Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: JAx2W9J77TyTJlhVMtlj4ATkl/9sDFiOdb6+1uCMd8U=
Subject key identifier: 53:BB:4F:1D:69:30:DF:7E:80:4B:17:96:0D:F2:71:10:1B:23:4A:16
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 019754233766B2F33482C0A1B7C6B3BBAE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 12A9
Signing time: Mon 09 Jun 2025 10:01:23 +0000
Manifest this update: Mon 09 Jun 2025 10:01:23 +0000
Manifest next update: Tue 10 Jun 2025 10:01:23 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: +y10bMIzWRhWfeDinIBHvzMQRoqJp0q1G6aovtFw29o=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:37:66:b2:f3:34:82:c0:a1:b7:c6:b3:bb:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jun 9 10:01:23 2025 GMT
Not After : Jun 10 10:01:23 2025 GMT
Subject: CN=53bb4f1d6930df7e804b17960df271101b234a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:a5:e2:64:ba:c0:11:ff:fb:53:df:66:62:
0a:3c:02:ea:20:14:6b:40:50:26:28:7a:cc:2d:93:
2d:f8:1a:e9:2d:c7:92:3a:81:69:3d:62:01:72:c4:
a8:d3:45:ce:8e:c2:e1:91:bb:a0:22:c3:54:1c:c3:
43:25:3c:bc:c2:cf:c2:2f:ee:49:f9:b5:88:8b:bd:
15:50:33:63:ba:4a:6e:03:98:a7:e6:84:66:1a:0c:
fc:4f:16:d9:5c:c4:70:41:d4:05:41:2a:c0:77:7d:
56:79:4a:9a:f9:da:de:d3:c0:b9:71:bb:a3:1c:fe:
44:07:86:11:37:d7:49:2e:fd:fe:6e:dd:2b:99:27:
47:06:c6:55:26:21:00:12:ca:cb:bc:a8:fd:70:92:
e8:c1:99:84:65:57:36:fc:48:da:5e:a4:78:48:c9:
c9:60:ba:bd:4f:fc:85:07:4f:f5:f2:af:84:c6:47:
7a:52:2c:f7:fd:e7:14:f7:0d:18:51:8e:28:6f:c9:
7e:62:b9:d0:3a:0d:24:c0:2d:2d:f4:13:bc:95:d5:
c2:7a:c6:72:8a:32:77:48:6e:c6:6c:19:12:88:98:
a7:20:cf:a3:f6:c1:88:a4:b0:fb:69:80:0d:06:74:
80:1d:b7:e7:13:a6:24:ff:7f:41:e9:d6:47:25:3d:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:4F:1D:69:30:DF:7E:80:4B:17:96:0D:F2:71:10:1B:23:4A:16
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:1e:d6:ed:21:fc:37:9f:c7:10:12:97:0e:2d:50:9f:b4:
47:67:df:db:ad:ec:c8:ed:24:aa:39:c5:67:b6:52:90:31:54:
f0:6f:13:c8:94:f1:b2:07:c2:a7:f6:d1:66:55:fc:94:a4:11:
5b:c4:35:86:4c:b6:d7:c9:38:4a:13:96:11:25:2c:bf:e5:3a:
38:65:12:ca:e8:00:00:c6:4e:85:38:fc:f0:8a:d4:99:09:0d:
ad:a2:3d:04:91:88:65:be:07:20:80:62:03:be:43:58:3d:c9:
16:82:bc:97:5a:25:11:0f:98:e2:8c:53:d2:4d:39:a8:87:98:
eb:5a:47:2e:03:57:60:5f:6e:ed:ff:2a:73:08:91:8f:d8:72:
7c:15:73:89:47:47:11:49:6f:5c:a7:5e:38:dd:eb:4f:3d:33:
7b:64:2c:64:71:9a:3a:9e:cb:6b:66:19:5e:4c:b6:61:a2:74:
28:61:22:57:cc:9d:35:da:2d:1c:c5:c8:af:8e:64:ea:e4:06:
8c:3a:90:fd:b6:0c:a5:bf:9c:40:4e:97:b6:ac:cb:eb:88:47:
9e:3e:91:9f:52:c9:8e:ed:81:27:c7:54:d3:4b:df:80:af:6a:
a1:82:a6:c9:f3:2e:98:7b:2a:7e:f7:59:fc:e0:73:5c:43:a6:
04:2f:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:27:17 2025 by rpki-client