Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: 2lnhCZx1ii7WE8e4hebulfLbdDiJkOpf2zB4Cdm2ZFU=
Subject key identifier: 26:65:95:40:D0:1B:21:47:EC:D0:EB:0F:D8:14:A7:69:A1:4A:2D:AB
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 01974CD737CC9E8442D25B652F52E2BD0B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 00:01:02 +0000
Manifest this update: Sun 08 Jun 2025 00:01:02 +0000
Manifest next update: Mon 09 Jun 2025 00:01:02 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: RmGphnsJ6BYmRMLBTGOMYu3l/rzeKWbePrM5buWBSow=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:37:cc:9e:84:42:d2:5b:65:2f:52:e2:bd:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jun 8 00:01:02 2025 GMT
Not After : Jun 9 00:01:02 2025 GMT
Subject: CN=26659540d01b2147ecd0eb0fd814a769a14a2dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:d6:af:0a:88:c8:1f:c2:c8:3c:d9:35:9f:
0f:bb:a3:25:0f:d4:af:71:3c:08:03:dc:10:c2:0e:
47:55:31:8a:89:35:a9:0c:e4:10:cc:f8:a4:11:b2:
ca:0c:67:90:b4:f8:5c:c9:16:00:b9:5a:82:fb:80:
49:e7:cf:e3:98:b8:42:52:64:28:a0:32:f6:d5:77:
40:3e:63:e0:07:aa:92:9c:7f:4d:98:9b:eb:f8:13:
4f:37:8e:ab:d6:5f:e9:91:4f:d2:b8:96:37:68:f4:
ae:ce:14:85:cc:90:8c:09:05:45:fb:87:58:de:d8:
b3:8f:0e:b9:b9:cb:50:da:88:5e:f6:cd:bf:72:f9:
58:4a:9d:bd:24:27:a1:8d:02:5c:af:dc:9a:ef:32:
d1:99:c4:85:6f:ae:aa:af:7b:5a:1c:64:a6:2a:28:
23:4f:4a:d1:e7:1e:29:07:18:d3:a4:c8:3b:6c:54:
dd:73:d1:8b:32:bc:43:93:6a:11:2f:e1:8e:eb:72:
c5:2c:09:fa:83:30:f1:e6:9a:38:64:9a:42:2a:fc:
6d:a1:49:40:77:12:f4:e8:5d:9a:d9:d5:7e:2f:7f:
86:2a:47:91:99:98:96:ee:85:8a:51:0f:96:5d:ff:
8c:e6:6c:01:f8:c8:ed:d9:ae:6f:c8:9a:e2:bf:a7:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:95:40:D0:1B:21:47:EC:D0:EB:0F:D8:14:A7:69:A1:4A:2D:AB
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:63:7a:7e:8d:47:f8:52:f6:94:24:cb:3d:54:4c:52:f7:e6:
f3:02:66:23:ef:7e:b4:ad:2f:a5:aa:a3:77:72:29:34:93:3e:
df:30:b3:87:79:6e:02:e9:9d:3b:a1:69:67:b9:3f:7b:15:d3:
6c:9d:fa:49:6f:e7:88:05:79:dd:85:b9:34:90:c4:8a:93:f8:
ac:a0:bc:cf:20:7b:59:1b:50:b1:37:04:b0:50:7c:16:e4:20:
e6:4d:9c:a4:23:15:d0:2d:f5:f9:66:b7:2a:99:25:d8:52:f0:
4a:d8:1c:e1:e2:8a:45:40:04:f2:ea:07:21:37:07:0d:ed:00:
ec:2d:a7:39:f3:5a:c2:7b:f4:5c:b6:ad:5c:97:e4:ce:e2:95:
c8:fc:86:36:f9:00:2f:c2:58:16:ca:3a:f7:f9:00:dc:aa:bf:
b0:48:cf:38:2c:89:2f:e4:e2:d0:13:22:99:1d:88:02:08:4f:
73:a6:7f:c3:24:cc:e0:ee:44:1f:c9:a5:de:d4:c7:e6:03:d7:
c8:33:e7:cc:ca:33:fe:ab:e3:4f:22:74:e9:0a:95:22:5c:ad:
7d:4d:53:11:ed:f9:cc:8a:02:32:a2:2c:e7:7a:e8:d8:dd:0b:
c6:5d:73:6d:d0:d4:e0:79:af:0b:80:46:a4:9c:68:86:a3:a6:
a2:93:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:52:27 2025 by rpki-client