Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: +TolD7W+rkiYddROTvLDWmfTGbxH8QWtkeZ+utLm+G8=
Subject key identifier: 0F:5B:F8:8F:27:5E:6F:F9:14:1D:77:E6:C7:64:D1:78:C7:F1:8F:AC
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019749315CA3218516DD77CAF706BA416105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 07:01:01 +0000
Manifest this update: Sat 07 Jun 2025 07:01:01 +0000
Manifest next update: Sun 08 Jun 2025 07:01:01 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: DbwDdh9rSl5e/CALn27v57JlY0BtppmUosmtDTLZje8=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:5c:a3:21:85:16:dd:77:ca:f7:06:ba:41:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jun 7 07:01:01 2025 GMT
Not After : Jun 8 07:01:01 2025 GMT
Subject: CN=0f5bf88f275e6ff9141d77e6c764d178c7f18fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:0a:25:42:72:14:ac:1a:7c:25:d4:11:34:
4d:91:b4:8c:a2:60:3f:71:78:ef:0c:85:1a:56:67:
7a:71:5a:72:3e:52:97:d3:c5:66:95:4d:39:03:01:
b5:4f:ed:a0:13:6f:d1:13:88:77:f6:4d:ac:32:9f:
f3:da:ea:81:da:24:48:5d:ca:76:37:ed:b9:9c:62:
52:53:fa:9d:1e:dc:bb:7b:4a:0d:c4:c7:37:39:76:
76:e6:a3:ee:3c:2d:14:71:6e:55:55:cf:90:a8:03:
63:30:ef:ec:33:4b:cc:34:9f:81:10:22:1e:4c:61:
39:9a:db:35:99:c3:aa:01:65:8d:09:76:ce:ca:5a:
33:31:79:41:a9:78:42:32:ba:1a:1d:41:6c:8a:cb:
1e:9d:ed:ac:e8:39:08:5a:67:66:3a:5f:01:87:55:
49:e2:1d:d2:92:f3:db:47:76:2b:c6:64:44:21:10:
e6:b7:4d:46:ce:c4:19:dc:7f:08:f6:a1:d5:19:0a:
05:02:1b:5b:78:cd:cc:ce:82:ac:04:11:d2:8a:14:
81:50:fc:15:05:94:36:6f:53:57:62:31:3c:70:13:
52:dc:eb:9d:24:fa:86:2e:0e:dc:ce:ce:85:79:6e:
43:63:e9:6f:c1:cf:e7:51:c9:4a:bb:51:30:4c:d8:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:F8:8F:27:5E:6F:F9:14:1D:77:E6:C7:64:D1:78:C7:F1:8F:AC
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:0c:53:bb:98:e8:76:45:a8:82:b1:ec:8d:7e:24:a4:d5:
1b:51:79:b3:4b:77:01:2e:1e:96:e4:80:62:2c:eb:7a:41:ba:
e5:7d:77:23:40:cc:d2:e3:c9:91:0c:ad:2b:3a:0d:69:a9:3b:
e3:20:84:b1:61:73:b1:ca:f9:c9:71:8c:a8:01:91:6e:d4:2a:
f1:99:1a:f7:ba:b0:ad:5e:09:d3:17:ab:dd:c4:ac:8a:9f:21:
e7:3b:4e:51:60:3d:a7:12:d8:f6:e7:e5:85:1b:c8:fa:aa:94:
f8:1e:14:95:a0:99:c1:7a:24:eb:ca:50:41:28:89:10:30:c5:
4b:51:22:7b:c5:a9:19:ab:d6:ba:5e:67:45:6a:5e:75:75:42:
a9:30:15:88:b6:cd:df:e0:16:e0:ff:8f:92:52:eb:ac:d1:67:
db:ed:c6:07:96:d4:a2:88:fc:be:95:18:a1:79:54:a8:2d:c7:
71:1c:14:e1:e5:12:7a:1f:b0:e5:a8:e2:bf:66:6a:9f:34:b8:
b2:8a:07:cd:40:5e:21:f0:51:ab:5e:b8:78:5f:e0:f4:0f:ab:
6c:2c:36:2c:4b:71:b4:e4:6c:e2:30:e0:b6:df:5d:89:37:4a:
3e:4b:2a:2b:e2:58:00:15:75:28:3f:ce:48:33:61:d7:4c:96:
bc:eb:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:22 2025 by rpki-client