Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: W3rf0fFkEspsYCcs2BnD+kHkw0X7ZIkzsX/RyBbQ3ew=
Subject key identifier: B8:32:41:89:A7:40:D7:37:E5:DE:10:8B:67:D7:92:F3:93:A7:C1:06
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 01974E57236C622BC977FCA4F2C761ADF4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:00:22 +0000
Manifest this update: Sun 08 Jun 2025 07:00:22 +0000
Manifest next update: Mon 09 Jun 2025 07:00:22 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: r/990HN1Nxk6Y/kiTSNex0TJzoBK9PIseUsLRFk7/+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:23:6c:62:2b:c9:77:fc:a4:f2:c7:61:ad:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Jun 8 07:00:22 2025 GMT
Not After : Jun 9 07:00:22 2025 GMT
Subject: CN=b8324189a740d737e5de108b67d792f393a7c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:23:ef:a7:d6:e9:d1:68:6e:64:41:45:6f:
3e:0c:90:25:1d:05:d0:9e:86:ec:11:51:b2:d6:2b:
e4:b3:4c:50:d8:f1:48:64:27:ee:0c:d4:88:4c:ff:
aa:8d:12:54:f2:37:3d:94:c9:b8:9e:cf:f2:79:48:
1d:66:a1:98:87:ef:e6:dd:06:07:5b:42:59:36:e8:
38:1a:d3:66:1e:6a:b4:34:14:f2:33:2a:39:79:4e:
90:e7:64:e2:bd:0c:44:ba:cb:f4:14:a1:b0:77:fe:
fc:18:82:70:8d:4d:91:92:04:fb:d6:ea:fd:bf:e6:
8b:ca:ac:5f:c9:d0:f2:28:23:29:6a:26:5d:6b:73:
a8:3c:e0:0f:c2:b4:dc:92:ab:20:0e:2b:60:fa:e6:
60:8f:54:8a:64:3c:3f:db:cf:71:89:68:63:7b:c7:
dd:ef:bc:55:c8:f0:dc:4e:c3:60:70:02:06:27:91:
eb:58:e6:f3:7c:d7:44:91:fc:10:d4:1e:6b:67:17:
49:ae:6d:1f:eb:39:91:64:ad:72:6f:65:df:27:c3:
ad:20:7e:7b:80:29:c8:7f:f5:c4:81:13:34:7e:a3:
15:12:ce:64:34:e8:0d:61:f2:35:78:f1:c8:ff:9f:
99:40:07:06:04:1d:94:b8:f8:ea:6b:78:e2:64:e5:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:41:89:A7:40:D7:37:E5:DE:10:8B:67:D7:92:F3:93:A7:C1:06
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d9:0e:38:78:7d:09:7a:b1:6c:6f:9c:70:14:64:c4:a6:9a:
df:16:1b:42:ed:21:2f:dd:ee:ad:7d:06:94:00:60:9a:65:4c:
6c:72:8b:88:d5:52:32:ca:97:9a:5f:a8:40:c6:36:21:db:b7:
2e:35:93:a0:9c:28:5b:a1:17:8e:56:3a:f1:61:6b:13:a0:a3:
60:3d:47:22:1d:99:7d:5d:5d:2a:93:67:5a:cb:03:3f:d9:e4:
22:9c:a2:b9:29:df:29:95:62:b4:df:dd:d0:23:d5:6f:4f:2a:
99:9d:18:66:fc:b6:c3:c9:53:ef:5b:a8:54:35:8d:f1:2f:0f:
f6:24:03:d4:9a:ba:2b:47:c9:69:f0:55:83:c9:6b:2c:38:94:
3e:d2:21:c8:f8:80:ca:89:f3:6b:ee:49:fb:31:a3:01:93:36:
24:8b:20:98:ae:20:c0:80:73:21:82:db:e9:be:11:6d:75:4e:
e4:17:76:51:37:19:98:0b:15:2c:d6:41:12:9c:18:75:c7:08:
c7:c4:f3:c1:86:12:59:02:93:aa:40:5e:00:50:15:2a:77:95:
f4:ab:a6:17:47:41:9a:bd:41:80:f2:c1:a1:ad:9b:c2:19:e0:
e6:07:9c:31:35:66:af:6e:c0:27:31:9d:69:f7:bf:86:cf:17:
aa:80:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:02:47 2025 by rpki-client