Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: fqGGeJJsP1duWKSL46Xx21IgeT9x3cvagUklfvwsHv8=
Subject key identifier: D4:08:FA:B5:73:22:40:6F:2D:9E:C2:E2:54:AA:84:BA:86:ED:7C:71
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019747E799B0588E0C44D7E2CA3DB4EA5D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0951
Signing time: Sat 07 Jun 2025 01:00:49 +0000
Manifest this update: Sat 07 Jun 2025 01:00:49 +0000
Manifest next update: Sun 08 Jun 2025 01:00:49 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: cA57wXooa08Hf5VhW2Zt5g0kV/pqgT+0VX8OGNXX9l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:99:b0:58:8e:0c:44:d7:e2:ca:3d:b4:ea:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jun 7 01:00:49 2025 GMT
Not After : Jun 8 01:00:49 2025 GMT
Subject: CN=d408fab57322406f2d9ec2e254aa84ba86ed7c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:68:2a:a3:2a:88:60:fc:f8:0f:d2:bd:07:
65:88:bc:27:48:61:d5:ba:8a:b1:ea:00:01:8a:8e:
b7:0b:c4:1b:2d:86:23:c6:f8:65:df:53:d0:93:65:
fe:a4:07:4e:42:01:4a:c7:30:9f:bd:3e:0b:0d:69:
87:b0:d6:60:e2:34:12:88:83:68:28:25:1d:a0:ac:
80:07:31:12:1b:a6:c1:11:07:57:f3:1d:c7:9b:24:
e0:f7:6a:46:be:46:e4:79:fd:bf:6b:06:9f:7e:59:
2e:6e:9b:14:26:9e:cf:00:75:97:5a:cd:84:e7:d7:
b3:a1:62:a7:86:7e:d5:37:fb:32:6d:c7:e1:df:08:
4f:78:71:3a:c8:a0:79:0b:e4:25:48:c0:bd:c3:93:
69:fd:a6:e5:00:98:d8:b0:84:3b:d5:1d:86:9b:76:
35:15:65:25:cf:f9:25:2e:cd:c0:0b:d3:58:db:ef:
70:f6:87:5b:ab:6e:08:91:0d:32:ce:bd:aa:f7:47:
ed:e2:6e:55:62:4e:40:d2:ef:2b:70:29:81:36:31:
65:03:b7:cf:67:a4:70:dd:4a:1b:82:57:66:36:cb:
7e:50:90:86:04:78:7c:36:0b:af:0d:a7:cf:b2:7b:
11:93:de:ce:71:2d:e2:1c:cb:29:50:9d:44:df:d5:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:FA:B5:73:22:40:6F:2D:9E:C2:E2:54:AA:84:BA:86:ED:7C:71
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:27:2f:a5:2c:95:7b:48:44:fe:d8:5a:66:74:7a:72:d1:
e5:f1:f6:b7:ef:0d:81:65:0e:f8:65:b9:a9:a3:c6:c3:10:27:
b7:b4:18:09:83:db:3d:85:78:1f:52:8e:d5:98:58:1d:9c:97:
6c:f3:2f:6c:39:a6:75:92:71:6a:53:b6:74:67:b4:1f:d6:e3:
9e:86:1e:01:db:86:30:81:59:39:97:9b:10:46:d8:84:c5:fd:
53:f4:eb:ba:5d:08:7d:20:f3:c0:da:59:02:27:d1:a4:ec:95:
c9:83:b5:d1:6c:ab:15:ac:21:50:9b:8b:38:8f:86:ae:88:43:
0f:76:de:b1:e6:c0:f4:a1:bc:56:92:a8:c7:cc:8d:aa:6b:fd:
e1:59:61:4c:22:ed:20:71:22:ae:e0:40:ba:41:28:82:2d:b7:
91:ea:d5:c2:ae:5c:a3:e0:61:12:97:f4:72:46:1a:6a:d7:23:
15:83:14:fd:da:44:f9:41:fc:db:ed:ac:ce:3a:2a:eb:8d:8e:
41:b2:be:f1:36:c1:85:e1:62:f9:5e:53:ad:d4:0e:f2:18:1a:
53:b2:7e:b5:b5:51:85:fe:a7:7d:f1:b8:9d:5d:50:54:63:1c:
50:17:20:a7:56:ac:e3:fd:43:de:d0:37:e0:e5:a6:53:3e:1c:
14:c1:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:13 2025 by rpki-client