Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: 2p34P8Ob1VSYeR/H887PvIyjrsm3hB79AoMFcSDgaDY=
Subject key identifier: CD:44:CE:EC:8F:62:B7:DD:83:5E:70:DF:C0:47:52:62:6D:7B:77:17
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 01975C135EA3871D2E35621F8F50F661DBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 23:01:02 +0000
Manifest this update: Tue 10 Jun 2025 23:01:02 +0000
Manifest next update: Wed 11 Jun 2025 23:01:02 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: Eu/WeDi2v4XtXuJmbCT26v7d5kcJUT64wZe4hzyueoE=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:5e:a3:87:1d:2e:35:62:1f:8f:50:f6:61:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Jun 10 23:01:02 2025 GMT
Not After : Jun 11 23:01:02 2025 GMT
Subject: CN=cd44ceec8f62b7dd835e70dfc04752626d7b7717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:0b:ab:a8:fd:d3:f6:79:4a:40:14:f5:11:
42:90:12:48:90:5d:3b:70:33:c1:ab:e3:e4:b5:2a:
7a:8b:6c:f5:17:1d:18:48:90:7f:b2:17:d9:6d:2c:
e2:06:7b:6a:b0:6f:95:fc:34:20:82:4d:3b:72:b9:
1e:6b:43:25:52:37:4d:32:09:49:8f:6d:82:f4:a1:
dc:f6:eb:81:c3:f9:6a:8e:c6:51:a7:8f:59:b2:91:
73:5d:4c:59:ca:64:a3:09:d2:27:34:b6:71:70:3f:
02:23:1a:bf:68:6d:fc:eb:67:33:f2:07:b0:c0:82:
23:6b:5e:04:77:4d:3d:20:8a:a3:f1:e5:d8:69:56:
72:f2:a5:5d:b1:b6:33:9a:db:c4:f8:8b:74:71:3b:
0b:43:c6:fa:f9:ba:f7:a0:50:68:23:72:d7:d5:20:
03:b6:0f:32:57:0d:07:a6:2c:51:da:42:4d:9b:c2:
93:65:f9:97:c8:e0:2d:f6:04:b9:b1:d5:36:d7:cf:
9a:65:cd:b1:40:ac:43:33:e9:33:03:d4:ee:b0:6d:
e9:8e:ee:b2:b8:20:d3:04:68:c7:f7:d6:18:90:45:
8f:59:13:d2:f5:fa:9f:ff:ff:2f:07:d4:2c:e1:f4:
2e:e0:88:45:23:ad:d7:67:8e:63:b5:7a:d0:3b:51:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:CE:EC:8F:62:B7:DD:83:5E:70:DF:C0:47:52:62:6D:7B:77:17
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:5c:06:9f:bf:d6:fe:e7:a5:34:9c:5f:41:47:d6:c9:e8:
9c:fe:40:24:9a:fb:90:a6:20:b3:15:ee:ec:4e:9a:10:a5:da:
60:be:c4:f7:30:d5:c7:dd:0c:b5:93:45:a9:e9:76:cd:1f:3c:
03:01:ff:32:1f:c6:5e:3d:ca:3b:0e:8d:f2:90:29:b4:d4:f0:
a0:1a:37:e2:45:8c:fe:13:42:ad:ec:0d:5c:10:07:c6:9b:28:
01:89:3f:c7:b3:60:e9:f1:ef:b9:c4:5c:c4:c6:cc:fb:a7:96:
04:94:ad:86:d5:84:80:0b:f9:19:df:af:3d:bc:c1:30:10:71:
ce:c6:29:12:25:1c:a9:ce:fa:d4:7e:da:cf:fa:81:60:40:f0:
19:fb:e1:e6:94:61:dc:bb:24:7c:6f:0e:0d:a9:c4:5b:b0:f5:
75:62:0d:39:78:a8:48:6e:98:3e:4b:29:a1:ab:32:9a:78:98:
18:15:8a:9c:c8:b8:36:a3:0a:b9:55:3f:b7:3f:f0:16:13:e6:
6f:f6:49:c3:c2:f0:5c:22:2b:3a:e0:9d:89:b8:3e:b0:66:34:
fc:27:a9:65:c1:24:ca:31:3a:05:46:e0:52:75:87:1e:b4:fe:
31:b5:b0:ab:36:39:1b:19:bd:23:a1:9a:72:d0:2a:5e:e3:c2:
9b:de:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:57:02 2025 by rpki-client