Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: NY1BcVC4spBlUpYcs/HjDPVO6YQnXcvSG5Vr/wELhdE=
Subject key identifier: 92:B1:E8:91:A0:B9:B3:9D:5A:B2:82:5E:CE:0D:76:C2:8F:75:FF:9D
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 01974BC409920F1FC53B2E707124EDE09AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0AF3
Signing time: Sat 07 Jun 2025 19:00:27 +0000
Manifest this update: Sat 07 Jun 2025 19:00:27 +0000
Manifest next update: Sun 08 Jun 2025 19:00:27 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: 6LxvethJXOJIzjOAo9GIFKcL7xDJoaBRdl/ABYUSUSY=)
2: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (hash: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:09:92:0f:1f:c5:3b:2e:70:71:24:ed:e0:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Jun 7 19:00:27 2025 GMT
Not After : Jun 8 19:00:27 2025 GMT
Subject: CN=92b1e891a0b9b39d5ab2825ece0d76c28f75ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:85:bd:03:38:e1:9a:58:5e:1e:c5:c4:1f:
17:21:49:17:93:e9:2b:e0:6a:bf:7b:50:ec:7f:5e:
1b:3c:ab:34:6b:d6:3b:b8:cf:4c:24:d4:bc:68:b4:
8c:95:08:b5:90:ef:f5:1c:3e:4f:38:3f:ae:06:56:
98:80:0a:b6:59:6a:3a:56:b7:bb:b4:ee:34:da:ab:
e2:b3:55:eb:15:24:e2:04:6a:ed:31:5d:6c:4c:11:
1a:7c:06:fb:d4:07:e6:89:a3:13:f0:75:3b:cb:ed:
88:07:01:bd:1c:bb:d0:ca:e7:d8:b1:9b:1f:28:ba:
0e:1f:85:23:e2:49:e0:97:94:1a:a6:d5:2f:1d:45:
31:b6:cd:bb:4e:9f:20:32:13:b7:6b:40:db:b2:9e:
48:79:63:1b:72:6d:cc:7b:21:b8:86:76:82:3e:cb:
50:4d:04:d8:08:ef:2c:a2:32:31:39:c6:89:46:30:
39:c1:60:ea:42:8a:29:f2:2d:c2:99:8c:14:37:29:
36:c4:64:e2:f9:e6:be:39:ad:5e:e3:b9:1b:ed:70:
73:7d:24:6d:19:8f:b4:97:fb:2b:69:60:5b:71:1b:
e5:67:21:7e:88:e8:4b:b4:09:2c:22:e0:23:80:5b:
d7:e2:23:c1:e3:7a:d2:87:66:2d:f5:2e:af:19:0d:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:E8:91:A0:B9:B3:9D:5A:B2:82:5E:CE:0D:76:C2:8F:75:FF:9D
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e2:62:a1:5f:ac:e6:24:8f:89:f5:c8:87:83:4e:78:a5:f5:
71:c2:d8:23:ae:99:55:b9:a3:0f:e1:0f:e0:a6:84:31:19:40:
c2:61:d7:a9:26:f5:55:bd:79:07:47:e5:a2:69:0f:4d:33:a8:
0e:48:36:76:88:3a:ca:a6:2f:5e:b1:68:13:df:26:33:58:d8:
c7:d2:77:e9:47:43:15:b1:9e:5a:bc:3b:e9:3b:eb:db:5e:79:
79:bc:5a:3f:ea:74:f5:49:2f:b6:d8:1e:26:47:95:1b:f1:a4:
bd:34:0a:df:a4:c7:43:ef:28:ec:13:50:60:f5:bd:97:71:a1:
23:2d:27:a5:cd:9d:22:01:1b:46:42:86:c3:6f:54:5d:4a:72:
b2:3b:c6:35:93:d9:d4:e0:43:bc:ea:f9:68:17:19:6d:b0:d4:
70:e6:89:6f:14:1d:7b:cb:23:96:06:7f:c4:f6:13:e2:97:1b:
b8:e8:b3:19:fe:c1:34:2c:b2:56:7c:e5:a4:6e:e9:5f:1a:a8:
b3:f1:f0:b1:86:03:67:26:76:15:40:b0:53:e4:4d:9c:3b:0d:
38:76:cd:56:d6:6f:04:8e:db:ff:9d:61:95:76:03:3a:d3:2b:
c7:ac:ab:de:8c:a4:45:d4:bc:2e:d1:4a:84:83:fe:bd:ce:db:
db:17:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:12 2025 by rpki-client