Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: 5CBKSKHffMuOcZofNNoJIIsnJatot5LO7DuUYHbc8N0=
Subject key identifier: 66:E3:D2:CC:3D:5A:DE:F3:79:E0:5A:B1:D5:0E:1E:18:6D:8C:26:D7
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019750B42DA493628C52B62BDB24B473886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 0F71
Signing time: Sun 08 Jun 2025 18:01:14 +0000
Manifest this update: Sun 08 Jun 2025 18:01:14 +0000
Manifest next update: Mon 09 Jun 2025 18:01:14 +0000
Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: MVvKmUGVnOi5XpNEs7qRTIt8sXsY3haU4oV6Xjzat8I=)
2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:2d:a4:93:62:8c:52:b6:2b:db:24:b4:73:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jun 8 18:01:14 2025 GMT
Not After : Jun 9 18:01:14 2025 GMT
Subject: CN=66e3d2cc3d5adef379e05ab1d50e1e186d8c26d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:8b:f6:10:ab:6b:7d:ec:34:c1:79:63:17:
41:f9:9a:7b:fd:54:80:dd:9e:90:68:78:44:08:72:
f5:06:27:59:b2:14:31:54:00:6a:90:7a:73:17:3d:
80:5c:8e:71:80:51:7c:73:a9:3c:b8:a5:7d:b7:72:
52:ee:1d:70:5f:10:fa:5a:61:62:c0:cd:16:b2:6d:
f3:ad:2b:5d:da:4f:24:e5:c8:dc:f7:81:10:4e:25:
c1:85:73:ac:32:32:e9:e9:7a:04:ab:57:25:18:64:
4e:38:07:af:bf:3d:e5:b8:16:c6:a7:d6:71:b1:03:
74:ac:b4:e9:ef:cc:c9:29:57:9b:2d:5d:8b:1f:d5:
0b:7c:7d:03:5c:21:28:a0:51:bb:c2:b2:4c:68:09:
7f:99:30:ab:f6:57:e0:03:a3:6c:52:1b:56:f3:c7:
7b:1a:f8:12:f2:5d:39:a3:03:78:3e:2e:43:e2:15:
a4:48:a0:ee:b9:ca:ea:22:17:60:4b:74:7b:11:b2:
e4:b8:47:e9:e3:af:c7:a8:8e:72:16:2c:94:a1:71:
11:3f:c2:65:c8:6a:90:91:b8:59:8c:68:7d:7f:9e:
b5:56:69:76:8e:0c:be:81:65:94:12:52:35:b5:ca:
52:a3:8b:da:b2:27:78:b3:65:b8:67:ba:0c:1c:a1:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:D2:CC:3D:5A:DE:F3:79:E0:5A:B1:D5:0E:1E:18:6D:8C:26:D7
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:e6:19:a2:b0:ae:f1:5a:5e:9a:0b:85:1d:1f:29:83:62:
e0:a0:6c:11:ae:35:4d:f2:cb:dd:c1:ab:c1:36:e3:f1:a1:9a:
e2:0e:73:50:18:91:00:60:5d:62:77:e3:68:42:dd:12:cc:3e:
15:55:83:c7:d3:3c:04:25:08:12:01:d1:83:0c:0a:49:5e:d2:
41:9a:12:74:97:1f:77:b3:92:d0:bd:55:36:52:88:54:d4:de:
9b:fd:7b:6a:a4:8f:46:42:5d:ff:ff:22:83:52:21:1b:ac:77:
36:bd:c3:e8:72:48:fc:8e:dd:cd:ac:2a:d7:20:b5:f8:a3:08:
00:af:d5:d0:68:ca:06:c2:be:d9:26:f0:68:af:91:3f:4f:6f:
76:b1:4d:fa:6b:a5:a3:78:ee:9b:73:ae:ac:6c:2a:62:9a:b8:
3c:c8:b3:33:fe:63:e4:91:65:8e:f7:50:a7:ca:a6:f8:63:31:
7e:4a:33:aa:22:12:31:d0:b2:52:53:90:3a:bf:1d:6f:e9:74:
60:92:b7:53:0a:6c:58:37:cc:7e:77:2e:28:3e:f9:26:d6:00:
c5:27:24:0b:20:1d:c3:95:0b:f5:4d:df:53:6a:10:7c:5c:2b:
43:8e:23:e2:89:c5:2b:bf:24:97:d4:38:b9:a5:98:31:37:f0:
70:30:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:19:43 2025 by rpki-client