Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: H3WUljFYq+DzYRwKTIHbpxCutWzJ2tXmvevZnmThMRw=
Subject key identifier: BB:BB:9C:86:4E:E9:51:B1:E1:17:3B:66:24:F2:F6:03:D2:63:B7:18
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 01975DCBB4A15365C2ADF5BC79E2E1D06886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 12AE
Signing time: Wed 11 Jun 2025 07:02:00 +0000
Manifest this update: Wed 11 Jun 2025 07:02:00 +0000
Manifest next update: Thu 12 Jun 2025 07:02:00 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: h76tjdgi4DVTbIJA7iEt2Wtj5OGd/g8SeLPzUWbrl/w=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:b4:a1:53:65:c2:ad:f5:bc:79:e2:e1:d0:68:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jun 11 07:02:00 2025 GMT
Not After : Jun 12 07:02:00 2025 GMT
Subject: CN=bbbb9c864ee951b1e1173b6624f2f603d263b718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:7c:6d:e1:84:c3:a1:d6:b8:21:53:30:44:
59:15:da:8a:45:b4:ab:86:06:fd:37:99:ac:b2:d8:
55:81:82:df:d0:17:bc:9b:d3:5b:7c:8d:8f:23:7d:
26:71:f8:d6:84:92:5a:69:40:74:e1:2e:a4:e5:1d:
74:f1:c4:9b:37:f7:f3:88:44:a3:3a:f4:fb:0f:ef:
88:15:f5:eb:af:a7:c6:6d:3a:cb:e1:4c:73:b7:e7:
0f:f8:d5:2c:5d:6e:ad:1c:73:37:b3:05:c9:92:ff:
bc:00:96:6e:4d:0f:05:a3:55:ce:16:e5:93:53:52:
9d:51:2c:5b:9d:60:a4:d3:bc:d6:b5:89:ae:5e:c9:
57:99:38:57:44:67:c0:ea:53:ba:55:4f:eb:32:f3:
68:9a:2c:39:f8:32:7c:cc:5a:32:6a:e2:69:e5:1c:
12:e1:32:d3:c4:7f:1c:7c:9a:d2:96:db:47:39:89:
bd:35:f6:9f:0a:18:52:a2:6a:fb:8f:73:76:b2:dc:
93:7d:51:51:29:82:1e:01:35:18:98:10:fb:58:36:
e0:bf:59:96:52:71:98:10:f3:23:c2:5b:b6:a1:15:
bf:0f:6f:40:04:54:a4:3f:21:2e:22:09:53:65:44:
d6:68:83:0d:df:af:c0:dd:1e:12:f0:f4:6f:55:5c:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:9C:86:4E:E9:51:B1:E1:17:3B:66:24:F2:F6:03:D2:63:B7:18
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:64:9e:a5:f5:72:71:6b:fc:30:b3:56:5a:6b:6b:47:b0:
df:be:8b:75:96:16:4a:7f:c5:08:34:97:24:c8:81:e6:c4:1a:
95:b2:a4:67:7d:57:1d:d7:dc:d5:3a:57:4f:e2:70:4d:52:e9:
97:87:15:82:c3:8e:28:5e:44:09:8a:64:c7:5a:f1:81:74:fe:
ad:f2:50:96:1f:6d:bc:a4:b1:e2:0a:ca:59:24:3f:6c:5b:71:
56:e1:a0:40:65:06:6a:8c:99:10:ec:f0:4d:b9:3a:22:63:e8:
98:ae:2c:93:06:f8:38:74:dc:72:b2:f5:10:b4:6f:22:6c:31:
fd:dd:de:5d:59:c5:09:84:28:be:01:a5:0b:4d:61:df:49:07:
a9:eb:47:b0:5e:f6:94:5e:ce:df:5b:88:9e:5c:2b:06:ca:f1:
94:7a:95:52:d4:c7:2c:1a:3a:ff:a1:ec:f3:2f:38:6d:c4:6b:
fd:40:a6:32:8c:fe:7b:9c:36:8f:f8:a2:12:7f:54:49:02:82:
30:53:a6:a6:4e:11:47:fe:1c:d5:ce:b1:86:48:bf:09:66:de:
14:57:97:8c:71:50:9c:53:cb:e7:a1:0f:27:fc:85:9f:08:51:
3a:58:09:27:21:07:82:77:9f:95:f4:84:84:d3:61:2b:88:b7:
7a:3c:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:09:37 2025 by rpki-client