Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: wsFQCLrgGhFilTMSmDLR01MqP36bMOVct9x5rSJ+K/Q=
Subject key identifier: C9:7C:8A:15:FC:56:A8:9F:B5:AE:41:BC:E0:8F:CE:37:01:70:48:D4
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0197481E8F76DDFA964C28809D552B375AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 0D2C
Signing time: Sat 07 Jun 2025 02:00:51 +0000
Manifest this update: Sat 07 Jun 2025 02:00:51 +0000
Manifest next update: Sun 08 Jun 2025 02:00:51 +0000
Files and hashes: 1: 3YiK7LZ7AMKa5EcFW6jtHBACtD8.roa (hash: JkF6y7HhM9pOrm+1lX0wSDkEqrCfWM0YVrPhtMo1N3g=)
2: IMuaaqkXSGjmCph5e3uk681ceAc.roa (hash: IjS3EjK/LCrXgvu7toh9AQWnzqQYr/P4/Fdrho/vCP8=)
3: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: Rg/PZy/eMWWOSztEZ4EFp8MiFpiSC8EAlTglNa39apk=)
4: o5Ci2OOaaozGkEZOG_f7fDu7-XY.roa (hash: 8C555rwsYeFI3kPoKdTROpSMNzbablYPsT0+Vk3NrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:8f:76:dd:fa:96:4c:28:80:9d:55:2b:37:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Jun 7 02:00:51 2025 GMT
Not After : Jun 8 02:00:51 2025 GMT
Subject: CN=c97c8a15fc56a89fb5ae41bce08fce37017048d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:2b:bb:2b:ff:ad:58:9f:5f:0b:da:4b:37:
6a:13:a3:d9:cf:24:ee:33:0a:85:17:5f:15:2a:d0:
7c:a5:eb:cd:f2:5a:d2:41:4c:df:c4:ea:3b:a2:bf:
e4:af:a4:51:f6:3e:89:f1:1b:d6:51:35:b5:d9:2d:
b1:b4:87:2c:5d:e0:ef:e4:5f:9d:1a:fc:c5:2f:5f:
0b:69:e2:fe:45:64:0c:1b:8e:62:25:2a:3c:38:fe:
d2:de:e1:43:ec:2d:36:bc:5a:83:0e:4b:c1:06:67:
63:95:ab:07:ff:81:dd:d5:a9:c4:99:c3:8b:b7:16:
6a:d5:ae:e1:f3:9a:94:88:5e:84:11:8a:4a:e6:07:
44:7a:fd:21:ea:c1:8a:6b:6a:19:8f:94:11:c7:3a:
72:ea:54:25:a8:3f:fd:07:79:d7:44:0e:e9:9e:e6:
39:56:25:40:76:17:12:13:92:49:8f:36:06:5d:c2:
ba:d5:81:86:22:fc:3e:7c:b6:f1:d1:37:ef:e0:f8:
5d:2f:26:dc:7e:ce:50:a0:ef:2f:f7:a9:b3:a3:ba:
cc:5d:07:d0:08:4a:67:7f:19:40:c8:73:46:65:65:
91:65:94:bc:09:2d:46:d8:1d:b7:a6:24:72:cb:7a:
b2:01:45:ad:a0:d7:47:6f:1e:23:49:d4:6d:7d:cb:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:8A:15:FC:56:A8:9F:B5:AE:41:BC:E0:8F:CE:37:01:70:48:D4
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:11:37:cf:37:61:3b:e4:23:cb:bb:6d:67:e5:2d:79:5c:ca:
6a:27:72:27:df:b1:1a:c9:8b:c9:52:28:a2:3e:f0:61:16:c5:
29:8d:86:66:fc:68:1b:d1:4b:fb:0b:9a:7c:82:7a:b9:63:97:
3a:ea:8e:57:82:93:ad:82:53:7c:4a:1c:b8:55:9f:ba:b8:c8:
1e:39:f5:1a:15:2a:93:b7:a9:64:82:29:25:5c:f3:f1:db:4f:
96:fc:92:cb:d3:da:ee:96:f8:f0:8a:1e:75:81:a5:0c:48:cc:
69:73:b9:79:6a:0e:55:20:09:fe:fe:4f:eb:1d:ae:e0:61:5f:
69:e6:c8:11:e4:b3:99:40:9d:f7:0a:fe:a6:2b:0f:df:6a:a3:
16:6e:49:cc:cc:ef:bf:fe:29:a5:4c:50:c0:0c:61:51:c2:37:
50:58:e9:46:bf:4c:c6:a4:f9:d4:96:5a:86:27:30:69:25:8b:
c5:bc:32:f0:c1:28:fc:1e:59:a2:48:6e:30:32:c3:c5:8c:35:
c6:ad:dd:b9:74:76:cd:9b:81:68:21:a7:b8:15:06:db:e1:28:
e2:c0:49:dd:39:de:f6:3e:17:9b:f3:7d:b4:fe:72:13:87:c1:
3e:88:2e:53:f7:eb:e1:bd:5b:84:f8:96:28:f6:f6:09:8f:94:
93:7c:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:35 2025 by rpki-client