Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: cUCd7RyPJ/AxgroIvnJgCDN/xuKx45f21S3Cfuhxtv8=
Subject key identifier: A3:81:E2:B0:E3:C6:71:37:7D:92:87:9B:86:13:A1:AB:2D:73:D8:49
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 01974779F5E65FAD4EB085DACA71C367D64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 03D6
Signing time: Fri 06 Jun 2025 23:01:04 +0000
Manifest this update: Fri 06 Jun 2025 23:01:04 +0000
Manifest next update: Sat 07 Jun 2025 23:01:04 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: +LQGIlLlh/68tX+5bQcjw4aCgY5A6SOsZs22+sfuzeg=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:f5:e6:5f:ad:4e:b0:85:da:ca:71:c3:67:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Jun 6 23:01:04 2025 GMT
Not After : Jun 7 23:01:04 2025 GMT
Subject: CN=a381e2b0e3c671377d92879b8613a1ab2d73d849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:f4:ef:22:72:59:f6:41:f0:1e:c5:d0:3e:
5e:26:89:d1:c1:cc:48:79:03:f7:0f:20:cb:6f:7a:
51:d2:82:58:53:ef:b7:2e:d7:fe:49:34:df:74:3e:
65:6a:04:0b:4b:92:7d:0f:24:1b:5c:9c:c7:56:63:
d9:91:98:1f:77:65:6d:50:d4:98:b3:8a:6e:53:db:
c3:62:df:69:3e:28:b2:40:00:0f:71:48:41:b4:a9:
a4:fb:04:d8:fd:b9:20:b2:d3:2d:ac:e6:c0:38:ad:
4f:c3:78:6a:fa:87:99:70:91:41:13:7e:30:00:b5:
d3:c6:ba:d1:c1:57:47:54:f4:83:38:d3:61:a4:3f:
c5:2c:6c:20:7f:4f:62:30:2b:41:5c:d3:1a:da:44:
c9:08:11:ee:3e:5f:2a:53:39:47:3b:1b:86:8a:17:
cf:d5:e6:8e:44:27:69:3f:3a:da:c9:99:f8:82:8b:
6a:dc:59:16:61:7f:72:d1:91:53:49:96:3a:f3:07:
23:ec:62:ad:81:f7:69:8f:dd:54:3c:69:37:7e:73:
b9:72:e7:ae:5a:51:47:89:84:d5:31:76:f1:77:1d:
03:25:aa:f6:14:be:59:a5:5d:bc:14:21:32:8b:29:
e5:98:45:72:ac:f7:f9:90:32:e6:f0:4c:3a:53:2b:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:E2:B0:E3:C6:71:37:7D:92:87:9B:86:13:A1:AB:2D:73:D8:49
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:9c:64:fc:6f:83:1c:fe:0e:07:80:6e:39:0b:d7:fd:e3:
a7:ec:32:b2:8b:de:22:90:33:2a:3e:28:0c:07:0e:34:e3:2c:
14:85:6f:0d:5b:1d:36:a2:e6:ce:e2:43:ce:52:ce:48:df:0a:
e3:b8:03:7a:18:26:73:1f:65:60:af:36:9b:ce:d7:79:e7:0f:
21:45:5f:3f:5c:1e:8f:9f:d0:54:c3:e5:cf:70:32:a4:65:20:
64:e2:89:7e:f4:e9:61:3c:cd:0d:23:9b:00:3c:b9:a0:0f:28:
ca:24:1b:ed:08:78:fb:cf:7c:36:ea:e2:b6:c8:84:ae:aa:7f:
13:66:f9:bb:19:88:aa:a2:51:0b:ed:77:5c:63:d0:8a:fe:f4:
f1:17:7c:b0:61:ea:d4:3a:da:83:db:87:4a:d9:b9:20:fd:16:
02:6d:cd:34:93:7b:a5:78:93:5a:6f:79:cb:73:b7:4a:6e:58:
cc:3a:96:db:24:09:6f:7e:e9:89:51:17:90:87:2a:f7:eb:18:
cc:96:c0:22:ea:a2:f8:d1:02:d5:8c:3c:7f:8c:aa:59:17:00:
da:6a:07:f1:93:99:c5:ad:a8:6f:49:5f:fe:36:f5:ba:7b:26:
3b:0f:e6:57:33:85:f8:e2:20:13:c5:9c:20:99:83:3f:af:48:
45:95:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:23:47 2025 by rpki-client