Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: 299jNf/zsl/R4yDMab4z+pqceUpitRvdYK1Ej0u4Q4c=
Subject key identifier: 21:4E:C2:33:81:86:BB:06:85:7B:4E:8A:A8:2D:D3:80:1A:95:C6:33
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019753B4D69462D041F16D8CDCD7DA514A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 08:00:49 +0000
Manifest this update: Mon 09 Jun 2025 08:00:49 +0000
Manifest next update: Tue 10 Jun 2025 08:00:49 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: F7GCcqgcCr4cspscJ/jCG2fUjn5l5kcIAIqbkuEGZrc=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:d6:94:62:d0:41:f1:6d:8c:dc:d7:da:51:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 9 08:00:49 2025 GMT
Not After : Jun 10 08:00:49 2025 GMT
Subject: CN=214ec2338186bb06857b4e8aa82dd3801a95c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:c5:a5:3a:2d:74:f6:14:26:32:89:ce:d8:
8a:11:b9:2e:bb:b8:cd:4f:d9:9f:6c:82:82:65:80:
3d:32:12:47:ec:34:47:42:e2:61:ee:ef:50:68:1e:
89:1b:3e:8b:6c:a2:73:dc:57:2c:45:d3:a9:03:07:
ac:05:d8:9e:9d:eb:a8:87:b8:66:03:97:ff:00:ff:
ad:59:14:19:f3:35:93:c7:4b:90:07:1a:4f:56:b7:
f3:7c:6b:d8:37:df:bc:6d:e4:b5:47:ea:dc:82:14:
99:15:de:ba:d0:16:10:7c:64:4d:8f:01:37:4e:ea:
00:5d:8a:70:29:16:e0:a4:d1:c6:6f:20:07:eb:bb:
63:d2:9a:a9:bb:4c:ac:59:a3:dd:39:a9:ac:c5:d1:
43:a7:aa:51:bd:25:4c:4b:56:f4:fc:95:75:fc:3b:
1d:e0:ad:df:0a:40:fd:bd:30:8b:69:7d:9a:2d:54:
f7:0d:cd:c8:03:15:cb:6b:af:5a:06:ff:46:cb:34:
41:6d:2d:98:4b:92:6f:6e:dc:c8:0c:37:b3:b4:b9:
d7:56:c0:55:eb:26:29:a6:46:d7:d9:63:2d:b8:8e:
fd:82:3f:50:74:96:35:c2:d3:16:4f:20:29:55:8b:
8a:a6:81:04:c2:bc:01:d2:52:66:21:f8:5b:b3:27:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:C2:33:81:86:BB:06:85:7B:4E:8A:A8:2D:D3:80:1A:95:C6:33
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c1:9f:c7:72:f3:cc:76:8b:37:17:0e:bc:c7:f9:6f:11:37:
01:35:4b:56:84:46:39:2d:b6:0e:96:82:7c:9c:2f:fb:68:e5:
b2:f6:6c:fb:7b:ad:e9:4e:a7:4f:3d:86:db:d5:5b:44:c1:8b:
99:5d:f0:6f:ef:d2:e5:40:ce:91:ef:2a:de:03:6e:7f:0f:3c:
a4:1c:55:f0:7e:65:97:d5:7f:c1:2c:ce:cc:1c:d1:54:f6:55:
6e:ca:af:7f:68:a2:55:86:e6:0f:2f:fb:fb:b4:11:89:d6:8b:
ff:9a:b4:5f:7b:23:3d:c0:0e:5b:22:45:4a:7b:0a:ab:8a:25:
a8:7b:96:11:89:9d:14:c5:87:1d:ee:1b:58:b6:39:02:f4:9d:
82:04:16:8d:26:b1:37:6e:cf:0a:23:14:3a:f7:40:b8:1d:35:
38:cd:59:28:0f:bd:79:5c:cb:08:bb:3e:45:56:64:39:d8:25:
91:85:c0:d4:2d:25:1c:76:40:c9:a9:1f:df:a3:4d:7e:23:47:
45:84:64:b3:ed:3d:e3:9b:ad:a4:79:ba:89:d7:3b:f7:71:d8:
57:a5:17:09:de:27:c7:0a:75:1f:b9:7c:52:76:15:c9:68:29:
1e:74:16:e8:30:5d:2a:18:8e:76:a9:6c:bd:a2:37:7d:46:31:
82:98:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:48:31 2025 by rpki-client