Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
File: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft (raw, json)
Hash identifier: UGfRBwxiYI2iX0B/aACRw90seIDvdNGa0KCli9j2pIo=
Subject key identifier: 05:78:3B:EC:A5:DD:88:07:AB:7D:E4:D6:2B:CE:98:72:64:DF:33:69
Authority key identifier: 34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
Certificate issuer: /CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Certificate serial: 019873E2BE4F5895BEE1A59D49AF8458EDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
Manifest number: 12F2
Signing time: Mon 04 Aug 2025 07:01:36 +0000
Manifest this update: Mon 04 Aug 2025 07:01:36 +0000
Manifest next update: Tue 05 Aug 2025 07:01:36 +0000
Files and hashes: 1: NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl (hash: 9sG0WVax3fg4jVkC99Xsf6kb4rLkAYW7vYVPZ7qeqFY=)
2: pJ8B6gtnj6CL56vYC6LrCO5oBmo.roa (hash: F88j9ZRyVWoqzEm3QsXJ4KW1kEET+j/VAKZytfrtK/M=)
3: zsR2hosRcU8M1KGjXd1_k-ktlfc.roa (hash: rTq5tN+JofEk5Za1xiOrbVhdFMOSTGjrPTYOHgXaK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:be:4f:58:95:be:e1:a5:9d:49:af:84:58:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cb956ec3a14f6f5e4b76d54342fa98d59c77a6
Validity
Not Before: Aug 4 07:01:36 2025 GMT
Not After : Aug 5 07:01:36 2025 GMT
Subject: CN=05783beca5dd8807ab7de4d62bce987264df3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:a3:71:59:21:ab:8a:0b:50:ba:cd:35:ec:
68:5d:ab:78:d5:3d:c2:b8:ca:c4:0b:aa:8b:71:3d:
02:f6:6b:f6:32:f7:1b:20:4c:f7:77:96:bc:93:6c:
c4:78:e2:4d:15:96:ea:d7:04:87:b1:73:ba:51:f3:
b9:ca:1e:5e:13:25:98:22:fd:0a:aa:1e:50:f0:e3:
62:cc:a1:5f:a1:76:b6:a8:a5:b3:dc:41:5a:fe:a7:
a4:45:ee:3d:aa:63:44:18:e3:a5:42:14:9e:42:49:
81:e6:f6:fe:33:14:7e:dc:ce:fb:fb:1a:f0:00:ea:
4c:fb:92:5e:54:33:6a:c3:c3:56:31:56:c5:67:5b:
f2:77:1c:fe:24:7f:b9:b0:0e:20:aa:3a:6e:95:3d:
1a:7a:5b:31:fd:2a:2b:e6:40:99:2d:65:eb:bc:40:
30:b3:62:88:ec:1b:9e:6b:26:76:4b:88:01:c1:fe:
e3:22:a6:2b:a4:9f:b7:00:12:52:c3:78:00:0f:ea:
c9:e3:76:fb:f5:8a:6d:03:4a:ff:dd:7c:58:e7:f6:
31:95:9f:9b:20:d7:03:5d:40:0e:ee:d5:27:e9:62:
0e:74:ad:c3:38:17:1d:f3:94:d8:ea:6e:08:29:ef:
56:83:e3:73:b4:54:59:10:47:e4:97:d8:12:8c:51:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:3B:EC:A5:DD:88:07:AB:7D:E4:D6:2B:CE:98:72:64:DF:33:69
X509v3 Authority Key Identifier:
keyid:34:CB:95:6E:C3:A1:4F:6F:5E:4B:76:D5:43:42:FA:98:D5:9C:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f9f5-25d7-45e8-bc24-9a688080a579/1/NMuVbsOhT29eS3bVQ0L6mNWcd6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:67:b8:d9:d0:07:d2:4c:2b:86:e9:81:8f:08:8e:25:eb:de:
a4:3a:3b:7b:f4:0b:ad:3f:73:b9:e8:ed:ff:22:88:55:46:1e:
7c:ab:90:85:49:37:05:b6:89:0f:2a:b5:05:aa:0d:f0:fb:0d:
60:c3:97:85:71:90:16:aa:36:21:19:f3:ad:04:6a:53:b4:8d:
e8:f4:7f:21:d1:14:2c:01:96:13:f1:d4:7f:2d:7c:30:67:6a:
e9:b7:22:52:6d:41:2e:96:c6:c4:de:80:01:1b:a7:45:46:6b:
b2:c4:36:7d:1b:3e:2e:2f:a6:de:1f:4e:26:77:c8:c1:ab:ce:
0a:65:ab:8f:9d:8e:64:6b:b6:c6:a8:2d:4f:3c:c9:75:f0:f4:
bb:2e:af:09:9c:6b:bc:d4:8e:1f:71:14:15:75:7f:cc:c0:f0:
ef:ea:cd:5a:25:0e:61:94:4c:55:e9:03:89:8c:79:c8:93:64:
87:66:52:d7:a6:1b:df:c0:1c:02:d9:37:09:48:7b:be:0b:84:
05:6b:62:25:db:94:56:fe:ce:7e:78:6d:5b:bb:42:fc:83:78:
1f:31:b2:e2:6b:a4:d4:4a:23:2e:36:5d:63:ee:e4:4d:be:1c:
39:34:8d:6a:51:0d:0f:b7:dd:f2:0e:99:d3:d4:c9:2f:37:5b:
bb:c9:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:11 2025 by rpki-client