Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: hO3zIb68KWsnn1A2JrOrEqrAsul83nmLLcsiJzeF67Q=
Subject key identifier: 93:8C:C4:47:D8:A9:B8:4D:07:F6:FF:6E:FF:A6:9E:55:F1:D6:F8:EB
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01975459D5C74158E68303E5245C10E668E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1585
Signing time: Mon 09 Jun 2025 11:01:02 +0000
Manifest this update: Mon 09 Jun 2025 11:01:02 +0000
Manifest next update: Tue 10 Jun 2025 11:01:02 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: cKaDWuzibem1pN6a1lon89uHups13OdRysH0KT3pfkQ=)
5: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
6: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:d5:c7:41:58:e6:83:03:e5:24:5c:10:e6:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jun 9 11:01:02 2025 GMT
Not After : Jun 10 11:01:02 2025 GMT
Subject: CN=938cc447d8a9b84d07f6ff6effa69e55f1d6f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:3a:97:92:a8:85:db:d2:da:de:17:62:bb:
e6:9f:ac:07:e5:14:39:5f:50:f4:07:16:44:14:d8:
b8:e1:63:10:86:e2:ee:9d:cf:46:fd:47:74:47:3a:
37:de:49:84:48:a2:70:1b:77:1d:1e:45:76:2e:6f:
8e:03:74:b5:99:50:0f:d2:3c:4a:b5:0a:7c:18:be:
0c:41:0e:42:91:23:7a:b6:1d:f8:40:3f:49:0c:7b:
3e:5d:20:d0:50:a1:16:e7:5c:f1:04:71:f0:73:38:
6e:0a:d4:35:f7:98:43:87:90:f3:a9:0f:ac:47:18:
5f:7b:b7:52:09:e6:f4:c8:55:3f:ff:b5:72:91:f1:
f6:09:0c:8c:cf:8b:f1:e1:19:8e:7c:7c:16:34:72:
49:9f:a1:00:21:45:3d:84:57:90:b7:5b:0b:53:e8:
18:75:9f:d4:7d:66:8c:80:af:82:ef:7d:6c:6e:38:
88:17:86:d3:82:3b:c9:ae:48:95:bb:94:dd:4b:89:
63:60:5d:23:2f:7d:83:af:0a:0b:41:45:40:e3:f7:
78:3e:a9:ef:f8:8b:f9:c0:ea:e7:29:20:65:ef:7e:
be:8c:51:25:ad:30:03:58:5e:cb:a2:5e:81:08:de:
32:ab:50:3e:9e:00:2f:99:76:79:c6:75:9c:40:6b:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8C:C4:47:D8:A9:B8:4D:07:F6:FF:6E:FF:A6:9E:55:F1:D6:F8:EB
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:f4:82:c8:b0:82:c7:e5:93:fc:79:72:c5:cd:4f:b0:8c:
7e:07:9e:01:ad:6a:9f:c4:5c:d9:a2:1c:43:22:69:8e:82:91:
f7:ca:de:c4:90:91:db:8a:88:5a:2a:40:c3:6c:66:bb:12:44:
bf:b5:d6:7d:8d:00:e1:59:db:d2:2b:9b:56:8a:fe:e5:c8:37:
63:95:b4:d3:07:2c:4f:d8:c3:5a:db:b5:4a:75:88:04:8d:90:
b8:b0:23:2f:6e:64:70:43:fa:c7:88:6f:b5:65:be:14:3c:fe:
c1:9a:fd:d2:a4:af:b1:eb:69:9f:16:79:fb:7b:3f:fc:29:f3:
a8:49:ca:88:a3:85:cb:a9:d0:09:90:31:8d:8c:77:22:53:63:
47:ed:73:6f:d4:df:93:45:bc:d4:bc:f8:ef:aa:95:bd:ec:6b:
d9:15:5d:d8:8f:4f:3b:12:64:3d:18:f8:8e:d9:a0:5a:86:47:
0a:77:22:1f:b7:c4:70:fc:70:b2:5f:49:58:a2:75:5b:7e:ba:
bc:65:f4:29:3e:ed:75:41:48:77:f4:ae:32:49:55:03:a0:03:
f0:e4:c2:b8:99:4d:6d:98:69:49:b5:aa:06:d0:dc:27:a6:58:
42:96:42:ba:2b:a7:3b:ec:d6:25:dc:49:b9:ff:bc:0a:c2:52:
09:c9:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:17 2025 by rpki-client