Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: P3TfqW7M+ot+lQk9Vs8FT0wk4AEAfNDg4kapeloPpuw=
Subject key identifier: A7:53:B6:4F:0C:56:5A:CC:F6:CA:74:88:44:F9:6A:99:32:16:0A:DB
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 0197469EC3C66CB0BC76A62918D3B5D87D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:38 +0000
Manifest this update: Fri 06 Jun 2025 19:01:38 +0000
Manifest next update: Sat 07 Jun 2025 19:01:38 +0000
Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: ku07bKFFUDkZFEmzPIcq7xnlduz9hrjMSkKX4fDmKwY=)
2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:c3:c6:6c:b0:bc:76:a6:29:18:d3:b5:d8:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Jun 6 19:01:38 2025 GMT
Not After : Jun 7 19:01:38 2025 GMT
Subject: CN=a753b64f0c565accf6ca748844f96a9932160adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:37:34:ab:3d:bc:d9:b3:76:27:ba:75:de:
93:9b:aa:8e:b9:e3:6d:e9:57:c6:73:a0:a7:ad:69:
96:56:05:b7:be:12:74:b9:bd:1f:b9:bb:eb:da:4b:
ed:ab:37:09:e5:ec:76:4b:3b:68:d5:7a:ef:69:3c:
98:b7:5d:d3:75:7d:72:08:c7:2d:15:ae:4c:bb:41:
f5:dd:3c:1f:0d:28:b9:b0:5f:ab:8f:5f:ab:18:6a:
77:b3:ef:de:81:a2:e8:6b:5a:da:b8:54:fe:3a:4a:
0e:96:9a:63:92:9c:d8:66:d8:35:00:f4:02:55:06:
05:09:57:e9:ea:38:7f:72:6c:f3:d0:76:7a:c2:95:
9e:96:d6:33:f9:df:a1:33:86:7a:0c:cb:e6:b5:ec:
41:f4:7c:53:5a:d5:d2:9e:17:1a:f6:3a:f0:ca:63:
45:6a:42:ce:e4:25:78:cd:4a:c8:54:c7:2b:d3:10:
d8:65:c8:88:a8:cc:ff:e3:e4:b0:34:5f:81:05:14:
6d:69:30:e7:33:ed:9b:7d:ee:0f:4a:f1:03:ba:8b:
49:85:b9:d3:0a:12:29:45:63:cc:c5:dd:69:7d:7f:
17:14:6f:13:e0:16:85:d4:61:8a:48:86:b7:a5:ad:
c1:91:4e:27:30:c4:2b:69:e2:42:d1:b9:c9:db:8e:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:B6:4F:0C:56:5A:CC:F6:CA:74:88:44:F9:6A:99:32:16:0A:DB
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:09:bc:56:22:99:28:f3:ce:fa:46:f7:a3:46:08:46:e4:
30:0c:91:c2:41:68:47:e9:fc:51:85:ac:4f:a6:53:18:d2:af:
cc:3e:7d:b8:3e:e4:46:18:98:5d:9d:11:ef:f2:c8:d9:e6:ed:
13:fb:4a:62:fa:42:de:0d:9c:b2:18:0e:70:7a:60:61:60:11:
a7:ce:d0:9c:50:73:e2:d6:10:81:35:a8:ce:a6:db:59:1c:5a:
e2:6e:92:46:1f:49:b2:98:f2:97:cd:e7:7b:3f:4e:69:45:eb:
af:1e:ca:b5:7a:8c:3b:42:d9:5c:a7:f4:d8:d3:77:6d:c1:5d:
4f:eb:86:f4:31:98:18:80:40:24:65:60:84:52:35:31:e7:57:
4b:59:2d:64:1a:e7:e3:15:81:1d:e0:31:69:5e:c5:28:3f:4b:
c4:72:42:09:2e:51:e3:02:88:46:d6:4f:17:66:d7:67:59:cd:
ac:95:c7:79:bd:df:fd:e0:1b:22:43:8f:41:41:08:a2:d8:42:
e0:c2:e8:d6:d4:61:de:00:c3:3d:a0:56:cf:a5:0f:87:66:2e:
57:21:d3:15:99:1b:91:44:f5:2c:b2:fe:a1:4e:6d:27:b6:4c:
cc:5a:25:26:61:0e:04:19:25:19:e8:a7:cd:dd:8b:6b:ff:24:
30:6f:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:47 2025 by rpki-client