Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: vm6k08ZtXJ5kzC2l3doFExWrDXJ28lKt7tv0rDe0IVI=
Subject key identifier: 16:FD:D1:A1:C5:D5:84:CC:E0:6C:6E:98:6D:FB:5A:BF:B9:B8:5B:A8
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 01974742BC134C11EF75A9FE4B6CD8758211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 1550
Signing time: Fri 06 Jun 2025 22:00:45 +0000
Manifest this update: Fri 06 Jun 2025 22:00:45 +0000
Manifest next update: Sat 07 Jun 2025 22:00:45 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: wz6vSHnwnCzX9yWCzVnEXmQrEr8Zz2sexnYtvnVaUgI=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:bc:13:4c:11:ef:75:a9:fe:4b:6c:d8:75:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Jun 6 22:00:45 2025 GMT
Not After : Jun 7 22:00:45 2025 GMT
Subject: CN=16fdd1a1c5d584cce06c6e986dfb5abfb9b85ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:e7:74:3c:25:50:f8:af:f6:b9:14:d9:fa:
b6:bf:17:bf:18:aa:5e:1b:a3:17:49:d2:7c:c1:bd:
d4:15:b2:34:52:f0:30:db:14:89:18:a3:ff:8c:93:
b3:90:91:80:49:26:26:67:e9:28:42:25:6f:01:ca:
07:5b:87:96:bf:67:6d:82:cb:74:af:9b:28:79:d5:
67:f7:f4:49:20:d6:df:9d:3c:00:1f:84:a0:f3:4e:
2a:78:47:18:fc:08:0b:85:de:a6:52:7e:92:3d:78:
49:82:93:51:e6:53:3a:c5:d4:9e:75:16:3f:2d:7d:
99:61:28:c8:95:79:b5:47:08:6d:14:e0:ea:0e:a3:
49:1b:89:f9:73:12:6e:7c:39:52:23:57:7d:98:c8:
ac:3e:45:45:e4:e3:9e:ff:e1:38:07:16:e7:eb:6c:
06:b5:65:5c:3e:6b:d8:e8:cd:f4:7c:0d:f3:0f:d6:
55:d9:c4:e2:e4:02:e6:cd:bc:05:da:51:48:71:b9:
73:b3:78:4a:ab:36:dc:e7:48:30:f2:71:9c:34:e8:
26:6a:cc:c7:4b:3e:41:75:24:24:ad:74:c6:cd:d5:
80:a9:0e:ea:d0:ed:1d:00:43:9d:5e:c8:8d:70:5e:
56:82:8f:d5:a1:0e:23:a3:29:06:24:9c:0b:c6:06:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:D1:A1:C5:D5:84:CC:E0:6C:6E:98:6D:FB:5A:BF:B9:B8:5B:A8
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:38:71:60:84:77:51:23:a6:3d:e3:d0:a2:5b:4f:49:95:
ff:1a:e9:10:ad:09:1e:a0:12:e1:b4:df:2f:48:b7:32:5f:ef:
a1:e3:34:47:20:e8:a1:43:10:0d:fd:28:c1:9d:6d:89:56:19:
8a:c1:3b:b6:a0:63:4e:42:0f:39:22:8e:3d:f2:15:91:57:d4:
37:b0:fe:3b:4b:61:55:74:67:c4:3a:70:4c:ce:8e:16:02:cf:
42:be:2c:08:a3:7f:d4:1a:2c:35:3b:a0:3e:82:5e:f9:d2:4c:
6e:1f:6b:54:9a:49:fb:dd:8d:51:10:6c:13:db:6d:c8:21:f7:
c7:63:46:71:07:94:ed:5e:84:db:70:96:ba:ce:dd:5a:58:4b:
60:be:22:3c:b7:a0:18:7e:85:3c:99:34:fe:ce:02:41:91:60:
9a:e0:e2:85:87:89:ca:7c:93:c1:46:8f:c2:35:c9:64:da:4d:
3e:fe:25:00:c0:dc:f0:28:b0:ff:6c:5a:53:63:59:1a:4b:bb:
41:5f:b0:aa:03:a0:51:b5:bf:b8:15:ff:52:ff:d9:f5:74:4f:
5e:f8:49:bf:f2:08:27:86:9a:d6:ae:13:25:f8:8f:e4:fb:d9:
86:a5:3e:84:95:44:83:fd:48:47:ad:44:f6:a0:dd:b8:20:07:
26:45:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:40:38 2025 by rpki-client