Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: sAJbqIcj7I/IC+M+7kWifgPvvPW9gaw+WUAvihOW+2c=
Subject key identifier: 7B:52:E4:FF:F7:89:86:40:8C:26:82:1F:50:C9:79:F4:6B:F8:D6:DA
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01974A0CBA55242EFFEA3AA38E23307C6192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:37 +0000
Manifest this update: Sat 07 Jun 2025 11:00:37 +0000
Manifest next update: Sun 08 Jun 2025 11:00:37 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: 8V66uXp5CNtXdQgpDNR7MM+dLa7DvblyKYjeSYs5uz0=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ba:55:24:2e:ff:ea:3a:a3:8e:23:30:7c:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Jun 7 11:00:37 2025 GMT
Not After : Jun 8 11:00:37 2025 GMT
Subject: CN=7b52e4fff78986408c26821f50c979f46bf8d6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:c2:ef:b2:b3:76:55:ab:94:95:7d:fc:3b:
dc:48:ae:05:49:0d:b7:f9:21:97:32:29:ea:29:1d:
e3:51:e5:c6:1c:08:24:0c:8e:85:f5:5f:e1:ae:e8:
5e:37:c2:ef:2f:d9:77:eb:a7:a4:15:5a:e0:08:d4:
a5:2c:ad:07:3a:97:19:23:83:0e:49:af:a2:29:0f:
d8:14:d6:83:e8:cc:93:62:2a:4c:97:4a:6e:c7:41:
f4:31:15:9a:41:91:52:ea:55:03:15:eb:4e:28:e6:
96:74:d2:d0:6e:2d:d4:c8:12:ee:c7:49:ab:1e:7d:
4b:05:80:df:b1:27:6b:38:bb:0c:27:a4:7f:0d:d4:
7e:92:3b:34:92:c6:44:51:74:b1:80:8b:03:c2:3f:
b2:5a:47:cf:fc:0a:78:59:d9:1d:5c:04:d9:61:2d:
45:8d:ec:a2:60:bd:a7:01:58:17:ee:8b:8f:14:2b:
6c:23:98:4e:1a:d0:6a:fe:41:c8:a3:70:7c:83:b0:
92:a6:e2:c4:ba:62:33:67:95:61:7f:7e:c1:8d:c1:
85:62:fd:8d:8e:31:08:ea:24:81:81:da:34:ff:5e:
10:a7:af:27:c2:34:51:12:6e:00:54:60:af:b9:3e:
5f:50:39:fe:ab:01:4b:ee:55:cc:36:cb:74:68:61:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:E4:FF:F7:89:86:40:8C:26:82:1F:50:C9:79:F4:6B:F8:D6:DA
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1e:b1:d6:85:77:e0:8d:92:f2:9c:f6:13:18:15:62:27:b1:
9a:11:5f:a6:96:65:d9:1e:2f:c9:d3:fe:09:be:c8:86:09:c9:
5c:5c:82:cc:e2:b0:9a:6c:be:b9:43:bf:aa:94:79:da:9c:e4:
7b:ef:dd:ee:9b:23:55:ba:ee:3e:eb:41:a1:81:d9:98:57:99:
97:86:a8:e2:da:11:b5:7a:26:5a:d8:0f:9b:2c:94:14:19:06:
08:87:17:ca:8d:d3:b4:46:56:66:f2:a5:22:6f:f1:14:3b:30:
ac:68:75:45:37:82:58:f5:87:27:61:40:e7:79:b7:be:fb:14:
5d:82:5e:9d:9d:e0:9e:1d:1a:e1:d0:e2:65:ef:60:29:68:c5:
00:5c:47:cd:56:f7:41:55:17:44:4f:4f:3b:cc:27:94:e5:c3:
e1:80:d5:3a:7c:45:d0:61:00:1c:7d:b3:d0:44:b0:fd:98:43:
fc:d2:20:52:b3:78:da:67:26:61:96:4f:3c:a9:a9:e9:83:fb:
19:7b:f9:52:78:cf:17:fb:7b:cb:15:5c:c5:0e:ac:5a:dc:d8:
b2:02:36:dd:c1:bf:44:e8:5a:f4:4e:43:17:8c:f0:17:0f:5a:
25:8e:79:9d:b2:48:a9:62:f1:d5:38:10:b5:38:f3:f0:b8:d6:
95:34:e0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:30 2025 by rpki-client