Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: V7BPPpeYbVaVt4+aKURFrz2D590iD9vdcdAGHCcGRNk=
Subject key identifier: FB:34:FE:6C:2F:85:84:26:81:00:40:E5:93:0B:73:B2:17:C9:D1:1B
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 01976EBDFF8DE91BE6397C28E258A7D3B4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: w7OPFu+Hja5+AMIk5BrnG/08VqNVSnJtJwUy4ZyBcmw=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:ff:8d:e9:1b:e6:39:7c:28:e2:58:a7:d3:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=fb34fe6c2f858426810040e5930b73b217c9d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:c3:91:c0:23:cd:79:fb:b8:df:0f:1f:67:
86:c8:76:4e:2a:91:7d:bc:2a:2b:04:bb:5a:04:eb:
de:de:cf:b2:25:38:8e:da:5a:83:a3:86:5a:71:62:
d2:55:09:66:97:cf:bd:b2:8f:5f:d7:09:2d:31:b3:
a2:6a:60:14:01:98:6e:30:b6:20:a9:87:80:5c:37:
11:c4:b2:9d:30:04:bc:71:a8:4c:4a:e8:2f:ef:e1:
db:39:a6:2a:21:2f:23:2d:b8:02:c1:50:34:54:82:
38:eb:67:81:cc:4f:3b:a4:14:17:e4:45:e4:c7:7f:
72:55:e7:ae:84:f5:4c:fe:11:e7:ee:76:d8:a1:4c:
e7:4d:fa:d0:be:67:ab:9b:54:31:eb:0c:c6:22:f8:
87:49:f9:89:42:ae:bd:37:55:15:6f:40:64:ec:c9:
fd:9e:98:8b:e6:77:89:6d:a5:3c:f4:3a:6a:8c:60:
0b:8a:90:61:e6:51:8c:2e:87:18:9b:e3:bf:a4:08:
d9:f2:77:1b:a3:a6:87:83:bd:d8:41:79:17:02:3f:
19:84:f7:1a:bc:4c:ce:6b:f4:d3:d4:42:bf:d8:46:
6d:ee:51:b2:04:3f:83:f3:08:9b:ca:67:14:f6:03:
da:cd:90:49:ad:1c:bf:cd:ca:0e:ea:6c:dd:63:bd:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:FE:6C:2F:85:84:26:81:00:40:E5:93:0B:73:B2:17:C9:D1:1B
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:78:05:79:4e:78:4f:d4:76:89:3e:e6:33:d3:80:c5:15:91:
90:12:ed:3f:f4:fe:1e:2f:d7:f6:63:50:e0:f3:1a:69:65:f8:
b6:46:a4:f6:af:f2:2f:29:11:c4:bc:2a:08:49:c3:11:0f:21:
71:14:35:9b:c0:f7:22:a6:5b:1d:1a:d1:74:4f:11:13:83:73:
51:75:4a:e0:22:37:f2:7d:92:cc:7f:73:9a:9b:01:19:e9:47:
94:d4:76:88:08:82:b4:7b:53:49:2c:1d:a8:db:fb:93:85:6f:
eb:ad:e6:4b:0a:09:6e:5c:88:84:77:21:09:92:a7:32:75:3d:
9e:b9:13:14:5f:bf:62:48:e4:99:53:73:5b:ef:ef:67:d7:71:
12:47:c5:fe:d8:f9:e5:c4:1e:d2:fd:80:ee:e0:1a:23:5c:65:
a4:51:65:13:3e:24:5f:19:a1:0d:77:83:43:f0:61:02:bb:17:
92:7e:0f:38:12:01:15:fb:8d:c3:79:dd:f5:c8:ab:ce:07:92:
3a:8a:d4:6f:32:26:20:2a:66:da:e8:6a:ce:39:87:e0:39:37:
14:56:47:a6:7a:db:4f:b6:8b:bb:9c:b4:fa:b6:67:56:e0:98:
97:52:ca:98:89:60:61:88:77:e8:34:6b:94:bb:d0:0f:44:10:
85:2b:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:03:31 2025 by rpki-client