Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: PMO+jrlXwBBYFLpwMWtZGpfRwUsk8mbjYnfLH3VqRFU=
Subject key identifier: 25:56:98:6D:24:AB:39:7E:E3:18:72:5F:60:ED:D1:F6:A0:1D:50:BD
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 01974AE8F5ECFAC73D1FA76EEEF4602CCF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 09AB
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: J08gmHGCtvxRkoaeIfCO7r645ZxrZR//2tOztMnYAHQ=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f5:ec:fa:c7:3d:1f:a7:6e:ee:f4:60:2c:cf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=2556986d24ab397ee318725f60edd1f6a01d50bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:33:b6:16:be:cb:26:b0:88:83:94:16:e4:
37:d5:2b:b7:bd:d9:d3:60:93:81:8d:6d:87:b1:dc:
c1:1c:61:40:3d:5d:96:bb:93:47:e1:24:58:7d:54:
53:88:57:f0:a2:16:48:e1:99:e8:ce:4d:db:3a:49:
28:68:02:02:95:02:e6:1b:38:71:0f:ad:9e:6f:6c:
b2:08:f7:1b:0b:05:26:64:42:3a:dc:6f:5a:d5:3a:
29:11:e6:f1:c6:69:94:aa:26:9c:bf:dc:62:59:9c:
9f:0c:5e:55:5f:e3:1e:77:7c:b1:28:cd:8a:62:e5:
1f:93:2b:a5:27:7e:b6:f6:ba:9a:93:e1:69:64:ee:
42:21:17:c0:7e:e6:92:3b:04:d1:e1:da:f1:f5:1e:
43:81:7c:69:8e:f7:d6:50:07:26:3a:19:f7:77:07:
29:d0:f3:ca:eb:cb:98:7c:ed:48:8e:0a:b9:0e:b1:
86:ea:ca:0d:ce:d2:eb:dd:e9:ef:d9:2d:b5:74:5d:
f4:f7:11:57:d5:33:38:49:1e:a8:26:46:58:ee:3e:
f0:92:de:8e:64:c9:f2:6e:24:e9:19:79:22:8a:b9:
22:86:38:8e:03:05:63:0a:6c:6e:ce:94:7d:9d:36:
a6:8d:f2:b5:f7:46:be:7c:e7:8a:15:30:13:21:93:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:98:6D:24:AB:39:7E:E3:18:72:5F:60:ED:D1:F6:A0:1D:50:BD
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d7:df:52:99:1e:8c:23:18:a0:af:fd:40:61:01:6f:f8:a0:
a9:87:b2:f9:01:bb:1b:7c:c9:8b:12:52:b7:9d:02:15:21:4a:
43:40:1f:42:34:8a:20:67:ca:e9:de:6b:a1:9b:94:4f:ca:78:
8b:b1:75:fc:2e:47:71:88:72:79:cf:8c:3e:ba:66:fb:11:39:
d0:77:c8:0e:3f:c4:68:4e:67:ae:69:5c:3d:70:86:9a:68:60:
96:ee:31:20:ac:b9:4c:a5:0b:ea:78:64:2e:e2:15:cc:79:01:
ab:37:a9:4f:9b:41:df:0b:e9:f5:fd:d2:36:7d:c8:aa:12:ae:
a2:ff:43:66:60:e1:df:97:32:f0:5e:f5:54:0d:4c:5d:a4:ee:
34:c3:1c:1a:21:8f:ae:10:3b:8d:01:52:2a:5f:d5:16:4d:39:
e7:81:dd:5e:d6:8a:a4:9c:a9:47:7c:33:42:a0:cb:a5:67:62:
02:a4:e5:fb:1d:c6:18:20:28:d9:84:57:21:b1:97:f1:23:77:
55:9c:2c:20:29:62:6c:81:ad:3a:b1:77:8a:9f:7a:b5:47:b8:
69:b9:bd:9e:fc:a8:77:6a:0d:10:17:03:02:df:3c:c6:29:42:
5c:93:db:9e:a5:54:de:01:fb:12:ef:8c:ae:3b:b9:13:5e:b2:
2a:07:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:05 2025 by rpki-client