Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: YVNBnaFWt0px/7JrYmDexezL8mXTTnaLscJQs92KH14=
Subject key identifier: F8:E1:74:7A:57:C9:1D:3C:B1:5E:24:45:51:52:A7:C6:E5:4F:28:81
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019748F9E1B7C055021B4ECA12E92F1E3048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:00:25 +0000
Manifest this update: Sat 07 Jun 2025 06:00:25 +0000
Manifest next update: Sun 08 Jun 2025 06:00:25 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: 0WJHc4foZOgY88QwzBsWQ3qLEhEDjnDsqkbKeIjdaak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e1:b7:c0:55:02:1b:4e:ca:12:e9:2f:1e:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jun 7 06:00:25 2025 GMT
Not After : Jun 8 06:00:25 2025 GMT
Subject: CN=f8e1747a57c91d3cb15e24455152a7c6e54f2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:b9:9a:b9:c0:94:4d:b0:68:21:8c:3c:bb:
e7:66:6d:e2:b7:39:8b:08:05:93:ca:a9:b2:7e:d2:
ef:1a:66:8e:cb:21:fb:d5:bf:99:9e:b8:bd:36:65:
75:cd:74:ef:98:46:72:33:6e:9d:84:a2:ef:f1:a5:
68:10:e6:75:82:f0:55:6c:a3:4c:70:3d:08:eb:ee:
35:9a:4a:bd:34:b0:26:5d:29:da:6b:39:aa:c4:6f:
34:d4:1c:ef:58:b0:a0:21:28:7c:f8:0f:0a:96:4a:
ad:98:51:bf:b9:3c:de:7e:71:3d:ae:01:ae:c4:ad:
bc:59:dd:8a:0a:27:af:b1:a6:31:c4:a7:48:f9:59:
c5:bf:ce:1d:5f:79:07:33:e4:61:cc:17:67:02:a3:
67:9f:41:16:37:c3:b8:e0:96:74:4c:74:32:84:25:
26:6d:54:27:4c:ad:24:4b:05:57:b6:32:b4:cf:7e:
19:c1:90:fd:22:b9:50:ca:2f:3e:2e:4d:90:25:63:
6a:b9:b1:30:2a:d8:16:68:ca:26:cf:3d:97:76:8b:
c5:36:69:98:96:55:e1:68:47:c4:b6:63:e7:b8:3f:
00:f2:3f:59:57:37:15:e5:81:5e:1d:e6:1d:35:cd:
0f:4c:b3:01:25:b3:a5:00:e8:c9:75:a0:98:61:7a:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:74:7A:57:C9:1D:3C:B1:5E:24:45:51:52:A7:C6:E5:4F:28:81
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:65:0c:9d:15:ef:2b:c2:1d:c0:9b:33:d0:32:42:d9:c1:46:
1e:48:ff:d6:e5:67:2e:15:d2:e1:8d:2f:ff:73:cc:3c:be:5a:
fc:d2:70:5e:96:a9:a2:ae:f4:33:63:b7:56:bb:71:7c:f4:71:
d0:52:7f:e5:11:83:25:90:a5:fd:16:c0:d5:b8:e9:8f:8d:4c:
34:43:53:84:d5:cd:e6:e4:d4:6b:e2:d1:87:a4:54:7b:e2:32:
37:44:d6:e0:e5:21:72:ad:99:d1:a1:ad:3f:f8:a7:08:98:2e:
cf:83:99:3a:d2:fe:68:23:aa:26:e3:6f:e8:d1:b5:26:ec:85:
44:6a:b1:db:c0:b9:e9:40:16:57:aa:d8:20:d8:ea:85:63:98:
f0:b6:2f:04:d6:70:ad:23:0e:1d:66:dc:84:39:3f:b3:54:af:
6d:f4:5e:7b:73:83:33:36:2b:57:1d:1b:1f:48:c3:63:fe:f8:
9e:fe:e0:7f:4d:76:c8:68:d8:0b:c8:93:bd:f3:0b:37:41:ab:
d8:65:b4:d5:ef:6b:8b:bc:6f:f6:d9:c5:7e:3e:a4:a5:21:4c:
42:41:f9:45:ee:34:4e:39:03:5b:44:79:ad:63:29:2d:96:cc:
44:5d:f8:54:4b:a1:45:f5:e5:de:d5:15:c9:13:44:5c:23:81:
3d:6c:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:13 2025 by rpki-client