Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: QjUCNQU978j/nXRtoj5uHBL6TRd8Q/9MswMY6MoB/dc=
Subject key identifier: 7A:4E:D2:04:62:45:29:68:DA:F8:93:F0:3D:3B:34:04:00:0D:00:9A
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 01976E5062F71900895DD503EDE0827C915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 12:00:51 +0000
Manifest this update: Sat 14 Jun 2025 12:00:51 +0000
Manifest next update: Sun 15 Jun 2025 12:00:51 +0000
Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: b8ksmIbVkCbBhDrNbhpameRxuxxmMPwjkKfclOaAAF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:62:f7:19:00:89:5d:d5:03:ed:e0:82:7c:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Jun 14 12:00:51 2025 GMT
Not After : Jun 15 12:00:51 2025 GMT
Subject: CN=7a4ed20462452968daf893f03d3b3404000d009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f7:3c:b2:e8:4f:0e:30:7d:3a:81:8e:3b:30:
38:0c:53:81:cc:3c:bc:c2:08:00:ba:86:88:db:7b:
cd:9a:c2:45:36:2c:23:0e:f8:2b:56:67:3e:4e:cc:
69:a7:a5:fb:46:b9:bb:8c:02:0c:89:52:89:ae:d2:
d6:69:12:e7:3e:87:0a:56:fe:91:ab:f8:8f:bd:6f:
6d:5a:c7:a1:2f:5f:49:68:f6:3f:85:5f:0f:78:47:
37:ec:b0:d9:23:c1:13:be:69:cc:6f:f4:1f:4e:90:
eb:9f:84:f5:da:24:3c:15:5d:32:d4:3c:4e:52:32:
b9:12:70:5e:ce:14:d6:11:7b:bf:16:08:73:c5:9e:
e7:c9:1c:6c:3c:33:69:d2:58:d2:05:36:eb:1e:c6:
ec:7b:36:78:f0:8e:4d:67:42:af:63:47:2d:8d:1c:
12:1c:7a:f6:a7:7d:92:0a:4f:0b:77:40:f2:f9:7b:
cc:a4:2c:2b:18:c8:20:e9:24:20:41:10:82:e9:64:
9a:a3:29:24:4c:1a:3d:56:32:5d:e9:38:82:ae:54:
8b:37:6d:9b:8a:63:25:1c:45:49:c3:39:50:a1:2b:
0b:d6:58:c6:53:da:16:b3:fa:7d:bc:0d:1c:aa:b7:
4c:b9:b9:d3:65:7a:ff:d0:07:20:b9:5c:96:4f:71:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:D2:04:62:45:29:68:DA:F8:93:F0:3D:3B:34:04:00:0D:00:9A
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:50:49:0e:19:dc:45:8a:c0:e1:a5:53:5c:fa:0e:9e:83:4e:
e0:71:11:fc:c9:84:95:63:bc:0e:42:d3:ca:e8:63:12:10:38:
fa:ec:1d:d0:dc:21:1b:3d:92:e7:39:21:14:0f:fe:f6:e1:20:
46:3a:58:50:a9:5b:4c:93:7b:4d:5e:98:2c:02:1b:28:94:e5:
91:58:ec:ee:d5:6e:d2:be:74:0d:13:af:00:52:1e:03:3d:4e:
f8:4c:51:d1:0c:33:70:b2:81:f8:5c:c1:5d:a4:66:bc:87:e4:
36:6f:12:07:5a:32:56:e1:d8:79:86:d3:eb:54:20:44:f8:9a:
8b:66:49:b8:1d:74:bf:7d:49:90:25:d2:a8:32:5d:c0:86:c1:
40:e0:6f:a0:1e:94:53:26:72:31:b7:92:9f:24:94:de:27:62:
d0:ca:00:3a:a6:43:ec:11:28:ca:ea:7e:30:5d:39:fd:5c:ed:
aa:7a:e4:51:e5:2c:20:ab:6f:1b:d1:17:79:af:bf:41:17:c3:
24:0e:c8:01:50:b0:03:e9:49:20:cd:15:53:6a:5d:ef:a1:df:
9a:4c:01:68:98:5b:d6:53:03:a9:4f:f5:b1:8b:b2:37:68:79:
b0:1b:8a:20:c1:02:40:40:ef:bd:1e:ab:6e:9e:ea:1e:c3:58:
5d:92:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:55 2025 by rpki-client