Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: RqVz6lvnnwMvqldfv5NNdDe2rntBPqqnng3N5NI1UEY=
Subject key identifier: 84:E8:25:9E:20:A1:BC:66:95:3D:EE:F5:6B:E8:84:97:36:66:27:E0
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019765F1D1346038D017571904476B6E1524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 026B
Signing time: Thu 12 Jun 2025 21:00:35 +0000
Manifest this update: Thu 12 Jun 2025 21:00:35 +0000
Manifest next update: Fri 13 Jun 2025 21:00:35 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: WhyJE54hzURemnm3SQZ3HKG+qY7Z8xy43gwADHWsrlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:d1:34:60:38:d0:17:57:19:04:47:6b:6e:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Jun 12 21:00:35 2025 GMT
Not After : Jun 13 21:00:35 2025 GMT
Subject: CN=84e8259e20a1bc66953deef56be88497366627e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:0a:d1:4f:74:0b:16:54:7e:49:14:c7:cf:
dd:0e:13:a1:0c:49:8a:92:18:ec:8f:a1:09:ab:54:
f4:2f:c2:c2:59:5c:13:b4:85:4d:b7:65:38:8d:3d:
bf:ce:fe:07:25:23:3f:c1:0d:03:8a:4b:36:d4:8e:
76:97:fb:c3:ac:fb:fe:93:48:eb:ba:f9:83:24:57:
83:8c:30:fa:b3:cd:f7:9c:0d:2c:5a:58:05:3f:9d:
f6:98:d8:d6:25:0d:17:d9:5b:cc:5c:8c:01:35:09:
d1:3e:9a:c5:d2:f5:4c:b8:37:09:92:33:9d:d6:8f:
2b:a8:97:49:a9:32:34:6a:43:42:a2:d0:95:b0:1c:
7f:d3:31:b2:43:96:06:6d:f5:22:d1:d8:1d:16:db:
d5:5c:8d:22:a6:9f:87:c0:8a:60:68:5a:f8:3c:60:
5d:32:25:5c:7c:82:de:78:75:86:62:93:82:c7:06:
ef:3f:24:2a:d9:c0:1d:10:a3:ed:33:8e:d9:a5:12:
c4:c7:df:be:33:0e:4f:bd:fc:91:99:6e:7f:bc:e4:
fe:00:85:7b:07:22:52:ba:78:bb:6c:bf:fe:29:5a:
07:96:d9:72:3c:4f:d5:1b:fc:0f:c3:84:48:3e:d0:
57:f6:de:07:49:6d:6d:34:bb:6c:27:c0:48:a2:47:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:25:9E:20:A1:BC:66:95:3D:EE:F5:6B:E8:84:97:36:66:27:E0
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:dd:41:26:01:1f:64:82:90:19:4a:0a:ce:d8:fa:49:06:
cf:f9:51:02:41:d7:dd:df:a5:dd:88:77:47:21:2a:64:7c:9d:
39:f7:45:2e:f5:25:41:82:4b:2c:3a:b9:6c:39:47:02:a4:f1:
7b:ec:f8:ca:bc:5b:ae:0c:7c:cd:48:3a:a0:d1:87:5d:a3:9e:
b1:bf:e4:4e:1c:6d:e7:03:61:81:ca:3b:b0:69:05:17:6d:42:
9e:01:32:47:4c:14:3b:8a:8f:27:a8:2e:f1:57:3b:40:04:0a:
e6:1f:cd:07:f4:0c:c0:dc:c5:a3:6c:2c:01:82:49:db:39:3a:
81:1f:77:2d:ef:8a:04:69:44:76:07:d9:5a:3e:30:8c:ef:5c:
99:a2:6c:a8:33:b0:07:7b:a4:75:7b:d1:eb:8c:43:1c:a9:56:
e4:30:04:a9:8e:54:32:62:e1:be:ce:c2:db:94:ea:0d:ed:a4:
64:4d:2e:c1:7b:fe:a7:4e:42:f6:bd:ad:85:65:59:2b:c0:0d:
d2:84:6f:6f:cc:5d:da:28:e8:21:b7:05:a2:c8:52:29:25:d7:
63:a0:a5:8f:73:14:85:1a:64:c2:e6:36:83:6b:b0:32:13:e2:
8b:d7:ff:04:aa:1f:a9:32:70:92:d6:a9:3a:78:4f:72:35:4a:
85:cd:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:19:35 2025 by rpki-client