Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: ePGP6kk23i9XYGdLW27W3Pzztb/PPiE+NRac63+Et+g=
Subject key identifier: 35:B4:00:8F:B0:13:47:00:FA:BD:A6:B3:55:59:E6:01:93:34:AC:89
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019748FAC165B01C90A8B03065057FAA1FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0CA8
Signing time: Sat 07 Jun 2025 06:01:22 +0000
Manifest this update: Sat 07 Jun 2025 06:01:22 +0000
Manifest next update: Sun 08 Jun 2025 06:01:22 +0000
Files and hashes: 1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: ILB33bCdUkarLL8khlbCv7UkjwndZ9nsK+DfgfRQ7uI=)
2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c1:65:b0:1c:90:a8:b0:30:65:05:7f:aa:1f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jun 7 06:01:22 2025 GMT
Not After : Jun 8 06:01:22 2025 GMT
Subject: CN=35b4008fb0134700fabda6b35559e6019334ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:6a:1e:d4:26:dd:ac:a7:b5:c4:a7:dc:07:
d5:a5:3f:6e:e3:40:7f:ce:ba:0a:f0:2c:2e:eb:f4:
97:eb:30:c8:e7:65:75:d5:29:d9:77:b4:d9:07:01:
bb:88:5b:70:e8:d6:d6:fb:b9:58:94:b7:75:8a:2c:
0e:d9:7b:90:66:d4:c6:3a:c3:c0:11:45:ec:dc:dd:
82:14:c0:20:5c:a8:e1:91:e9:8f:01:a0:86:30:7b:
5a:2a:07:a7:f1:94:96:39:89:cb:b9:92:ee:c6:19:
23:32:ae:d1:1e:2e:b2:48:7a:9b:0c:51:ec:32:95:
48:9a:88:af:42:88:d8:78:12:a6:14:62:26:61:09:
1a:21:93:aa:27:f3:a9:bf:29:dc:44:38:64:fa:fd:
e6:89:68:cd:87:0a:70:46:ed:f2:62:5b:44:bf:23:
9c:63:8f:37:a7:b3:65:63:23:f7:a5:bf:74:b9:a9:
9e:25:8d:f2:93:70:f2:c9:b3:66:71:21:d3:ae:43:
6b:dd:fd:fc:da:b0:95:92:33:f9:8d:8d:2c:22:6d:
58:41:49:4d:43:74:02:99:90:1d:f5:93:e2:8c:59:
ad:27:fa:20:df:47:ad:a6:33:1b:a7:56:77:82:84:
b6:6e:e6:b4:e1:a7:77:75:9e:3b:a3:e4:a2:a9:41:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:00:8F:B0:13:47:00:FA:BD:A6:B3:55:59:E6:01:93:34:AC:89
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4f:4a:ac:9b:dd:aa:a0:9a:76:4b:41:2b:c7:eb:6d:a3:b4:
4b:02:85:1c:10:85:a6:96:e8:66:eb:5e:61:5a:99:d2:5d:ae:
d1:4b:ca:5a:cc:f1:43:71:a5:98:b5:c0:ff:81:67:e3:60:8b:
8c:48:9f:6d:60:73:44:b7:74:bc:f9:4d:2f:e0:4a:f4:94:1d:
f9:c1:e1:d7:9f:01:21:f7:59:71:da:27:ea:85:f6:5f:72:d7:
92:44:69:ef:37:a5:d0:e1:9b:58:1b:00:57:7b:e1:21:9e:9d:
60:1f:2f:c9:5d:f7:e0:5f:24:9d:d0:50:39:8f:bb:2f:17:6a:
a6:e6:2b:26:5f:9e:29:91:ed:fe:bb:b4:ce:16:63:03:d8:4b:
40:22:a5:d4:64:03:ca:16:8b:96:dd:98:f1:1b:27:da:fe:ec:
c9:10:1b:85:dd:5f:ca:2a:5d:29:fe:e7:78:7a:4c:f7:78:97:
15:85:4a:56:67:61:bb:ee:f6:2f:60:88:f0:4c:8c:80:55:6b:
9e:29:b3:de:5b:1c:a6:cc:3f:82:7d:29:b8:5b:ea:2f:e8:db:
b8:63:06:b9:e5:a1:ff:46:f7:6d:d6:ed:03:0d:13:db:74:6a:
5e:02:3c:48:9d:bc:70:11:c0:f1:6d:ba:bf:ab:28:49:0f:04:
e1:12:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:04:12 2025 by rpki-client