Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: XT/IURyURHysSDtS+5gsQMB1pKA+PAD0MgVrtjwkK8Q=
Subject key identifier: 2C:59:F5:E6:71:9F:F5:05:B7:DA:CB:2E:1B:31:10:09:5A:A2:F7:CA
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 01974DE9D2A6006EA8D999265482944A4D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 1014
Signing time: Sun 08 Jun 2025 05:00:58 +0000
Manifest this update: Sun 08 Jun 2025 05:00:58 +0000
Manifest next update: Mon 09 Jun 2025 05:00:58 +0000
Files and hashes: 1: JscmxGl_L2E7JnV0mfv32RHUpNw.roa (hash: 8j6EFW05T3ckFd0k6CAkZlDvS05KieVcVNbYKlWGlos=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: FCu6wuybrRnKJQCh2nEvtH0ItTDJW7f0JidLFPqVXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:d2:a6:00:6e:a8:d9:99:26:54:82:94:4a:4d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Jun 8 05:00:58 2025 GMT
Not After : Jun 9 05:00:58 2025 GMT
Subject: CN=2c59f5e6719ff505b7dacb2e1b3110095aa2f7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:b8:eb:6d:e4:f7:62:60:31:3b:9f:76:96:
4f:92:16:08:fb:d4:b5:d7:2f:14:12:e5:90:d5:d7:
74:40:be:9d:f1:ee:a1:1f:21:b2:ac:34:15:8d:54:
45:7b:9c:b6:6d:6a:5d:a1:90:f1:cb:57:f2:24:8b:
ca:a6:31:5d:48:24:90:b1:20:21:50:8c:85:f5:cc:
97:63:9c:91:7a:d6:ca:f8:85:fd:63:69:4a:ab:47:
dd:0c:37:83:0e:5e:a2:21:1f:df:9c:ad:c6:0b:36:
3f:35:bc:84:c7:79:fa:9d:f8:8a:09:6b:36:5f:28:
83:62:49:e5:d9:59:68:06:be:b7:ab:98:16:7a:5d:
12:c0:2b:54:59:29:48:60:97:c3:96:ce:03:a8:43:
b1:8b:5f:64:de:f5:0f:6d:86:6b:ed:e4:34:12:22:
31:fe:e8:90:ea:83:e2:8f:93:02:32:98:b8:13:21:
4c:0c:da:82:64:54:59:fe:25:67:a5:13:c2:a5:46:
88:c9:1f:b6:1e:83:49:b7:d7:c1:15:63:f4:e9:2b:
07:df:bc:f9:a7:32:d7:5c:0f:e8:b3:9e:b8:e8:9b:
7f:c6:53:c7:b7:29:45:44:f2:77:66:33:da:86:54:
28:f5:e0:c1:f2:9e:fb:cb:b1:0c:ff:e3:db:bc:0d:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:F5:E6:71:9F:F5:05:B7:DA:CB:2E:1B:31:10:09:5A:A2:F7:CA
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:39:de:95:2e:fc:8b:ff:b7:95:07:96:95:cc:d9:94:87:
96:41:aa:04:75:7a:4c:c8:d3:6b:ce:5e:58:37:cd:f7:56:14:
a0:26:34:d5:e2:f4:c9:7d:5b:9d:de:2a:db:ac:50:23:d4:c7:
04:d7:db:b7:a6:9a:c9:e2:3a:a0:04:6b:60:ca:4b:a0:4a:f8:
19:69:46:e7:f3:1f:60:75:e6:3d:de:8a:60:3b:db:12:9b:1a:
26:ec:ae:d0:70:97:8d:cf:b8:9c:a5:64:fb:80:95:9f:f5:a4:
c6:ec:95:76:c5:94:98:41:8b:3b:ae:de:a1:42:ad:6a:c4:76:
65:a4:25:14:1f:97:62:0f:37:3c:59:cb:fe:82:65:0b:4d:7d:
92:8c:5b:63:bb:35:55:a3:f5:8b:f0:ed:86:e8:fc:32:bc:06:
a0:bf:16:1b:bb:ec:fb:e6:a2:61:76:56:63:37:92:cd:0f:ce:
2a:93:ce:a7:b6:37:bc:57:4e:7c:00:9d:22:de:2d:85:3c:a2:
14:32:7a:be:72:45:80:0f:55:7a:91:56:4a:1a:fc:c0:70:20:
2d:d9:6b:3a:ea:50:5b:ea:9e:b4:d2:a7:3b:40:f5:50:2c:93:
93:eb:95:27:55:78:b1:0d:59:84:78:87:72:a1:6e:19:ba:ff:
61:55:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:46:58 2025 by rpki-client