Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: eIbv1VmRL5TcV2MjfzPTRdU260/QPaFCzq1PHpayoqQ=
Subject key identifier: 5B:2E:E9:2A:66:68:FB:C6:2A:59:BB:84:B0:21:C8:80:9E:7C:17:70
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 01974AE8B90023488B19A5DFD9521DA5846C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0AC2
Signing time: Sat 07 Jun 2025 15:00:55 +0000
Manifest this update: Sat 07 Jun 2025 15:00:55 +0000
Manifest next update: Sun 08 Jun 2025 15:00:55 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: bN6SBYcE68VTUNry1oN6I9h3uWjEKHwjsopFGb1dX9Q=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b9:00:23:48:8b:19:a5:df:d9:52:1d:a5:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Jun 7 15:00:55 2025 GMT
Not After : Jun 8 15:00:55 2025 GMT
Subject: CN=5b2ee92a6668fbc62a59bb84b021c8809e7c1770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:b5:05:6d:7b:50:e6:cc:ca:ea:c9:02:17:
af:2c:86:aa:25:5e:12:43:1a:83:27:27:c7:3d:27:
bd:09:f2:28:ab:43:7f:7c:d2:31:06:c7:ef:7f:f4:
f1:99:04:d5:e1:9c:54:37:e8:ac:8a:26:62:22:03:
29:e6:eb:7a:54:d4:9a:22:5c:5b:b3:47:cb:65:6a:
cf:21:43:05:92:20:25:ba:94:1a:c6:29:6f:40:d7:
9c:6b:8f:fe:e8:c0:67:e6:f8:33:20:8f:95:53:df:
f1:70:09:52:0c:e3:62:b9:04:7a:9c:1e:69:89:a5:
d7:46:8f:4d:5b:9d:e0:09:06:26:8a:d7:9c:15:25:
56:91:e3:d9:a1:c6:f2:5a:51:16:8e:68:5d:53:62:
b7:c4:35:4b:8b:75:77:31:75:28:e5:b5:12:f0:b0:
b3:99:4c:fc:6b:de:a1:92:e7:16:d5:eb:e6:ec:54:
49:15:77:2c:34:48:79:fb:cc:d0:7b:2f:46:8e:16:
fa:3d:87:9d:0d:21:2f:2d:6f:dd:70:ac:81:12:4d:
54:e6:9c:52:34:04:e2:05:88:82:c2:71:ab:ac:c0:
ca:7f:1a:92:a0:47:56:32:26:41:6e:5c:11:bc:df:
a0:a3:1e:08:5a:5d:33:f0:8e:c9:b4:30:a7:8f:87:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:E9:2A:66:68:FB:C6:2A:59:BB:84:B0:21:C8:80:9E:7C:17:70
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:42:da:ad:6c:aa:2a:9d:06:aa:18:53:4b:ab:37:20:d2:
a4:47:5a:ad:73:ab:a8:64:b7:e4:68:1b:77:2b:15:77:b1:88:
17:e5:c8:f9:ee:9d:33:6f:ce:f4:40:6b:8e:6c:2f:3f:26:b1:
f9:f9:9a:27:da:65:56:bd:6d:a5:f6:0d:50:a1:a1:19:0d:a9:
d9:a4:cf:a6:33:08:fe:89:09:93:7c:6b:dc:23:ec:aa:72:70:
36:67:9d:0c:1c:0a:18:2f:6b:24:1a:ce:21:21:d8:16:76:5a:
ec:1c:ec:72:61:c6:4d:3d:dd:e7:35:96:5e:f7:69:38:27:77:
b3:c8:6a:05:c9:d8:6b:1a:5f:6e:aa:86:a6:91:29:6c:e0:4f:
a1:e2:f4:db:27:d5:37:03:2c:d6:c9:9b:9a:3b:f2:06:6c:f7:
06:03:39:72:70:e7:49:17:cb:e0:5a:eb:7f:2a:06:db:3a:0d:
7f:02:a2:93:54:44:d6:f9:c6:ab:ea:50:e5:9a:e4:0b:e9:65:
2a:9b:21:30:ff:29:47:65:a5:23:64:ee:11:0d:7b:45:37:ee:
a3:19:08:5e:d0:95:05:a2:74:44:f9:cd:a8:f8:6a:4d:4b:56:
1e:d7:dc:d0:4d:97:01:56:c7:90:a6:2f:55:ce:e1:9a:99:e0:
34:5c:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:32 2025 by rpki-client