896ae67bca15f36f9fbe4efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:bc:26:0a:6f:e1:31:1a:1a:c7:28:4c:46:
55:20:f2:30:a1:7b:cd:7d:62:8d:ad:87:43:85:2a:
69:55:b5:67:a6:a0:e2:b8:c4:e8:13:02:57:83:ae:
2a:69:f4:31:1f:d1:7f:e1:4c:25:9f:5e:12:24:eb:
a5:ba:91:d9:98:fb:f8:7f:60:10:d3:37:2a:bd:ea:
47:72:a4:0d:e3:13:31:d8:91:42:8e:a1:59:a3:ff:
09:55:68:55:71:90:8d:ef:eb:83:4a:c8:da:71:7d:
48:b3:b1:52:bd:21:c2:27:3f:c4:45:6b:70:3d:7b:
15:b8:b9:f9:d8:6c:1e:8e:4e:b6:ef:36:8e:ad:04:
6a:4d:d1:20:1b:79:15:93:45:b3:e5:72:d9:23:d3:
d7:3a:08:5c:cf:0f:2f:69:95:24:09:ee:eb:7f:57:
29:3d:32:ec:57:c5:1e:ea:41:21:94:a2:80:b0:3b:
6c:a1:82:4f:be:b6:19:b7:0f:33:4c:f1:bf:20:65:
88:f1:f7:5d:be:8e:67:b3:ff:c1:1c:53:f5:f9:f8:
02:13:ef:5e:e3:18:bf:24:f3:93:b4:55:18:fe:3d:
42:be:dd:6e:ba:c8:83:a9:82:bb:04:47:bc:37:50:
03:46:ef:ac:e3:40:72:00:51:a8:bb:57:60:dc:36:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:10:92:EA:F7:57:9C:89:6A:E6:7B:CA:15:F3:6F:9F:BE:4E:FC
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:30:9f:83:51:6e:a7:a9:a2:66:31:57:c7:a2:92:36:0e:05:
c0:a2:61:21:e3:6e:5d:40:8f:e6:c8:42:5c:d5:86:86:9d:9e:
ec:82:5b:e2:19:6a:d5:6e:09:21:18:4f:01:b5:66:dd:68:79:
3f:30:82:cb:84:95:6c:c9:0e:07:af:6c:31:35:f5:00:7f:f1:
0d:98:02:ea:48:50:d8:bb:23:1e:8b:03:25:f5:f6:e3:a9:4a:
f0:7d:f2:a4:52:9d:38:6f:23:19:15:8a:08:2b:44:42:fa:3d:
a7:ec:22:95:96:e7:64:bc:f2:db:ee:0c:34:ec:86:c0:49:56:
06:c9:ac:31:71:5b:d5:0e:44:e4:8f:85:4a:4d:8c:9c:4d:d7:
0f:f5:79:cc:d7:05:3d:41:53:3f:ee:3e:91:bf:82:6b:12:f9:
fb:ea:c9:6d:12:99:c6:d2:12:04:94:7d:d4:e1:e8:fc:86:6b:
ff:f8:20:4f:d9:17:eb:d4:ac:f5:21:8f:64:bf:d7:e7:92:26:
ee:4f:72:31:74:16:96:b9:4d:8c:65:68:ea:9d:5c:3c:b3:08:
49:33:e3:85:ad:6b:97:28:e0:f8:14:d3:6b:48:2b:27:04:ca:
a0:92:31:47:e1:f6:34:67:32:22:75:d1:2e:c0:b5:ed:46:ed:
4d:12:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:58 2025 by rpki-client