Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: 54GgbWXNsdOGQCsiujgnN+k119K19Sq1w+o94vSZoh8=
Subject key identifier: A2:AB:C1:37:56:EA:CE:4E:A1:AC:FC:AF:2D:0E:82:F5:FD:CD:E5:58
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0197499F65188F8F4874C8DBF78F8C2EFD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 03CA
Signing time: Sat 07 Jun 2025 09:01:12 +0000
Manifest this update: Sat 07 Jun 2025 09:01:12 +0000
Manifest next update: Sun 08 Jun 2025 09:01:12 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: W0r8PK+yMMsGaI+1t4m94DymrlocC5m2O0oJM8zGrqU=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:65:18:8f:8f:48:74:c8:db:f7:8f:8c:2e:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jun 7 09:01:12 2025 GMT
Not After : Jun 8 09:01:12 2025 GMT
Subject: CN=a2abc13756eace4ea1acfcaf2d0e82f5fdcde558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:b5:fa:b2:6d:2b:b1:4b:5b:3f:41:39:ec:
80:33:7d:a7:e6:9a:b2:6e:e9:79:7b:67:8e:bb:48:
f4:43:c3:0f:da:40:dc:7b:4c:cb:7d:a6:c9:a8:aa:
32:44:75:04:7c:f5:f5:dc:1d:9e:43:3b:03:d5:67:
3b:50:e7:33:b1:6c:47:2d:9d:52:77:b0:13:b3:1f:
15:59:6d:df:55:f7:d3:3e:3d:3d:9a:a0:9c:9f:ed:
d5:79:d0:1d:2c:7d:d0:47:f6:b5:2d:96:24:75:da:
4b:a0:c3:ef:f8:99:41:38:36:fd:22:8c:73:d6:36:
b8:0b:a9:d1:f1:d2:f9:f1:0f:e2:9a:15:97:08:16:
86:96:bb:ae:3a:9e:b6:0a:80:9f:87:3c:76:d4:6d:
74:47:4b:7a:04:82:5e:c3:3f:21:d8:94:70:21:5e:
5d:ec:a1:88:36:7f:2d:53:cf:3d:98:4a:57:88:3e:
50:40:9f:d7:ce:c1:0b:ba:0e:54:ab:2d:87:8e:f4:
99:c2:76:df:1a:63:ba:7c:4d:67:b2:57:08:28:33:
46:aa:12:e2:30:17:14:d8:cd:b6:72:ce:8f:a0:53:
cf:25:85:bc:78:3f:7b:8d:b1:5d:c8:8f:2f:70:21:
99:d4:49:6b:3e:7d:ee:8c:46:6d:9d:8c:cb:e4:11:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:C1:37:56:EA:CE:4E:A1:AC:FC:AF:2D:0E:82:F5:FD:CD:E5:58
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:79:f0:4b:a1:74:f3:cc:15:81:49:f8:49:cd:c8:8e:6a:
ad:ed:f4:55:8c:9c:58:cb:47:7c:ed:c1:0d:6d:c9:14:5a:db:
79:16:39:8c:a8:27:41:7e:cd:28:c6:09:1d:d4:63:92:13:37:
25:d7:98:f7:c8:b4:37:c6:1f:2f:5d:89:4f:4e:7b:98:d5:98:
46:e0:8b:63:f1:ac:49:1e:48:2e:78:cc:84:d1:6e:8e:07:9a:
f3:32:b5:19:b7:17:e1:fc:40:de:e3:c2:0f:8c:e7:32:c3:15:
b7:05:2d:df:8a:80:ea:a5:e1:0d:82:b8:d6:7c:98:bd:7b:db:
6e:24:f8:62:42:7b:03:04:65:38:d6:74:f0:fc:29:44:b6:8c:
be:dd:8d:48:b2:e9:6a:df:16:99:6c:da:dc:ed:97:68:46:4b:
6a:8d:c3:f2:3b:3e:e9:6a:68:ef:72:61:04:91:f6:07:70:f8:
85:a6:43:5c:0d:b7:06:29:db:af:90:ee:63:db:49:c8:e9:b6:
e0:c9:64:59:7f:0b:e8:5a:84:6e:67:9f:9c:15:9d:31:9c:69:
94:df:a9:b4:8e:7a:b7:3a:a1:49:a7:04:a9:65:97:31:d2:39:
d8:04:7e:69:39:5f:dc:9a:90:50:89:62:bd:8e:85:7d:30:f1:
b0:84:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:04 2025 by rpki-client