Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: nSa4GaJYprHS+YIazvIdrCi0UcAUkznw6UMo94oGF2s=
Subject key identifier: 45:EC:23:1E:04:64:5E:07:F3:2E:0F:21:61:E6:B9:57:6D:C8:E2:01
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0197488D085BD691A39EF798B66405001E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0F3D
Signing time: Sat 07 Jun 2025 04:01:31 +0000
Manifest this update: Sat 07 Jun 2025 04:01:31 +0000
Manifest next update: Sun 08 Jun 2025 04:01:31 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: SZ6+IMaXot1NWOOq2vX6HOV7KhvfRuCuPto1MSdK6bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:08:5b:d6:91:a3:9e:f7:98:b6:64:05:00:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jun 7 04:01:31 2025 GMT
Not After : Jun 8 04:01:31 2025 GMT
Subject: CN=45ec231e04645e07f32e0f2161e6b9576dc8e201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:8e:6f:21:58:cd:d3:b7:99:a1:46:48:6e:
d9:b6:df:be:34:2e:3e:87:b1:97:14:92:f5:dc:cf:
0b:1c:bf:19:f9:0a:51:9b:cb:ca:c2:a2:bf:0f:7d:
cc:0f:17:d0:32:da:9d:35:72:6d:88:19:5a:6c:ad:
28:47:d6:66:20:a6:87:5c:fb:08:dd:6f:69:18:f9:
94:ca:96:2d:23:9e:5f:46:05:77:f6:2a:ba:8a:4d:
7f:39:67:bc:a2:a8:21:01:36:fa:fb:30:29:0b:81:
fd:b6:13:d7:42:36:d9:05:11:5d:60:2d:af:5f:7a:
de:c7:71:2f:0f:74:13:d5:1b:d5:7c:bd:70:58:c4:
ab:b2:5c:00:ac:38:ac:5c:21:0c:97:0d:2d:e5:01:
56:80:a6:9d:5d:d0:36:f5:80:49:1d:e0:6e:12:e4:
fc:ab:f5:7a:6d:98:ee:51:b0:c3:2a:49:8e:d9:f6:
a5:97:89:b0:8f:79:e7:f9:5b:bb:88:78:fc:c6:25:
07:19:64:6a:26:83:e3:81:0d:e7:26:37:37:97:14:
8f:02:1c:f1:a8:c3:61:12:c5:73:a7:93:b1:49:83:
99:b3:20:a3:7f:5e:26:73:6d:8c:fd:41:fe:9f:3f:
18:83:44:54:74:f8:9d:66:4e:80:01:4d:28:d9:a6:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:23:1E:04:64:5E:07:F3:2E:0F:21:61:E6:B9:57:6D:C8:E2:01
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:51:53:d1:00:ef:1b:13:80:5b:44:40:7b:2a:e1:e3:ce:7b:
12:69:de:5c:16:9b:0d:c8:e0:34:0f:b1:c8:57:0a:48:be:b9:
c1:4c:b3:e8:62:1e:a1:55:3e:8b:d5:7c:43:5b:45:67:c0:70:
62:b5:29:08:c0:7b:0f:9a:73:bf:e1:39:4f:ad:25:9f:ac:26:
63:27:7d:e1:d4:d5:c1:75:43:a0:61:2b:60:85:76:c5:71:e1:
77:be:87:b9:68:04:f6:d0:f5:d6:77:50:0f:07:67:85:9a:69:
9f:0e:ab:92:b8:c6:40:e6:31:ab:fc:cf:70:83:90:85:d8:88:
30:fa:24:92:db:56:91:96:bd:2d:56:de:60:1d:b1:c0:b6:a5:
12:61:53:a0:d4:2b:91:9d:04:33:c7:2a:62:a9:29:5a:95:8f:
8a:5a:55:1f:13:b8:bf:ea:f9:84:0a:88:6a:45:85:59:ab:b7:
45:6c:dc:30:aa:16:41:88:ca:39:4a:e4:fc:61:45:37:02:4a:
82:4a:d3:05:4f:17:29:9f:32:a9:a9:eb:fd:99:3d:17:18:8a:
36:9a:97:c7:ca:84:9a:da:e3:bf:c8:0f:e6:4c:50:7a:a8:35:
00:36:ae:55:9c:09:64:38:a3:5b:27:a8:2c:23:7d:06:8c:c1:
4f:8a:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:48 2025 by rpki-client