Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: RlvYwGVzMzFpIRkJiY0za067A+X7Mp7f/CvPnDlPAB0=
Subject key identifier: 68:73:EC:88:15:7E:AA:06:A1:FF:3D:E3:A2:AD:A1:58:B4:FB:73:72
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019748FA725D8F51EED9C262A367CE6D58E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 09E0
Signing time: Sat 07 Jun 2025 06:01:02 +0000
Manifest this update: Sat 07 Jun 2025 06:01:02 +0000
Manifest next update: Sun 08 Jun 2025 06:01:02 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: 1d+pGXVX3sIa0qWa4eFaPqZ0N5/8uOCKu47zYdFcslE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:72:5d:8f:51:ee:d9:c2:62:a3:67:ce:6d:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jun 7 06:01:02 2025 GMT
Not After : Jun 8 06:01:02 2025 GMT
Subject: CN=6873ec88157eaa06a1ff3de3a2ada158b4fb7372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:cd:88:dd:7e:5f:2e:e1:18:2f:c0:c8:b7:
7b:8c:11:13:4f:c9:54:08:98:35:f4:d7:c7:d5:4f:
f6:f4:45:be:11:21:e7:2a:83:7a:71:24:6e:d4:b0:
86:80:6d:cc:f8:ef:b7:fc:dc:f9:f8:46:bf:40:f5:
1b:34:11:87:92:fe:4b:ce:53:34:d5:df:30:be:66:
47:98:ac:55:71:e1:ed:86:d8:53:a1:2b:a5:86:c3:
e9:e3:e2:cd:cd:3f:da:c0:88:be:03:d3:e6:20:10:
e5:ef:c8:9e:e7:b7:d7:64:4d:a1:42:fc:c2:be:82:
6f:8f:e3:6d:d8:a2:1c:26:ca:bb:d3:7f:18:0c:ae:
d3:c6:d0:be:7e:ef:94:bc:04:bd:a6:d5:11:82:2d:
83:d2:bd:78:11:47:26:cb:00:d8:29:18:95:28:9a:
f2:1c:02:f8:88:29:a2:9c:96:12:61:34:4b:01:f4:
e6:1d:28:4c:9c:63:17:9c:a8:6a:e7:e4:68:48:a9:
28:7b:4a:ac:0b:3e:1f:57:3b:d4:33:c6:ab:f3:84:
df:45:bc:88:7f:57:0a:88:00:d5:73:bd:92:e3:d6:
7f:94:f3:0b:f3:f4:60:22:6a:fc:62:72:76:ed:02:
20:0e:c8:d7:c4:b9:9d:e1:69:7d:64:57:7b:e9:f6:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:EC:88:15:7E:AA:06:A1:FF:3D:E3:A2:AD:A1:58:B4:FB:73:72
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:a5:cb:b5:4a:9f:b4:b3:db:72:2f:f0:f3:c8:b1:35:26:
f8:af:cd:be:a2:4b:54:96:3e:ed:13:b1:06:7a:15:73:22:31:
85:4b:68:01:63:d0:38:fa:b3:3b:da:b3:9b:be:a1:12:0b:14:
05:0b:23:9e:93:bf:c2:bc:d0:0f:81:49:b4:1a:0b:dc:f3:ae:
8d:4c:20:0a:dd:bd:29:e7:0f:e3:01:dd:83:70:3b:2d:73:b2:
39:51:58:29:ea:8e:95:35:d3:35:1d:32:64:96:53:e8:62:05:
4b:83:1c:3a:dd:3d:14:e1:b0:1a:ab:f5:cc:36:52:d3:77:58:
b7:f7:d8:28:ce:0b:3f:8a:a9:f6:bc:e8:aa:0f:1c:2f:d7:5b:
2b:fe:7e:bd:cb:00:b1:02:26:59:08:46:a2:b7:57:f7:70:79:
0e:a4:97:e4:d8:36:93:43:82:b4:01:b8:31:46:1c:f0:c4:71:
1b:da:f0:37:4e:30:4b:29:77:ac:24:03:8c:48:d0:ed:02:00:
fc:14:40:00:9a:51:6b:0a:85:dd:7a:ab:d5:c0:89:4c:3a:95:
c0:af:ef:23:6f:3d:e3:92:19:dd:a9:5f:fe:07:d4:06:a3:48:
95:14:97:0d:ed:39:7c:93:3c:4a:a4:c3:31:02:3d:68:88:da:
ad:f7:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:03 2025 by rpki-client