Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: NZ9D4cgZccJiQCOTUWHhnJeaQFt1ocHcbIeH2MZSi9c=
Subject key identifier: A1:0B:6C:83:0B:7F:D7:D0:E2:36:60:77:6B:95:3A:B9:C1:24:B5:46
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01976EBE4F989D246B91E5224D8F2B3650A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 0FF3
Signing time: Sat 14 Jun 2025 14:00:55 +0000
Manifest this update: Sat 14 Jun 2025 14:00:55 +0000
Manifest next update: Sun 15 Jun 2025 14:00:55 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: oCi2qSemB4y68P+oUkaONdM+5bTm9A0NI4Agoa57b0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:4f:98:9d:24:6b:91:e5:22:4d:8f:2b:36:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jun 14 14:00:55 2025 GMT
Not After : Jun 15 14:00:55 2025 GMT
Subject: CN=a10b6c830b7fd7d0e23660776b953ab9c124b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:8e:c7:5f:f1:43:e4:21:12:2e:5d:97:bb:
b8:a1:be:06:89:00:b8:a2:42:36:8a:bd:d2:49:ba:
0e:60:69:da:5f:ae:29:f7:71:43:9f:ba:d9:9d:46:
eb:f3:31:40:e1:f0:c5:0a:07:5a:fb:eb:40:a5:1c:
91:78:d3:19:06:b1:9b:de:91:20:91:11:1c:04:50:
67:dc:b9:18:4f:42:b5:6f:a2:b4:76:e4:85:21:83:
43:9c:4f:3c:b5:4e:f4:30:6c:fc:4d:8f:0b:e4:ca:
26:e1:d5:25:9f:f3:de:dd:12:82:5f:c2:35:6b:a6:
ba:c4:67:ba:fd:79:a4:71:1b:88:70:86:aa:a8:da:
2e:50:2d:3e:17:00:f9:ec:0f:4b:f4:d7:0d:4b:93:
1a:f1:c3:7d:1f:82:46:94:2a:00:0c:d3:b7:ec:6c:
39:53:a8:db:03:8d:79:9c:fd:f7:7f:ff:11:94:2d:
74:c0:26:ac:f9:85:61:d7:92:51:8a:42:0e:7b:33:
0b:8e:96:13:f1:70:a4:1b:ce:45:cf:cb:0a:ce:0b:
45:d5:2a:b6:fa:c9:6f:08:cf:64:df:71:d1:ac:5a:
93:44:61:26:ae:b2:fd:d5:c4:2b:66:c9:13:b6:d6:
03:40:a2:31:b7:6e:bd:62:f1:93:1e:71:84:2b:86:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:6C:83:0B:7F:D7:D0:E2:36:60:77:6B:95:3A:B9:C1:24:B5:46
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:7a:27:66:13:97:5a:b0:38:ce:a3:6f:f7:91:6c:f3:2b:
0b:82:a9:fc:18:c2:7b:ca:85:85:97:61:a3:37:93:cd:33:7b:
61:93:96:b5:a8:e8:60:f9:66:92:61:42:4d:7c:bc:8c:26:51:
31:be:71:87:01:e7:02:77:85:7a:83:54:6c:bb:aa:81:af:57:
36:f8:95:35:ea:49:c2:f1:90:15:c8:66:82:06:60:8f:b6:da:
46:53:86:ac:06:67:97:a4:dc:90:4d:41:6a:02:f1:6a:db:03:
91:4c:5c:66:a9:21:c1:9e:56:93:72:26:42:81:f0:3c:29:b0:
d5:cc:47:24:59:46:e0:a3:87:84:d7:b7:46:29:24:1e:f6:fc:
e8:3a:a4:90:b4:71:e0:2a:5b:6e:ca:63:85:e4:4a:b2:d9:76:
82:30:c0:37:51:4c:60:de:cf:08:09:42:36:32:b1:4e:7c:7c:
82:35:f0:ef:17:79:28:0e:8d:b1:23:66:ae:b9:6b:57:a0:92:
71:9e:91:f6:06:a7:44:76:4c:86:8e:93:ed:45:7f:82:42:33:
48:46:f7:25:f3:df:27:fc:3b:0a:c3:26:9f:8a:45:6e:53:03:
3a:4b:2f:6f:06:8a:6e:ee:9a:d4:f2:60:33:38:6e:8c:2e:bd:
dc:18:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:18 2025 by rpki-client