Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: 2oNfmbmtyaFN73Z8et4FU1gZbwgv2rRRAB6qUzKicwo=
Subject key identifier: 80:3F:37:3F:EC:E3:C3:4C:94:F3:29:65:C9:38:8C:CC:35:24:8B:9C
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0197549075894736EC70840AD164EA929A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 0262
Signing time: Mon 09 Jun 2025 12:00:42 +0000
Manifest this update: Mon 09 Jun 2025 12:00:42 +0000
Manifest next update: Tue 10 Jun 2025 12:00:42 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: rM7xKLGYWxxwLgaN6ObFauGxOvnw5ka0C9Dfls2AHvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:75:89:47:36:ec:70:84:0a:d1:64:ea:92:9a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Jun 9 12:00:42 2025 GMT
Not After : Jun 10 12:00:42 2025 GMT
Subject: CN=803f373fece3c34c94f32965c9388ccc35248b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:e5:ad:ac:de:ba:bf:77:3c:73:04:0b:0c:
7e:c3:8f:04:16:fc:13:df:cd:b3:de:be:5b:3e:67:
9e:b3:9e:91:5d:8e:62:04:fb:00:1d:50:91:01:82:
20:1a:46:ca:35:19:dc:60:bf:8c:37:24:61:87:1f:
c5:10:d2:8a:76:e8:59:9b:c1:b1:f0:c7:cd:4f:56:
0e:71:20:2c:1c:eb:a1:65:08:d4:36:26:57:9c:0b:
bd:19:f7:cb:87:82:f6:cc:2e:47:67:9f:d0:9b:71:
d5:bc:ff:e3:63:fe:5e:40:1d:60:c0:1c:dc:38:28:
2f:f1:95:d5:c9:00:0c:c3:eb:a0:f9:55:d2:a4:83:
f2:cf:80:3a:1b:12:fd:43:fd:1b:e3:dd:1e:54:98:
57:c4:44:c3:11:fa:ec:cf:55:38:fb:19:50:a6:b0:
af:d6:55:a8:eb:75:d4:30:a1:50:ce:70:83:78:25:
16:07:e1:b2:95:21:4a:b3:12:f6:de:76:3a:8b:1e:
ec:e4:59:68:e9:71:64:a8:24:18:30:2b:4c:5e:69:
ad:5c:ac:e2:d1:25:d6:ca:c3:f6:a8:5e:fb:06:b6:
23:83:4f:ea:48:87:38:c6:be:d0:df:05:13:10:2a:
ba:ef:11:ae:f2:73:3c:12:ff:22:7f:0b:16:d7:8b:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:37:3F:EC:E3:C3:4C:94:F3:29:65:C9:38:8C:CC:35:24:8B:9C
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:d2:a6:e9:5c:3f:3e:02:2d:0c:ba:dd:42:57:44:8b:f2:
59:09:4e:48:d2:eb:67:42:8c:b6:c0:71:24:61:18:dd:89:5f:
d5:d2:30:dd:ee:a9:8b:37:f2:1e:7c:3f:b5:85:5f:d8:6f:78:
83:49:7f:48:91:74:7b:30:f4:16:25:36:46:99:cf:b8:de:59:
04:e0:00:e7:36:34:47:5e:4b:ba:ad:e7:f8:51:08:c4:ae:f4:
c5:a0:2b:e7:e6:41:59:75:20:55:56:0c:c4:3f:b0:31:a5:5a:
91:16:b6:c8:d4:01:75:24:b3:dc:a0:22:0f:34:f5:f3:65:8f:
2e:33:84:97:f2:9c:77:f0:02:57:f4:64:6b:18:ed:ee:8f:47:
09:c6:34:c1:94:ac:24:52:a1:79:f1:44:00:ee:bf:17:dc:d4:
67:ab:64:af:db:0a:c0:ad:e8:65:da:0f:b0:79:03:84:c8:73:
13:78:90:5e:aa:9c:fd:c6:6e:7c:72:78:29:d4:2d:ec:c6:18:
3d:ca:37:0e:c1:55:f5:a0:c1:6a:1f:3b:3d:08:d2:74:fa:32:
4f:ba:81:bf:77:92:ee:91:02:b4:25:77:01:db:58:95:7c:2d:
21:00:e5:23:6e:17:59:0a:7c:d3:17:3a:10:ca:2e:d5:55:24:
62:b7:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:54:32 2025 by rpki-client