Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
File: NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json)
Hash identifier: tVCkaxMbQCaewe40BBSSO49fIRozfMtP3wgOGNSk3KQ=
Subject key identifier: 97:6D:90:7B:2F:F7:0C:B1:19:2A:60:9F:19:16:7E:96:60:6A:EB:71
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 019748F9CB8DD24BAA04DFB002824FDDC433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
Manifest number: 0EE1
Signing time: Sat 07 Jun 2025 06:00:19 +0000
Manifest this update: Sat 07 Jun 2025 06:00:19 +0000
Manifest next update: Sun 08 Jun 2025 06:00:19 +0000
Files and hashes: 1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=)
2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=)
3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=)
4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: 5us5tR2/OJrklEngrrSArCg2sEphhhDBf623pyXEX0g=)
5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:cb:8d:d2:4b:aa:04:df:b0:02:82:4f:dd:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jun 7 06:00:19 2025 GMT
Not After : Jun 8 06:00:19 2025 GMT
Subject: CN=976d907b2ff70cb1192a609f19167e96606aeb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:be:0f:0a:b1:5a:a5:4b:18:08:48:ad:71:
66:f2:75:13:cc:c3:35:ca:cf:2d:20:1b:e4:5d:40:
71:e7:c3:95:67:ca:fa:ad:71:00:c0:2d:10:6b:b0:
51:77:ec:91:75:ab:02:59:fc:65:60:22:e1:10:35:
d6:f2:f8:a9:57:37:49:61:22:a5:22:5a:eb:25:fb:
ba:9c:d8:52:52:14:bb:69:30:43:2e:6e:3f:5b:a5:
1a:fb:b6:9a:fc:fa:0c:04:46:9a:77:bb:14:11:3d:
cb:b7:2b:de:07:94:91:17:eb:08:55:ce:18:ef:80:
94:95:ad:3e:bf:9a:73:e7:f7:00:31:bd:54:cc:1b:
83:e7:d6:05:4a:b0:01:f4:8a:74:1d:01:52:32:4d:
b1:4e:8a:3c:4c:76:0b:ea:91:9f:26:d7:e3:65:b9:
26:68:d3:89:d6:1c:e8:31:65:9a:39:47:b0:33:ff:
51:ef:11:89:fc:ce:6e:99:c9:b9:11:bd:08:13:9b:
9f:c2:fb:7b:df:b3:b2:7e:39:cb:d6:f5:61:37:9a:
78:ba:05:0e:29:4c:8d:dc:e8:8b:f3:9d:4b:6c:e9:
b0:24:67:80:71:f4:68:c1:1c:0a:a9:48:9f:ba:03:
63:f9:ae:42:4f:a9:aa:0f:b8:89:59:75:df:bf:ab:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:90:7B:2F:F7:0C:B1:19:2A:60:9F:19:16:7E:96:60:6A:EB:71
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4a:7b:ee:41:a5:65:93:c5:22:c0:81:db:69:4e:61:3d:5e:
73:54:3f:b6:b8:01:0d:f6:a9:6a:0a:79:f7:fb:bf:02:f1:f5:
3d:cf:94:0e:e0:f7:ab:bd:b5:5a:92:6b:53:b3:69:a0:f0:87:
d2:b3:53:1a:16:d8:60:1e:3c:95:65:02:82:f6:fc:66:18:fa:
0a:f2:75:7c:77:e1:58:e7:cc:83:fd:70:bc:1f:a6:dc:97:6e:
37:ba:4b:c1:43:af:82:dd:44:53:41:22:e9:a7:0a:04:cf:5e:
be:80:aa:79:92:b8:c1:e5:31:6e:32:fb:71:7a:18:84:84:0b:
4b:be:36:df:a0:09:cc:2a:7b:cf:37:e8:d0:df:22:b2:77:4a:
3e:62:1e:f9:ca:f6:9e:37:bf:cc:6a:99:b6:b4:6d:a9:33:47:
51:b7:be:7e:a6:78:8a:76:e4:e6:aa:14:c5:2c:66:07:ae:4e:
a4:e5:98:62:dd:e9:97:26:2d:e4:48:e5:35:20:47:41:e4:1e:
4b:b9:f1:a3:84:d0:8b:77:36:56:d9:3f:ef:21:5b:92:f2:68:
d4:da:d9:27:c7:0f:ea:e8:91:1d:07:c0:48:14:e5:6c:f7:95:
c4:6d:1e:49:07:4b:cb:12:e6:3f:62:3c:eb:11:71:cd:ed:99:
cd:15:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:39 2025 by rpki-client