Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: dA8G8OdGJro2IMGrzR9dk+e7WMOYuivB0rYvvO14S5c=
Subject key identifier: FB:C0:3D:49:4D:AD:FF:A0:4D:08:28:0E:6A:5D:80:97:7D:8D:1D:9A
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 01976CCFF4221A832F004A533AA3E73FC1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 05:00:57 +0000
Manifest this update: Sat 14 Jun 2025 05:00:57 +0000
Manifest next update: Sun 15 Jun 2025 05:00:57 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: xpbPXtXd1iWetexNwZPo53J5OeM8T/q4e4K2r1QrouQ=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:f4:22:1a:83:2f:00:4a:53:3a:a3:e7:3f:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jun 14 05:00:57 2025 GMT
Not After : Jun 15 05:00:57 2025 GMT
Subject: CN=fbc03d494dadffa04d08280e6a5d80977d8d1d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:7d:31:94:9e:8d:06:91:fc:e4:90:4e:1f:
8b:d6:10:3a:95:97:b4:94:0b:45:99:c9:19:90:4b:
4b:25:ee:c7:b9:98:15:9e:b9:57:08:b1:06:b7:c4:
75:03:4c:91:34:76:41:42:68:91:98:fa:9e:6b:b9:
f0:40:b8:a2:d7:d0:33:50:e0:ac:3a:51:c1:ad:b7:
54:9d:4f:6b:12:1b:41:b3:cf:f8:a8:5a:5e:33:14:
64:d5:f0:ae:52:6b:c9:e2:87:c2:5d:9d:40:cc:c2:
4f:d0:52:54:31:d0:79:4f:58:25:45:3d:f1:56:c8:
7a:4a:18:96:5d:56:6a:0c:41:e5:09:57:cb:e3:b0:
53:4d:01:96:03:12:2e:b1:35:62:69:ed:d8:d1:c9:
22:23:f9:27:d0:8f:09:a3:80:4a:20:c0:cc:f1:f3:
b0:07:11:29:76:57:1f:2f:4a:45:8f:5c:5f:0b:e5:
0b:ba:9e:86:d1:14:ff:42:81:79:f2:4f:a8:5e:65:
2c:0b:ec:b4:df:44:c6:67:cd:27:69:40:5e:66:02:
f3:82:58:57:5f:f1:8f:a4:09:ba:9a:cc:29:a6:e1:
e6:04:13:6a:93:8d:bf:8d:10:58:17:26:5f:64:74:
8a:92:0f:23:7d:b4:a1:ca:bd:8b:c7:70:53:17:f7:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:3D:49:4D:AD:FF:A0:4D:08:28:0E:6A:5D:80:97:7D:8D:1D:9A
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:05:c1:0d:ac:4b:eb:28:83:a2:ff:0a:96:cc:56:4a:64:73:
e3:f0:5e:0b:f8:92:67:1b:cd:58:7e:29:e5:e4:3e:33:b6:6b:
57:87:e4:b6:01:51:be:90:91:a7:0a:fb:a2:50:54:09:17:cf:
b0:16:87:e2:a3:46:2f:ca:33:11:55:fb:ed:27:45:b4:07:d3:
84:db:45:0f:ee:e0:07:e8:4a:04:9c:49:ea:1a:25:24:36:1b:
0b:77:27:ab:00:78:21:19:86:12:4b:b3:d4:cd:83:0a:3c:12:
b3:a0:17:ad:5e:b2:c7:a1:e0:ed:da:a6:58:96:e8:cf:15:89:
5f:44:4c:fd:93:b7:04:83:dc:9f:41:2c:18:ef:ae:7b:ba:7c:
d4:42:96:df:74:e7:0b:8b:33:ba:02:4d:51:e6:a5:09:c5:41:
4b:fc:e0:6d:c9:57:6b:2c:1e:43:ad:40:67:55:fc:d8:e9:1d:
c2:3b:17:17:63:ac:77:66:44:04:87:68:3b:a8:80:69:d5:1e:
e3:1c:9d:ce:4c:8d:49:88:1d:04:0a:ef:62:2f:45:ff:f0:56:
27:ce:bb:04:32:fe:3c:1e:92:d7:54:b1:36:27:32:a6:1a:cd:
b7:74:6d:9a:ec:bc:37:0e:8a:7c:3b:f8:25:3c:ea:d2:d1:73:
b7:60:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:46:54 2025 by rpki-client