Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: YXbEFORn9dWULxhXxy5pTeemJHvs9O2TI1zUkGSaK8s=
Subject key identifier: 56:1F:A5:99:D9:C7:54:C8:84:AA:0F:27:6D:93:56:51:E1:EE:E7:C3
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0197391A221901B54029B1A57E13FABA8FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1597
Signing time: Wed 04 Jun 2025 04:01:43 +0000
Manifest this update: Wed 04 Jun 2025 04:01:43 +0000
Manifest next update: Thu 05 Jun 2025 04:01:43 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: YS6cH7PcXGvS3FMVmBZ59w/JURqIUAcPW1xRNcfKdUQ=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:1a:22:19:01:b5:40:29:b1:a5:7e:13:fa:ba:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 4 04:01:43 2025 GMT
Not After : Jun 5 04:01:43 2025 GMT
Subject: CN=561fa599d9c754c884aa0f276d935651e1eee7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:09:49:48:34:16:c4:d7:d9:38:fb:e5:33:
e1:19:50:a2:e2:63:b7:9b:65:13:1e:82:a7:a8:eb:
bf:46:44:4a:0e:26:38:6b:35:6b:87:1e:89:83:dc:
58:3c:fa:de:61:86:99:20:f2:42:80:2b:79:be:b5:
2b:27:72:47:62:3b:a3:9d:32:9d:88:f6:29:21:a0:
ce:df:e6:78:56:2e:77:9c:87:78:1d:0c:12:3a:ff:
ba:09:e0:7d:56:8d:2c:4f:0a:f0:07:05:13:66:14:
30:ea:2a:92:1c:68:81:43:b1:cf:e1:b3:19:7f:b0:
d1:9d:8e:d8:1a:47:95:63:1e:b3:2d:76:4d:6b:45:
40:9c:51:78:1a:3e:ff:8d:ed:73:ca:65:90:e7:ba:
20:01:04:b0:3b:b2:2d:af:a9:81:f8:92:0b:f8:95:
d6:15:08:16:45:6d:c9:06:4a:59:e2:b5:47:d9:6f:
d9:31:7c:fd:ce:ac:6c:2e:b7:d9:23:2e:0b:20:af:
88:35:24:bb:5f:fb:5e:d4:fe:c1:4f:22:bf:c8:8e:
bc:ed:99:57:2e:51:7f:3c:9e:21:42:f7:45:f6:3b:
0e:6b:fa:44:1b:89:28:bc:b2:9e:dc:c3:6d:87:d9:
1a:66:77:37:7a:8e:51:6d:f1:21:fe:2e:9e:f5:74:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:A5:99:D9:C7:54:C8:84:AA:0F:27:6D:93:56:51:E1:EE:E7:C3
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:54:e1:89:f8:ea:88:33:b7:b1:e3:29:a1:af:72:ad:23:
91:e1:e8:78:75:db:97:fb:5f:6b:66:26:8e:eb:1f:eb:22:fd:
df:98:f2:2a:df:bf:84:73:b6:f4:ba:f1:01:00:6c:c5:dc:b4:
b7:1a:d5:e6:a6:6d:49:6c:06:9f:48:b9:94:27:3e:71:01:09:
14:b4:72:37:74:ed:d6:c1:a8:0d:2c:c9:39:b4:9e:aa:fe:d1:
21:00:64:66:c6:0e:a5:f0:da:df:e8:d0:42:30:7f:cc:b5:18:
0e:6f:03:07:77:62:f3:ee:20:78:78:5e:03:b3:72:d5:0d:14:
94:4e:d7:8c:19:8c:5b:42:c1:60:ac:69:12:a8:b3:b2:41:2a:
e3:75:4b:63:8f:59:f1:04:5e:4a:64:d1:92:63:95:41:c3:2d:
ee:71:14:6f:f3:93:68:98:6e:50:04:8a:b1:4a:fe:5d:e9:33:
3e:56:62:e2:95:9e:b2:7d:8b:58:c9:49:2b:6a:e8:8d:90:f1:
39:73:31:02:2f:35:c4:ae:6d:9b:bb:f3:27:6d:5b:7f:f6:3a:
b4:84:ba:25:a9:77:ec:8f:a4:0c:bc:1c:7b:c1:43:c6:81:44:
16:c2:25:f3:d9:cf:bb:98:9f:af:a7:c8:6a:80:fb:03:56:b4:
4c:27:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:18:25 2025 by rpki-client