Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: fUPzhnxamLPL7ZfAJJDq0UzlC1JkDRST2498UR9kKOo=
Subject key identifier: 78:18:C1:6C:D6:77:CD:FC:DA:4B:E5:8F:5A:4A:09:41:1B:5E:7E:0A
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01974C3255385E55855888D60C16F6697EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 107A
Signing time: Sat 07 Jun 2025 21:00:56 +0000
Manifest this update: Sat 07 Jun 2025 21:00:56 +0000
Manifest next update: Sun 08 Jun 2025 21:00:56 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: uQq7LckpQgFRfeptVPly4I456v1t6cvM/z1EtXG8Haw=)
2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:55:38:5e:55:85:58:88:d6:0c:16:f6:69:7e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jun 7 21:00:56 2025 GMT
Not After : Jun 8 21:00:56 2025 GMT
Subject: CN=7818c16cd677cdfcda4be58f5a4a09411b5e7e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:3f:1a:37:67:7b:ca:5d:2c:fb:44:57:ae:
9f:13:78:44:35:2b:6f:96:ce:45:e5:76:7e:e8:42:
3c:c9:0d:55:11:e8:2e:2f:09:79:b4:72:d2:91:c0:
5c:c7:4b:04:b8:c0:9a:34:74:d0:2d:0a:7d:08:e8:
35:2a:c8:da:33:3e:14:39:ab:cc:7b:86:8f:3c:53:
33:b2:6f:28:f9:94:3f:88:a1:a8:3e:02:68:f7:ed:
3b:b9:74:94:68:41:c0:4d:7b:1a:26:21:f6:ff:bf:
dd:bc:64:d6:64:94:3b:7b:4c:34:89:6f:1e:8e:f2:
4b:18:06:5b:6c:67:75:84:12:be:28:f3:1d:65:a7:
1f:85:45:12:20:4c:fd:eb:be:23:03:9b:72:37:22:
06:ea:14:99:ca:da:63:e7:f7:f9:23:b5:69:31:d7:
d4:8a:6a:73:0a:92:43:27:11:fc:a9:5f:eb:86:a4:
c2:c7:0f:16:76:05:5a:cd:3b:ad:4b:5b:ea:5e:31:
9e:2a:3d:2b:e1:1d:b3:17:b1:ee:f9:ba:24:08:2f:
ab:6b:9e:dc:82:28:7a:16:20:7c:33:8e:58:f5:96:
e9:85:e2:bf:44:ef:4a:bb:60:4b:01:92:a7:17:90:
c4:e3:51:78:c8:51:73:22:dc:d2:3e:87:b5:c0:f5:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:C1:6C:D6:77:CD:FC:DA:4B:E5:8F:5A:4A:09:41:1B:5E:7E:0A
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:0f:c0:11:49:da:5f:56:03:c0:a2:cc:e1:ff:5b:5e:47:
b3:56:9e:03:83:be:b5:96:c2:70:b2:a5:12:81:e3:ac:3d:0a:
2d:50:24:44:e5:3e:e9:b6:5a:07:b7:7f:65:da:2e:07:61:49:
5f:5b:84:96:b8:62:23:96:62:2f:b6:51:e1:9a:b3:cb:21:16:
80:78:8b:4f:25:07:62:09:f2:32:d1:51:08:93:ff:53:ba:d5:
b5:7f:bb:e2:da:6f:80:01:c7:90:23:77:6e:62:7e:4d:b8:f1:
a0:98:66:6b:c4:cf:fe:0a:2c:7d:df:8d:98:77:02:f8:45:5c:
73:6f:e2:70:7c:78:be:cf:c0:67:0c:0e:ef:61:32:36:3a:7e:
33:19:29:30:64:dd:e6:39:43:a6:2a:71:9d:c2:a5:1c:4e:96:
cb:76:f5:78:2b:34:39:a2:00:7c:4f:f6:2f:2e:7c:2d:f9:87:
d8:55:0c:3f:ac:68:8d:7b:cb:35:85:b2:08:61:94:a1:05:f3:
b8:87:dd:ef:c7:5b:a8:a7:3e:85:36:5c:23:1d:21:a4:11:e2:
4e:59:7a:ed:1a:d2:94:b8:34:10:df:8f:49:47:f7:32:15:2f:
bd:4b:a8:8b:d2:21:52:20:97:4b:2d:04:aa:fc:2b:2f:50:a4:
a3:eb:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:36 2025 by rpki-client