Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: q6rhTyN+9fg24hiRgZeVxa4B2q2f6d3+oW17n7kL0t4=
Subject key identifier: FE:BB:C4:CB:FE:B5:EA:F9:4E:69:D7:FB:BB:DA:C5:03:51:AA:83:DE
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 01974A0C8846CFFA43D3BEF6B43BBC1DE522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:24 +0000
Manifest this update: Sat 07 Jun 2025 11:00:24 +0000
Manifest next update: Sun 08 Jun 2025 11:00:24 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: uG2JMcVe/oF5hXe2oD7kMj/pr62ERccgtsSJq+cSUeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:88:46:cf:fa:43:d3:be:f6:b4:3b:bc:1d:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Jun 7 11:00:24 2025 GMT
Not After : Jun 8 11:00:24 2025 GMT
Subject: CN=febbc4cbfeb5eaf94e69d7fbbbdac50351aa83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:ae:cd:16:10:40:82:cf:f4:f6:10:1b:51:
08:76:39:de:67:11:71:7f:c1:0b:c2:32:53:5c:25:
ce:ce:a5:13:48:80:b3:be:6b:01:bf:40:bd:1f:81:
e2:cb:c7:b2:a0:b1:e1:8d:4d:e9:4e:56:dc:f9:a1:
3a:3e:c3:18:71:a0:98:fc:87:58:59:b3:16:d4:e5:
b1:73:d3:e1:0f:38:b5:5e:fa:63:c5:d1:41:a9:ee:
31:72:75:e5:9e:2d:ca:1b:59:c1:ca:7c:37:e5:a6:
81:7c:fb:76:0f:15:c9:88:45:b0:d2:8d:97:cc:80:
dc:61:37:7a:c5:8d:6f:23:4c:96:8e:d4:43:e5:71:
f5:12:ec:85:7d:18:a9:85:6c:5e:27:98:e2:6e:55:
10:c1:4d:6d:13:47:f9:84:73:0d:8e:7f:52:78:f4:
dd:17:ad:aa:fb:fc:a8:a8:09:8e:ea:03:26:51:a8:
13:2e:6d:d8:ad:3d:da:5f:f8:35:57:30:8e:ff:6d:
a3:6e:b6:43:b3:0e:c7:a0:43:3b:cc:60:ff:d3:ab:
3e:7c:5c:c4:e1:5d:4c:9e:3e:16:55:b8:ae:ec:25:
58:5e:4e:70:6f:ef:2c:ce:29:12:8c:bc:60:18:42:
30:38:6c:43:97:00:a7:cf:3c:bd:7e:f0:14:39:2a:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:C4:CB:FE:B5:EA:F9:4E:69:D7:FB:BB:DA:C5:03:51:AA:83:DE
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:03:08:9c:49:75:83:8d:56:93:18:c3:76:35:81:81:d4:66:
c5:0f:3b:c2:ba:e7:37:bf:a0:94:13:c1:b7:29:58:5f:a2:10:
5d:98:59:61:06:ff:58:f4:6b:42:4b:1b:a7:9d:e0:dd:1e:3c:
94:9f:0b:61:c9:8f:33:23:ce:28:b4:32:e2:a2:82:95:cb:ba:
ea:d0:67:cf:45:d0:d4:cf:6c:1d:fd:57:0f:53:0d:09:35:2b:
bd:f0:16:ed:5f:fb:e7:eb:fb:8b:17:14:b5:6c:3d:49:33:a4:
55:f1:b1:26:41:52:8f:01:a7:44:04:0e:d6:92:8f:ad:7e:5f:
7a:88:9b:d4:2a:df:1e:1f:4e:b1:5e:f9:c5:53:ae:d3:fb:e9:
d3:3a:62:5a:e3:d4:08:4b:c1:d3:33:7f:ca:5a:fd:79:48:78:
b7:e9:e5:d7:7f:c2:62:3b:f2:71:49:0c:38:d5:e0:7f:82:4f:
7c:5a:81:00:85:c0:d0:83:46:53:e3:b4:e9:59:31:0a:af:3b:
f1:38:72:f2:3f:37:f2:4c:98:c3:ef:15:ea:17:38:12:85:49:
26:11:2e:01:92:e6:e8:a0:11:c6:94:21:c3:98:b1:54:77:6f:
2e:5e:f2:d4:2d:fd:1a:bd:40:fa:a6:10:20:a1:57:15:c5:bb:
89:61:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:46 2025 by rpki-client