Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier: cRxRYwBGk9EPgczDvMuKJQnDuEPMzT9aUnRx6zbPk5M=
Subject key identifier: 99:7D:36:B2:DF:7E:D1:45:3C:F4:69:96:EC:37:C1:17:A2:87:F5:F9
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 019759EDE5FE355DEFCCD51D6AE62D9743EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number: 0E17
Signing time: Tue 10 Jun 2025 13:00:52 +0000
Manifest this update: Tue 10 Jun 2025 13:00:52 +0000
Manifest next update: Wed 11 Jun 2025 13:00:52 +0000
Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: jf5EXcgQyoO6JKiCGNJdzfNmCeIXSl85vmvcCnZixTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:e5:fe:35:5d:ef:cc:d5:1d:6a:e6:2d:97:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Jun 10 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=997d36b2df7ed1453cf46996ec37c117a287f5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:5d:98:63:c5:9a:d6:10:f1:bb:38:8d:fb:
09:b2:32:f0:f2:c8:1f:43:2b:58:6e:dd:9d:58:c2:
26:ae:f7:30:aa:81:67:0c:5f:3b:fd:6a:6b:d3:1f:
6c:06:20:df:4d:e4:46:e2:e6:0b:05:25:19:03:5d:
ef:ab:76:87:7f:2e:c0:5b:fc:eb:0e:8a:29:ce:a6:
09:e8:4f:04:26:bf:08:4c:2e:46:5d:61:4c:cb:67:
f9:b3:78:9e:2a:b3:e4:3a:06:d8:18:94:5f:24:74:
a5:01:a6:d9:77:d3:0a:50:79:34:6b:9b:a8:ec:77:
3c:45:d0:ca:f2:92:63:3e:2a:10:b6:1f:cc:77:1e:
cb:bb:33:9d:0e:a8:c8:7e:fb:b3:93:04:4b:11:41:
06:91:3a:36:0d:cf:09:00:0d:5f:9f:88:fb:ab:9c:
07:2b:e7:54:34:c6:9e:7f:68:4f:3e:5d:3e:40:11:
24:42:f8:97:56:ff:f4:ec:cf:9f:f9:5d:55:4f:d4:
18:95:0b:fa:55:67:79:39:eb:d9:67:ad:3d:dd:a9:
4d:da:b2:3f:23:cb:a0:ab:fe:e1:ec:9d:b2:f8:63:
89:c2:66:01:18:71:7e:5f:01:8d:b6:ff:65:0c:46:
29:fb:5f:90:ea:05:9b:f5:14:e9:0e:e7:4f:31:d9:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:36:B2:DF:7E:D1:45:3C:F4:69:96:EC:37:C1:17:A2:87:F5:F9
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:c7:41:ba:bb:5b:d3:a9:4e:5d:ab:51:99:94:02:5e:7d:
5b:c4:bc:69:12:7b:a7:7b:4c:c6:34:dc:5e:c2:4e:e6:f1:94:
be:b7:3b:5d:ed:ae:fb:2b:9b:64:15:3f:88:1e:55:53:d5:9b:
7f:96:79:00:fb:e9:dd:6d:15:cd:c1:2c:28:6b:01:60:d4:b4:
68:05:07:e7:46:c9:d6:05:d5:5f:06:9a:e6:99:be:a1:c1:28:
42:65:38:bb:2f:f5:c6:d9:80:37:ed:3a:eb:5d:6a:5f:df:b9:
09:d6:8b:c2:b1:d0:fd:0f:29:e9:42:44:ac:b5:f8:93:f8:4b:
8c:15:8d:46:10:90:4e:a9:6d:50:da:6d:0b:8f:d8:7f:62:47:
33:90:81:bf:45:cd:49:2d:d1:c5:60:e1:ce:24:02:e1:66:c7:
be:f9:fb:3f:a5:a3:d9:fe:30:6d:00:3a:0c:e2:3b:26:55:0f:
fa:2e:ef:25:36:eb:4e:8d:c2:72:71:c5:8b:cd:b6:8e:cd:e7:
79:48:3f:a3:32:9d:94:a4:f2:fb:64:92:01:a5:e8:13:f6:4b:
4d:73:b9:93:2b:27:df:ab:4d:bc:68:b9:20:1e:6e:2a:09:96:
78:d4:38:9c:99:f5:b5:b1:63:5c:d3:c9:47:ea:02:36:78:48:
ba:4d:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:58:45 2025 by rpki-client