Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: N/bgiyUR5cJ+gQgdsFVOfYrOYuibKGXHMYebvgKcdFI=
Subject key identifier: AD:EE:07:C6:87:B7:53:85:FF:19:E7:A0:0E:92:58:29:FB:BB:DA:50
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019786C5F4ABC85AA5A5DCD4A1D025CBAF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 06:00:09 +0000
Manifest this update: Thu 19 Jun 2025 06:00:09 +0000
Manifest next update: Fri 20 Jun 2025 06:00:09 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 6wNgiuMDYlIksH9wuYoJ88Q8OSC0ioIXUPPBQ0PXzUw=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c5:f4:ab:c8:5a:a5:a5:dc:d4:a1:d0:25:cb:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jun 19 06:00:09 2025 GMT
Not After : Jun 20 06:00:09 2025 GMT
Subject: CN=adee07c687b75385ff19e7a00e925829fbbbda50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:ec:54:36:14:a3:be:72:d5:25:db:25:f8:
bf:53:61:05:56:50:b5:b6:95:cc:fc:8c:60:e3:0e:
bf:7d:27:2a:90:98:74:0d:f9:b7:b1:dd:f1:49:bd:
d9:b1:f3:27:f8:b8:c7:af:98:ec:20:dd:29:f9:c5:
56:ff:08:b8:a4:34:dd:f5:5a:2a:5a:c6:40:bb:d6:
9e:25:14:92:2e:b3:5d:78:95:45:46:53:d5:45:5c:
81:fc:dd:c8:90:04:de:f5:c7:a5:35:e8:55:03:1d:
55:d9:3e:13:5a:0a:d6:b3:3b:42:fb:59:31:5b:be:
69:05:1e:2b:94:8a:4b:5c:53:e8:da:c4:8f:8e:87:
20:4c:16:bf:b0:0e:9a:c0:f8:ed:02:3a:18:cc:85:
21:51:22:61:fb:3a:ad:f3:5e:23:d4:1c:63:38:c6:
7f:46:cf:07:10:01:ee:8c:ca:6a:51:38:98:f0:9f:
e2:b1:34:30:ee:48:92:bf:ee:5a:45:6e:e2:62:20:
28:fe:ae:f1:ee:c9:4c:09:58:d8:f9:ae:72:39:1e:
8a:eb:88:ef:ff:a8:80:95:05:1a:da:40:1d:f0:ad:
d9:b3:99:66:cc:63:72:69:3d:e1:e6:67:54:29:e1:
d4:fe:af:a6:3f:6e:cc:0e:c3:f9:3b:4c:ec:19:a5:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:07:C6:87:B7:53:85:FF:19:E7:A0:0E:92:58:29:FB:BB:DA:50
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3d:81:66:33:a7:bb:17:c8:9e:8d:e3:ea:aa:9c:3f:e0:08:
e4:42:6c:26:f4:44:0a:72:ab:1a:25:34:a2:c5:8f:c0:b7:bf:
90:7d:1c:89:7f:cf:a0:d9:08:50:6d:9f:4f:e7:c1:a3:ed:f7:
ba:ac:08:48:32:e0:22:a7:a9:70:db:5c:8d:53:b9:95:ff:c3:
dc:54:69:67:e1:f3:fb:13:39:1e:58:21:b6:f4:ff:79:02:07:
71:9c:75:26:05:d1:4e:35:cc:bd:e9:72:84:94:5a:3c:11:a8:
e4:e5:c1:3f:c0:89:14:a7:15:19:8f:db:58:44:cd:40:32:d8:
55:89:c4:ac:b7:55:15:17:6b:f8:15:20:c7:5d:01:49:51:28:
d2:4a:5e:7c:09:c1:95:20:e5:cf:ca:c7:60:03:98:c2:1b:23:
7e:f0:4d:23:3b:42:7b:f4:f4:13:2d:b9:02:b1:8a:58:02:8d:
bd:22:8b:ae:50:15:2f:bd:ef:cd:17:45:42:8a:74:63:e2:57:
81:46:09:ac:63:f7:0e:65:8c:e2:d6:75:32:f4:2c:d2:92:0a:
1b:dc:8f:89:94:16:96:bb:87:8c:d5:c7:b0:e6:d0:52:ec:1b:
fd:a0:a2:52:20:0d:17:56:21:4e:c6:42:2f:0b:e9:cd:f0:fa:
ae:4a:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:07:57 2025 by rpki-client