Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: d3j0qJBeaqsnjIAa/8oyYE/yof/56v8Yb9dSyPF1pE4=
Subject key identifier: 12:73:3A:B6:02:5D:3A:6E:DB:62:1A:F1:0C:E8:51:C7:2F:B0:75:5F
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 01974FD8192BBA3F6D36352913E7B20C4112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 0526
Signing time: Sun 08 Jun 2025 14:00:51 +0000
Manifest this update: Sun 08 Jun 2025 14:00:51 +0000
Manifest next update: Mon 09 Jun 2025 14:00:51 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: 7ZM2HSaqgo1zKNB5KJSn5RGtyNSrKDq07E+732eQ65s=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:19:2b:ba:3f:6d:36:35:29:13:e7:b2:0c:41:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Jun 8 14:00:51 2025 GMT
Not After : Jun 9 14:00:51 2025 GMT
Subject: CN=12733ab6025d3a6edb621af10ce851c72fb0755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:46:97:0c:03:dd:26:78:ba:c7:fe:81:14:
22:5f:f3:c5:c2:ef:a4:11:83:6d:24:2a:b3:86:18:
7d:40:b1:14:7d:87:be:bf:8d:f4:c9:5e:aa:79:bc:
3c:57:8f:36:1b:d0:06:54:12:15:90:b2:4f:1a:5b:
87:fa:61:9a:09:1c:af:66:65:8c:38:bf:58:78:70:
d1:c2:18:89:61:37:88:72:47:52:83:36:01:3c:2a:
7f:10:65:68:ff:1a:c4:9e:ae:7b:d1:a4:bd:bb:70:
aa:b7:f9:ef:e8:29:ba:3c:02:7b:02:a7:c3:bd:b1:
b3:4e:d9:76:d4:bb:10:af:a3:fd:a9:f7:eb:43:6b:
94:48:82:7e:b5:76:ba:ec:9a:93:4a:37:74:1f:f0:
0b:9f:47:54:0c:42:9d:71:8b:6a:c0:03:d3:ef:50:
8e:62:7e:50:b2:93:13:27:2d:fa:54:a6:0f:1e:53:
2c:13:ca:d1:61:64:a8:7b:8b:fd:36:b5:d7:1e:76:
ae:3c:97:ac:af:9b:68:8d:1b:25:0c:0c:43:8d:67:
0f:b9:47:43:5c:54:97:8c:a0:fd:29:ac:d1:28:b6:
fb:72:7b:d8:70:77:1a:93:82:1e:ea:9b:bd:a9:3f:
f7:ec:67:29:16:03:45:c1:00:a0:f3:2b:46:e7:70:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:3A:B6:02:5D:3A:6E:DB:62:1A:F1:0C:E8:51:C7:2F:B0:75:5F
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:71:68:9c:59:cd:4a:af:87:ab:50:ff:fd:2d:bb:5f:db:
2c:82:83:6e:2e:32:e5:5e:ad:d3:b7:a2:df:03:dc:e1:be:e1:
ca:02:3e:e4:83:13:02:38:12:83:4d:d8:6a:8a:c5:e3:8c:cf:
b9:7e:f1:f0:86:a3:b1:78:3c:2d:61:b5:cf:5b:ab:c7:77:7f:
88:6b:6b:ce:cc:14:0f:a0:b4:cc:45:fe:49:60:66:27:c2:64:
ef:e4:7c:61:dd:9d:0e:88:fa:25:39:79:c5:c9:37:61:df:e1:
46:b6:a7:0b:ca:c4:8e:8e:98:b2:5a:03:1f:d0:68:eb:33:8f:
52:af:d9:0a:5c:9f:be:f7:69:55:4c:f3:c8:3b:57:b6:91:e3:
24:74:80:a1:1c:94:f1:64:3d:7f:a7:83:d9:0b:96:62:16:d7:
c1:e1:78:69:9c:c4:86:e0:5d:da:81:0a:93:27:62:10:46:50:
43:f1:b3:4e:d0:be:fd:22:18:f8:b0:05:30:7b:71:01:fd:e6:
5c:34:9a:48:72:ca:f4:96:e9:ac:4b:09:06:1d:c4:01:7a:6e:
15:ce:a3:b9:2e:7e:31:a6:6b:70:c8:01:c4:05:c6:72:da:d6:
e9:08:30:31:2b:11:ec:55:19:c5:2f:c5:eb:59:c0:dd:f8:76:
71:f0:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:09:17 2025 by rpki-client