Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: ZJmUx9jjADc6v1vEReXrdyRdaYMab4hOOZgBm2gIfWE=
Subject key identifier: 7A:76:6E:C2:0A:08:7B:8D:D8:72:57:46:04:C5:97:BD:68:94:3F:39
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 01974DEA12C94903388F132D15E665F0E5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 05:01:15 +0000
Manifest this update: Sun 08 Jun 2025 05:01:15 +0000
Manifest next update: Mon 09 Jun 2025 05:01:15 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: F9sCHIZD2X64jQqLdaxGJpwNYy3CHDZQ3pwAcpZZnj4=)
2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:ea:12:c9:49:03:38:8f:13:2d:15:e6:65:f0:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Jun 8 05:01:15 2025 GMT
Not After : Jun 9 05:01:15 2025 GMT
Subject: CN=7a766ec20a087b8dd872574604c597bd68943f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:b3:3c:da:06:31:de:39:82:28:a7:04:22:
77:74:6a:5b:2a:d1:eb:88:82:5f:76:0b:9c:d7:39:
2e:86:e2:8d:3b:23:c3:1c:fd:28:ee:62:12:18:2f:
d4:93:96:11:b4:52:1a:98:9a:bb:d6:b8:2d:55:45:
06:de:42:e6:b9:6d:f7:03:6c:0d:e7:e7:37:fb:ea:
5b:e5:8b:60:0b:15:34:e8:4e:a9:38:60:55:0d:60:
de:20:f5:b1:45:d7:1f:7c:b0:18:d0:16:7f:f4:9f:
87:0e:5a:de:f2:1d:8b:0a:03:e1:ac:a7:fd:3b:e3:
40:54:d3:96:07:82:60:15:81:12:41:8d:87:88:39:
02:d0:a2:d9:e4:11:d8:4b:fa:d9:3c:10:93:ad:7f:
82:94:a5:98:0e:64:e1:0b:a9:c2:d4:eb:a7:81:80:
43:17:f6:dc:12:5b:2c:d3:65:70:1a:c3:dc:ec:63:
3f:70:38:31:f7:28:eb:cd:34:e8:71:b2:e0:86:a8:
66:eb:0e:2c:ed:7f:c3:00:6d:53:c2:fb:df:0b:cf:
26:8b:7c:b4:e9:ce:53:01:86:f6:c8:1e:5b:0b:e0:
b6:8e:92:4f:1a:f9:7e:41:ce:bc:97:ec:1d:d1:c1:
3f:e6:5e:08:8b:e2:fb:83:71:b4:3c:02:d4:a8:e3:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:6E:C2:0A:08:7B:8D:D8:72:57:46:04:C5:97:BD:68:94:3F:39
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:af:5b:2e:be:8b:b9:90:59:60:8b:e0:09:94:a5:a2:44:36:
8d:8f:2e:b8:30:a8:46:0e:23:88:60:8d:de:57:56:d8:31:82:
94:38:36:d2:8c:e9:81:7a:c2:6a:f5:01:85:00:6e:39:9c:aa:
f4:4d:e5:62:65:15:38:f8:b0:8f:29:28:33:27:1d:b2:80:cc:
1c:66:56:db:71:4c:1a:0c:38:c2:10:17:0f:fe:a6:a1:08:ac:
14:f3:9e:1e:a3:0a:4f:6e:47:16:e1:e3:dd:ce:cb:e3:da:e1:
a6:07:5a:39:17:d3:48:7f:0b:58:d0:ae:c4:ce:c6:21:9f:e1:
d1:a8:2f:25:d6:05:97:09:5c:ee:c4:ee:fd:6e:98:69:fb:6b:
04:8b:cf:43:3f:21:2d:5b:d9:a4:39:b1:c7:a1:20:86:55:4d:
ca:fd:13:66:84:ed:33:7f:fe:a1:fa:f5:bb:f4:5e:f0:99:b2:
05:ff:20:20:b4:db:24:a3:68:03:8f:bc:fd:d7:83:75:c7:5f:
1a:69:b3:66:bf:fd:62:f0:a3:d1:08:e4:cf:6e:52:4f:3b:9e:
20:b8:b4:c9:51:53:f2:73:94:31:62:16:b3:bb:86:75:27:11:
63:b4:3b:74:87:df:37:c6:50:18:ce:99:b4:b4:ff:19:36:0f:
eb:4a:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:10:02 2025 by rpki-client