Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: vsYNJO2Hyb+jBiskLhHOaR4Q7Ld2MUR+FCQOemQiK4I=
Subject key identifier: 62:6C:13:C7:E1:B3:96:23:53:0D:A6:40:B6:D6:1E:46:16:89:5D:65
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 019781D70885AAE822DEB7E66006318B2EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 012D
Signing time: Wed 18 Jun 2025 07:00:42 +0000
Manifest this update: Wed 18 Jun 2025 07:00:42 +0000
Manifest next update: Thu 19 Jun 2025 07:00:42 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: MuSGjqK2ygsCrPA0JJPDc8o7MIsiUOH8uk6nuoViDSA=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:08:85:aa:e8:22:de:b7:e6:60:06:31:8b:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Jun 18 07:00:42 2025 GMT
Not After : Jun 19 07:00:42 2025 GMT
Subject: CN=626c13c7e1b39623530da640b6d61e4616895d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:5c:81:ea:d8:4d:dc:7d:1f:5c:70:b6:2d:
f8:a4:2d:6f:f7:3d:f1:41:82:07:e1:32:c5:52:b9:
4c:2f:5c:f3:15:a8:c0:bc:fd:e6:e3:4f:90:eb:08:
25:42:5a:34:88:a4:be:04:aa:c6:97:14:20:9f:d3:
4c:8b:3d:e1:c8:b0:d3:25:7a:ed:33:e1:9c:a5:ab:
70:87:d4:e6:d1:46:04:49:28:69:24:6e:8e:19:7e:
1c:75:8c:93:c5:74:70:37:9a:85:2a:d4:15:17:8a:
05:d1:71:4e:64:11:ed:01:dd:50:3b:f2:7b:2a:1e:
1f:b9:a9:91:7f:89:85:a8:87:87:0c:d2:3a:cc:55:
95:8e:58:bf:d0:0d:04:bd:24:de:f1:1d:6d:7b:70:
27:9e:4c:5d:a7:c0:64:6b:f1:89:6d:75:22:ee:2a:
fb:4d:31:54:73:0f:cd:43:f9:a6:14:29:ce:1b:3d:
31:7b:e1:99:51:3f:55:95:64:36:02:97:61:3d:33:
53:44:94:5d:ce:9e:b4:4a:72:bd:68:4a:9a:69:df:
5a:98:87:ce:2e:1b:6a:02:e8:38:37:0c:cd:48:2e:
35:16:3a:e4:5a:2d:42:14:b2:54:e8:c8:a7:bb:50:
5b:92:7f:8d:41:3b:ea:d4:5b:60:72:bb:a4:25:98:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:13:C7:E1:B3:96:23:53:0D:A6:40:B6:D6:1E:46:16:89:5D:65
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d9:2c:cc:93:62:db:d5:ee:61:40:0f:ff:c0:18:9d:fa:f7:
35:b9:2a:f2:eb:29:4d:9e:f6:00:ce:ec:2b:ea:62:b6:81:7d:
59:6b:aa:b5:9d:31:14:29:5f:5d:df:2f:53:00:2e:83:1b:4e:
d4:70:fe:3d:9e:4c:8f:41:b9:7b:f5:fc:4d:d8:b3:6c:e2:bf:
b8:c7:83:c5:28:da:b0:b4:13:18:1f:4a:46:45:71:99:ae:f3:
1b:ec:e1:7e:37:f5:67:75:23:1c:44:0d:95:43:74:d0:ff:3e:
79:3a:3b:14:5d:e0:3a:73:3d:a9:eb:df:97:53:1d:d4:24:6d:
5d:d3:79:5b:2d:02:e1:b2:5b:eb:35:0b:d7:f3:51:55:ca:83:
05:e8:15:2c:49:7e:ef:56:1c:0d:09:5f:2e:4e:0b:d6:08:51:
dc:dd:61:2a:0e:12:47:d1:00:a9:08:79:0f:af:02:e9:9b:65:
d2:54:85:79:3b:4e:ca:f2:f5:6b:63:7e:51:c8:b5:88:55:c8:
78:98:52:ca:3f:a4:bd:1b:1c:a9:f1:94:f6:cf:bf:95:ed:dc:
6a:1e:24:cc:5b:4e:65:92:38:74:e2:fc:0d:04:c8:40:df:32:
5b:38:bc:f8:d7:84:f1:f3:2d:1f:aa:10:15:d9:c2:74:88:6b:
94:6a:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:26:43 2025 by rpki-client