Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: UCTL58H9OdlK3ifufSTKEUxv7a6G7NnjawM03PH2SiI=
Subject key identifier: 36:94:F4:20:A1:01:AF:BE:A9:9C:77:54:F9:85:07:CF:84:03:94:05
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 01977B6714A57B182734C978F9B60E184A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 04BF
Signing time: Tue 17 Jun 2025 01:00:42 +0000
Manifest this update: Tue 17 Jun 2025 01:00:42 +0000
Manifest next update: Wed 18 Jun 2025 01:00:42 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: BpO44jLjbjBC8pSH0byBs1AHOp5bjxaO+DHfrfaenFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:14:a5:7b:18:27:34:c9:78:f9:b6:0e:18:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jun 17 01:00:42 2025 GMT
Not After : Jun 18 01:00:42 2025 GMT
Subject: CN=3694f420a101afbea99c7754f98507cf84039405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:14:a1:8c:b4:a3:5b:90:35:47:14:c9:66:
f2:63:25:f6:31:dd:9f:ca:71:11:20:b5:26:3e:f3:
24:ac:ba:37:ae:16:f9:f6:2f:4b:47:94:35:37:9d:
31:e4:43:3a:0d:2a:ea:6e:41:c4:fc:29:03:7d:07:
80:88:3e:d8:24:28:53:bc:79:7d:17:16:f6:b0:4e:
69:95:30:4a:49:ea:58:7d:49:e7:aa:60:8a:f0:04:
cd:65:6e:98:46:3e:74:54:c6:08:80:df:2b:51:fd:
d6:37:e7:b1:4c:9b:7d:c5:30:27:5a:50:2c:ec:b0:
b4:6f:53:f5:46:b1:65:c9:61:2b:2a:24:ef:49:e2:
7c:87:8a:be:dc:49:cb:57:80:e9:d6:fe:ea:02:fa:
c9:67:7c:ca:96:1f:25:dd:87:6b:f4:59:bd:3e:cf:
bd:29:b6:26:e3:26:4c:4f:fc:8f:b4:b7:9f:99:ed:
a3:cd:6e:3b:85:fa:5e:bd:22:11:5f:a5:45:ab:09:
b8:71:1b:e7:80:b0:f1:82:4a:53:c1:c5:5d:fb:c5:
5d:6a:69:36:47:5b:80:1c:ab:ec:7f:b5:c8:dc:5a:
63:b3:b6:9d:38:68:a2:87:12:59:a6:62:ff:81:75:
c6:78:a1:db:7a:81:b1:24:e2:97:d8:66:81:5c:72:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:F4:20:A1:01:AF:BE:A9:9C:77:54:F9:85:07:CF:84:03:94:05
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:69:e6:1f:00:65:ab:c2:e8:1d:0d:80:cb:36:36:51:92:
e4:fe:35:db:04:7f:de:78:bc:ff:d0:0d:71:67:15:71:50:4a:
cb:01:9e:f7:d7:36:23:02:ba:34:78:79:b2:42:6f:0d:63:cb:
a0:44:2a:1b:c1:dc:c5:61:de:56:be:a3:e0:7f:64:54:cb:bb:
85:e1:f7:34:ba:4b:2f:16:1f:b0:d5:c5:89:5d:7a:8a:3f:56:
6a:c2:72:af:60:de:48:53:1e:bb:19:90:c6:1e:d9:50:7d:f9:
11:c4:4e:ae:6d:2a:22:8f:46:48:7a:e1:85:09:c9:3b:7f:ba:
19:20:29:be:d1:7f:b6:9d:02:89:fd:18:ec:98:b4:65:51:23:
ab:14:32:51:34:df:e0:b3:5f:39:24:f7:e3:f5:6e:9b:04:ed:
c3:4f:b1:6d:09:93:a8:06:5e:6d:d7:bc:b8:f9:4c:ba:6d:34:
09:24:dc:59:da:52:08:29:38:55:9a:25:74:3b:00:bf:7a:f9:
98:7e:18:32:a5:45:85:b8:32:c4:f1:97:4f:5e:10:9d:5a:54:
ad:af:ef:d4:44:c6:3b:c8:14:3b:b2:28:58:87:70:1c:14:39:
12:db:a6:6e:42:fc:81:77:c2:0b:ea:ae:29:0f:ce:a9:b5:8b:
c9:49:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:47:11 2025 by rpki-client