Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: maNeZzhsFSRt0P80DD6Medn7ryUAiEkpVGB3B7BcZeM=
Subject key identifier: E2:67:14:1C:66:D6:8A:B6:50:C9:D9:56:7B:A2:85:2E:8F:AF:50:FF
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 01976D3E7EA737C6FC3E9B948E9D48903A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0F50
Signing time: Sat 14 Jun 2025 07:01:41 +0000
Manifest this update: Sat 14 Jun 2025 07:01:41 +0000
Manifest next update: Sun 15 Jun 2025 07:01:41 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: fDUha2OK8ZFACgcMf3qv/gi1YAgxNsvaP5PSw9JxEvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:7e:a7:37:c6:fc:3e:9b:94:8e:9d:48:90:3a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jun 14 07:01:41 2025 GMT
Not After : Jun 15 07:01:41 2025 GMT
Subject: CN=e267141c66d68ab650c9d9567ba2852e8faf50ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:c8:28:f2:4d:6a:43:af:ac:7a:ec:dc:44:
81:c6:c7:fe:9a:79:11:e2:04:da:82:cd:3c:4c:45:
6c:65:5f:b0:b4:d6:8a:01:62:df:04:39:f2:5e:8d:
56:16:0d:c4:51:b1:f1:c8:17:df:c6:92:9c:ae:b3:
f7:25:d8:91:25:9f:3e:40:29:b5:55:a0:40:70:8f:
13:b4:21:e8:58:22:b1:e8:c3:73:e5:6a:b9:93:0b:
b5:c2:f8:a9:74:b4:7c:0e:09:b4:b1:62:47:ff:83:
03:d4:5b:cc:de:c0:6d:91:43:68:99:2e:5e:ed:7b:
87:c2:ec:03:8f:78:c9:40:0f:74:50:ef:d1:46:8c:
af:71:f0:d5:fc:f5:08:09:7d:79:1a:96:9c:36:5e:
42:2e:0c:64:85:71:8d:17:6c:54:ef:1a:e1:d3:3d:
01:d9:7b:9f:20:07:15:a3:ac:aa:24:47:a7:c6:0c:
65:0b:86:59:7c:00:e4:3a:a1:d6:25:3a:6d:40:2d:
2f:ae:b2:fc:a8:ed:71:b5:86:f2:a2:d1:0b:7f:1e:
ad:2c:12:17:1a:6d:a3:6f:95:6f:eb:d7:ab:06:f4:
b1:39:e6:6a:04:6f:d8:c9:d1:a5:31:60:90:21:0e:
bc:ea:7a:f8:e9:9d:75:da:9c:8b:3f:7c:b4:56:8e:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:14:1C:66:D6:8A:B6:50:C9:D9:56:7B:A2:85:2E:8F:AF:50:FF
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:f6:a9:39:a7:f5:c9:21:c7:9f:dd:16:d0:ce:cc:e9:be:
de:2d:63:82:ec:ea:f4:6e:1e:53:65:1a:06:af:bb:61:04:59:
77:60:73:f4:a7:0e:8c:cc:9f:9f:bd:f3:c8:5e:3b:f7:74:f8:
ae:8e:e0:f1:02:68:02:7c:89:00:ff:16:37:1c:67:76:ab:a5:
e2:a6:76:f4:bf:8b:d4:4d:3a:58:0c:4d:ac:61:64:b2:f9:0c:
1f:11:c5:55:26:8c:82:1d:84:c4:9a:81:75:d0:a0:7c:78:cc:
d9:6b:ba:24:60:a4:b2:16:dd:1c:be:c0:f3:c0:ba:82:58:4d:
52:a9:e6:51:76:7c:80:31:12:68:08:1d:b1:66:cc:57:15:8d:
56:79:6e:0b:1a:54:8f:f0:a6:a4:d4:af:2d:9d:c9:35:7c:f7:
52:21:97:26:f5:96:be:91:f0:c2:bf:a4:ab:de:8f:a2:c5:fc:
13:1e:47:f1:78:f6:6d:a6:f7:76:0e:5a:a2:39:e1:9a:e2:92:
25:f5:b9:c1:d3:b8:eb:99:68:88:8b:9b:8e:62:23:22:b9:17:
de:12:65:f3:94:89:16:45:d0:8a:ad:d7:60:b0:60:17:a0:f5:
d4:4a:0b:98:e1:30:9f:ec:d5:b8:09:74:2b:61:44:fc:2f:5c:
87:18:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:46 2025 by rpki-client