Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: vZf4eCJmgvRi2rc/tEn10KsBftOlJABgj4ZcH2OqQj0=
Subject key identifier: 2C:D4:86:C5:69:3D:A9:A4:A7:47:79:88:7D:76:22:2F:A8:E8:2C:71
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019746D51BE6161DA8954BC64345D3D8CD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 20:01:00 +0000
Manifest this update: Fri 06 Jun 2025 20:01:00 +0000
Manifest next update: Sat 07 Jun 2025 20:01:00 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: H/Eh9ldqB7Zoa8eC+/1nctKAUeMNJBnNVr/cyXZAC6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:1b:e6:16:1d:a8:95:4b:c6:43:45:d3:d8:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Jun 6 20:01:00 2025 GMT
Not After : Jun 7 20:01:00 2025 GMT
Subject: CN=2cd486c5693da9a4a74779887d76222fa8e82c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:92:bf:24:77:a3:a3:35:63:0e:69:8e:be:
fe:db:f6:3a:ca:d2:65:6a:f2:67:a9:d0:e9:2e:53:
43:21:fd:43:67:82:95:68:8f:d3:7e:75:1c:d9:5f:
0a:da:09:53:41:b7:b9:94:87:f9:28:07:24:57:3b:
90:4f:22:30:a9:f1:ec:91:ac:16:48:37:89:c4:16:
0f:c3:db:9e:d5:b9:9b:05:8d:46:9d:27:f8:8f:f6:
48:d3:3a:54:4f:da:d1:b2:c3:da:7d:97:d9:a3:d6:
5e:d0:2c:f5:fd:50:7a:8e:90:dd:c4:d7:ad:ed:8b:
ef:2e:3d:cd:bd:38:89:4e:d0:6c:c0:04:2c:2a:6a:
a3:e7:9e:12:9e:fd:d3:78:0d:c8:e3:fc:f3:7d:03:
ff:9a:23:51:65:0c:3f:32:e8:93:c1:dc:c3:6f:fa:
00:52:e1:7d:86:50:33:a1:03:7c:8b:35:4a:06:95:
c6:f8:f2:79:35:a6:3c:ca:51:2b:a2:33:4b:26:fe:
22:32:8d:67:5b:50:32:a3:07:d8:3b:31:ef:52:51:
32:4b:80:21:82:b4:36:a6:93:43:08:76:a6:eb:bf:
e1:77:22:03:4b:c0:86:8e:6c:70:c5:4a:fc:55:e4:
77:57:d0:d4:3b:3a:98:87:2e:28:f1:27:d7:27:30:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:86:C5:69:3D:A9:A4:A7:47:79:88:7D:76:22:2F:A8:E8:2C:71
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:72:03:7c:2b:f4:8e:c2:b9:a6:ca:20:eb:33:32:59:ee:e8:
d1:a8:d9:b9:fc:d5:ef:87:5b:e3:a0:f6:6c:4a:2a:d2:86:60:
e8:eb:8d:8f:3c:d7:c4:29:87:8e:b0:29:c1:2f:a2:de:ed:93:
3e:d6:81:65:78:61:ae:ee:96:71:ac:9f:98:7d:dc:10:5c:b0:
ed:a9:08:5b:41:8e:36:56:5c:1d:d7:d4:d2:2c:72:ff:b5:7c:
58:dd:db:69:02:a8:54:8c:87:76:e4:97:3b:d4:0e:93:4a:e7:
0b:9e:37:c6:05:ab:8a:46:0d:69:c5:3a:c6:7e:d2:e5:36:f5:
7f:8a:0b:52:72:ba:19:ca:a0:83:99:b9:ad:0e:89:c9:fa:a1:
e4:12:a2:0f:26:cd:f2:9e:be:c2:8c:b1:6a:06:28:cb:03:89:
9a:78:6c:df:4f:ee:9a:5e:0d:1e:26:f7:50:f3:60:08:d6:88:
da:07:a2:8a:a7:2b:aa:21:2b:cb:c9:e2:ea:1f:64:2f:96:77:
dc:e3:fe:68:fd:fd:ba:2a:33:e0:ee:69:4e:4a:30:a9:7d:88:
4a:0d:ed:b1:e0:91:17:f1:54:9c:16:10:e1:a5:c5:47:df:45:
60:8a:15:99:58:f7:6b:95:95:96:e9:df:43:3f:89:80:90:0d:
be:33:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:47 2025 by rpki-client