Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: AP2GgDt4JRIwkntlWz9FC8o3r4RmXBbebpnjX2UJhNA=
Subject key identifier: 96:8A:6A:6A:D3:A2:72:43:F4:E8:36:8A:9F:4B:1E:8E:E0:60:28:C7
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019763276EC84608FB17B141BDD642F3B7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 08:00:17 +0000
Manifest this update: Thu 12 Jun 2025 08:00:17 +0000
Manifest next update: Fri 13 Jun 2025 08:00:17 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: MyzybOxkwv02FHb3BlWhGP/3J5S2eirgroV/lyjauZg=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:6e:c8:46:08:fb:17:b1:41:bd:d6:42:f3:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 12 08:00:17 2025 GMT
Not After : Jun 13 08:00:17 2025 GMT
Subject: CN=968a6a6ad3a27243f4e8368a9f4b1e8ee06028c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:38:36:a0:00:21:0c:52:fd:b2:8f:f3:08:
8a:2e:59:93:90:a0:e1:6d:b0:9b:a1:7b:30:fb:6c:
16:86:e0:04:cf:c3:6d:a6:14:f7:2c:0d:23:16:38:
c6:cd:d1:9a:9f:0e:b9:87:12:8e:64:26:d0:31:00:
40:7d:b9:bc:45:b7:7f:f9:25:dc:1b:5f:42:12:d1:
39:7e:c1:cf:e3:67:7e:2c:64:f0:75:f3:8b:c4:64:
22:38:58:58:07:e0:df:db:76:f2:b1:92:d0:8d:df:
80:2f:50:9d:a8:b3:22:e6:e3:bc:7c:b0:c5:51:68:
f4:39:bc:7b:70:f4:c8:37:b4:66:d5:6b:c1:c1:d7:
11:79:7c:dc:e1:2a:ee:38:83:d6:26:bf:97:12:ae:
e9:11:c7:0d:aa:9e:05:fe:e1:bc:f7:a9:df:41:31:
20:f3:75:e9:b2:f9:ac:bc:38:8d:b7:5b:9d:33:3e:
7f:91:64:3a:e9:48:45:7e:2a:c8:ed:eb:a9:dc:fc:
8e:20:69:db:85:ad:d1:92:eb:db:5f:30:ad:d2:95:
85:d3:b3:e4:38:8b:d7:fb:a3:b9:14:b9:9d:71:d5:
b9:40:12:97:b8:85:11:07:34:d2:f1:c4:7e:4f:e6:
bd:86:39:ef:1f:f1:5d:01:7b:5a:af:df:b7:f3:e3:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:6A:6A:D3:A2:72:43:F4:E8:36:8A:9F:4B:1E:8E:E0:60:28:C7
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e0:af:e5:11:1c:90:cf:1a:e9:5c:c4:c6:42:d3:81:49:fe:
42:be:b9:7e:54:71:6d:a4:9f:1f:51:73:08:a3:47:49:a9:cf:
38:e8:3a:b2:0e:05:ac:21:be:4c:12:c1:32:63:e0:9a:d3:75:
e6:8c:3c:72:46:c2:73:17:e8:7a:05:4a:52:6c:3e:5d:6b:36:
7b:0b:69:e9:8a:46:9a:16:de:6e:c0:8b:e3:ee:72:e8:80:a8:
03:d7:74:dd:d4:f8:b6:f1:b0:d1:fc:24:ec:f3:28:4b:ef:89:
11:19:ab:e6:21:7b:cc:8b:0f:ac:6e:bf:4a:25:52:28:93:a2:
31:aa:cf:6c:9d:d4:89:48:b8:9f:f1:58:c4:f0:79:19:8d:a9:
50:b2:f1:e7:35:52:fb:36:3a:6b:b4:fe:99:6a:ef:4b:20:57:
10:0b:d3:38:46:e6:db:11:ee:8f:9c:ec:be:64:00:42:70:04:
2d:d7:a1:8b:8d:9d:37:3b:01:87:dd:ed:b0:db:8e:60:2e:fb:
09:e4:48:cf:c7:56:43:f4:b2:70:c8:a7:4a:db:99:0b:1f:67:
9a:6f:d1:4b:b2:30:31:0f:ab:46:ee:7c:f4:ed:8e:9d:8b:cb:
a3:d5:b3:17:7f:9d:ad:a6:c5:bc:87:de:a2:7b:80:34:43:43:
57:d0:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:26 2025 by rpki-client