Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: Pkpkvw8BrKnF3GW3d2K2qQw+LOsKaNg2oIq/UB+rRh8=
Subject key identifier: D1:EF:AD:6F:06:46:5D:77:AE:60:89:D0:4B:EA:7D:48:46:E4:82:E0
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 01974D448536F1680B7E276A9E8D500E6D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 12B8
Signing time: Sun 08 Jun 2025 02:00:25 +0000
Manifest this update: Sun 08 Jun 2025 02:00:25 +0000
Manifest next update: Mon 09 Jun 2025 02:00:25 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: t8Z/hKgHQ5+Ze0aI27RBjnV/9GLAEtzhhWoMHPEarww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:85:36:f1:68:0b:7e:27:6a:9e:8d:50:0e:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Jun 8 02:00:25 2025 GMT
Not After : Jun 9 02:00:25 2025 GMT
Subject: CN=d1efad6f06465d77ae6089d04bea7d4846e482e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:67:f9:2f:31:7c:90:d7:9e:3d:25:ab:36:
c8:f9:56:3c:60:d9:25:bc:db:59:15:58:de:4a:ea:
63:76:86:37:e4:2c:df:c2:01:a2:c1:69:6a:6b:70:
99:2b:ef:3b:83:6d:0e:d4:a3:a6:9b:ec:8e:09:4d:
8d:b7:ae:e0:83:d3:a8:ff:ab:24:c8:8e:87:0b:57:
8e:43:a0:d6:f6:6d:b3:64:50:66:01:fc:2e:b3:75:
32:19:a6:22:9a:10:47:98:01:b3:c5:5f:a3:84:2b:
68:db:41:94:81:87:29:03:89:60:65:99:b7:30:da:
83:00:d7:31:3a:0d:5e:ec:f1:fc:2e:4e:21:81:ee:
01:dc:6e:32:1e:bd:1d:ff:39:f0:fd:57:8d:81:37:
3f:64:bb:b0:e4:e4:f8:df:87:8c:99:0d:b4:c2:d4:
31:f1:6b:1a:c1:86:22:61:ae:56:5d:2c:49:39:af:
53:81:96:ab:b5:52:74:04:66:80:60:69:dc:46:ee:
7f:e8:46:e8:30:60:b0:5c:16:5a:35:21:5d:0c:ef:
09:1d:43:8b:3f:0f:54:54:46:9e:3f:1b:50:b3:33:
01:b6:8c:11:d5:30:f4:36:9f:e1:4f:02:a8:0b:6b:
55:a4:fd:f6:58:c7:74:e0:e0:35:de:79:dc:c7:39:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:AD:6F:06:46:5D:77:AE:60:89:D0:4B:EA:7D:48:46:E4:82:E0
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e3:62:c6:af:4d:2d:86:7c:60:c7:43:a7:58:d3:1e:3f:df:
9e:a8:05:3d:88:4a:29:91:62:cf:9f:b8:e1:89:92:20:f5:a4:
a8:8f:b7:eb:37:b1:1b:64:1a:b7:45:3e:2f:f3:8b:2e:3d:50:
b0:7e:80:cd:65:51:f3:36:f0:10:c0:6e:61:8e:2a:ad:f7:85:
e1:29:f4:77:b4:ae:ec:78:34:fc:12:b5:87:a0:f2:1c:d2:06:
03:ef:02:3a:e5:71:3a:37:19:ae:71:4d:71:c0:1d:3a:d0:95:
e4:50:7b:44:54:94:db:79:5d:85:4d:79:df:95:3c:3b:16:2a:
a0:d1:b2:e3:21:93:30:c5:ed:c0:4d:67:6d:9e:bd:66:3d:50:
44:de:02:6a:fc:ce:10:b2:91:ad:e5:15:c7:c1:d1:98:da:ba:
dd:b1:89:cc:81:28:aa:a3:8b:26:30:13:60:70:d6:6a:33:1b:
28:b2:ec:fe:5f:89:c2:93:7f:91:ea:0a:e6:b4:9f:45:f5:73:
41:bd:3c:e8:97:be:82:c6:4a:73:fa:4f:ba:79:d8:41:01:43:
6e:67:3a:51:b1:ff:02:94:da:d5:7d:7a:c3:56:b5:f7:7f:9d:
ba:75:99:02:26:af:60:b1:38:c6:c6:2c:ea:dc:0a:17:ef:d8:
9b:1a:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:18 2025 by rpki-client