Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: q81gPAPY5p+0RvPHsdbrN51M3zyGToXuilI90peHsUs=
Subject key identifier: C8:1B:57:AF:58:59:E8:20:1A:F3:01:92:81:AB:E0:50:5D:81:87:63
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 01974DB26C2A9F5C315CEEF17CDE1FA6428B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 0112
Signing time: Sun 08 Jun 2025 04:00:27 +0000
Manifest this update: Sun 08 Jun 2025 04:00:27 +0000
Manifest next update: Mon 09 Jun 2025 04:00:27 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: LdRUO6XvJJkIKLFiHkjAgxk5PWrqlYt4cChJWY803U8=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:6c:2a:9f:5c:31:5c:ee:f1:7c:de:1f:a6:42:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Jun 8 04:00:27 2025 GMT
Not After : Jun 9 04:00:27 2025 GMT
Subject: CN=c81b57af5859e8201af3019281abe0505d818763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:79:78:2f:b7:21:23:6e:81:b4:ac:59:93:
a3:77:76:bd:29:1e:47:03:e0:f8:b0:ad:bd:32:37:
78:3d:f0:18:b2:70:52:07:9a:a8:c6:e4:a2:b5:3f:
16:21:d2:6b:c5:59:e8:22:e8:92:5b:4a:11:c7:2f:
58:b9:73:4a:7d:84:48:80:37:51:56:f6:6f:06:db:
46:ca:94:a1:b1:f0:fe:ae:94:f2:06:69:5e:b0:3d:
55:6b:da:7b:47:4c:97:dd:aa:e1:4d:3c:f4:95:a9:
e7:e8:0d:e1:96:bb:5e:87:7e:ad:a4:db:9e:cd:2e:
fa:14:2f:f4:ed:43:81:8d:ee:14:a1:2a:a6:4a:f0:
35:6e:5a:ad:d9:17:55:e1:58:64:09:a6:a4:ff:ad:
98:f7:38:45:7d:86:a5:c0:84:92:d8:59:f7:15:f7:
7f:2a:9a:ab:06:ba:79:1d:85:b6:a3:3f:75:71:24:
ca:e0:76:8a:4e:08:bf:43:1f:6d:06:83:5f:a5:a6:
a6:11:6d:43:28:d3:51:31:64:28:97:67:11:80:cb:
30:68:87:12:dc:36:c6:eb:2c:f0:dc:f9:48:bd:29:
73:f4:3f:04:fb:06:80:14:e3:69:fb:22:26:8f:7a:
8d:6d:b8:a8:22:e1:da:ae:26:d1:60:de:b0:cb:b2:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:57:AF:58:59:E8:20:1A:F3:01:92:81:AB:E0:50:5D:81:87:63
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:20:25:d8:a5:a2:c2:2f:38:2c:dd:0c:ad:dd:66:87:6b:
df:16:b3:cd:28:9b:4b:92:f8:b8:a3:cd:8e:31:c3:a7:54:03:
cf:7b:a2:d6:85:43:6a:05:dc:14:d5:5e:2e:d8:ad:06:1e:2a:
77:03:ad:e2:8f:a4:8f:f5:a1:f1:7a:74:9b:16:93:ff:93:98:
56:ea:0d:56:53:d9:a7:d2:7a:4d:b5:be:29:9a:12:06:c1:fa:
22:04:1d:ef:7c:74:f8:e4:72:1d:dc:4e:c6:12:6a:c5:23:35:
c5:8c:e7:79:45:39:32:bc:d5:c3:11:8f:4d:ba:25:f5:67:b8:
e8:ee:1d:d4:f7:81:7d:bd:8e:98:59:53:e7:df:d0:f8:68:b1:
c8:e6:30:e3:71:b9:44:66:03:81:e0:3f:32:55:e2:e7:04:e9:
dc:19:48:7d:70:d8:7d:4d:09:21:43:a9:f1:62:a0:97:69:9b:
52:eb:11:c6:ea:3e:51:b2:a3:4a:4d:27:e7:f6:ce:0d:1b:36:
c1:5f:e1:c4:86:fd:b1:89:ca:7b:d3:5b:ae:fa:82:c7:12:e3:
46:a4:63:c8:a4:12:1b:6c:12:07:71:d4:3a:3e:b9:9f:df:d0:
ae:3c:8a:fe:9c:83:fa:47:82:1f:08:16:4f:0f:73:7a:f7:98:
9f:57:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:03:09 2025 by rpki-client