Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: NA3SCjCAH64lRver5LNMDkrqbKVx3Wa9KwrEe90aYKs=
Subject key identifier: 4D:8E:CA:06:AD:DA:3D:50:45:E4:86:C8:94:FC:72:C7:5E:0A:DA:5F
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019785EA6E469312E16FC90EBE279C46928B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 02:00:22 +0000
Manifest this update: Thu 19 Jun 2025 02:00:22 +0000
Manifest next update: Fri 20 Jun 2025 02:00:22 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: t24oaie2vnsgFOGwZ0TX6L4aIE13NCY6RiRK41mqAz4=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:ea:6e:46:93:12:e1:6f:c9:0e:be:27:9c:46:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 19 02:00:22 2025 GMT
Not After : Jun 20 02:00:22 2025 GMT
Subject: CN=4d8eca06adda3d5045e486c894fc72c75e0ada5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:ef:1c:3a:fa:aa:a5:1d:ed:97:c3:28:83:
6b:a5:61:95:66:2a:08:99:7e:ec:2f:b1:d1:99:83:
d3:ee:d2:b7:47:5b:87:eb:d8:f3:4c:9d:bd:36:60:
f8:76:9d:8b:12:81:68:85:9e:83:34:a4:00:4a:3b:
3d:74:09:f1:5e:bf:c0:c8:3d:37:c1:bc:72:ff:7f:
2f:3a:1a:6b:ef:c2:c9:a0:ca:b6:7f:e1:31:29:20:
8c:40:b0:ff:10:50:51:cf:50:20:1c:73:62:91:d9:
96:06:06:fa:6f:eb:22:3d:c7:bb:31:f3:74:79:d0:
bd:07:f9:0f:35:7b:31:95:92:d2:7d:84:b7:3b:54:
87:3d:d2:c0:6a:4c:6a:5e:1d:51:92:2f:68:a3:48:
8b:cb:85:7c:c2:2e:9b:f5:a9:9f:fc:37:9d:79:25:
ec:21:84:b7:0f:82:32:0d:f4:ce:dc:28:fe:a0:b3:
cf:e7:23:cc:96:6f:40:87:dd:c8:5e:ec:24:be:85:
3e:2e:71:cb:25:1d:56:b9:50:1c:96:b3:df:6c:16:
27:96:81:67:5a:51:56:50:3e:f3:63:73:d1:75:a4:
f9:1a:4c:49:7c:fd:2d:6d:62:e1:3a:87:c7:2c:57:
8f:16:30:78:81:ce:2c:89:74:bd:65:9c:b9:72:c2:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:CA:06:AD:DA:3D:50:45:E4:86:C8:94:FC:72:C7:5E:0A:DA:5F
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:45:a9:de:ec:6e:a7:ae:ed:75:c6:ff:4a:b4:94:cc:2f:2a:
af:c3:13:a6:9c:c2:85:10:3c:58:d8:ae:57:bf:18:e9:19:bf:
8a:cc:db:a9:23:50:9d:cf:0b:fa:53:57:df:80:06:ff:34:7f:
80:05:72:be:a6:89:dd:24:eb:f6:c0:56:f4:24:aa:c4:6a:e3:
92:ed:ea:d4:77:86:3e:75:56:79:53:ce:8c:e4:ae:5c:5c:db:
48:54:0c:de:a5:c2:d4:6a:82:47:1b:2a:24:b6:15:fa:53:ca:
24:55:7c:63:ad:18:f8:c3:74:0e:1a:01:ab:64:96:ed:6b:be:
d2:20:55:9b:34:1d:56:75:dc:f8:24:7f:10:a5:27:64:42:8f:
4b:6e:22:5a:29:be:a0:c5:1b:8b:12:15:b7:59:f6:e2:8d:a0:
af:74:0e:f1:df:f3:8b:f3:02:55:31:ec:db:e7:26:c1:60:ac:
99:fd:3b:22:88:ab:00:2c:70:04:05:8c:0a:15:08:b3:04:83:
a4:ba:07:81:5d:7a:ac:68:92:5d:d9:91:d8:c4:c1:f7:46:75:
16:ae:de:a6:39:87:32:b0:ed:fa:a8:6a:ab:3b:b1:b5:70:9b:
c6:70:cb:4c:d4:c0:6f:a2:bb:83:5a:80:95:35:08:96:26:85:
4d:9d:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:08:59 2025 by rpki-client