Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: v2AqPTYh5UiynFgP+QXO3hHBB4GThavvNnW+YhiqzYU=
Subject key identifier: D6:31:D4:ED:E9:8B:4F:B4:9E:2C:51:AB:09:D2:3A:2A:AF:17:75:A6
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019749D62C6C5D4EEB9706FAC616C500E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 117F
Signing time: Sat 07 Jun 2025 10:01:02 +0000
Manifest this update: Sat 07 Jun 2025 10:01:02 +0000
Manifest next update: Sun 08 Jun 2025 10:01:02 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: iwUUIqFC5T0orxY+Zoc38jTHQobaRnrconJu1VTjmyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:2c:6c:5d:4e:eb:97:06:fa:c6:16:c5:00:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Jun 7 10:01:02 2025 GMT
Not After : Jun 8 10:01:02 2025 GMT
Subject: CN=d631d4ede98b4fb49e2c51ab09d23a2aaf1775a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:c1:74:6b:b2:a5:25:c0:0e:bb:de:ae:ae:
56:fb:b9:c0:67:ee:83:90:d7:c0:48:60:43:d0:3d:
23:a4:59:fb:32:26:b1:7a:a0:97:ec:ac:78:77:c6:
52:53:00:ea:7a:46:df:9e:d0:22:03:32:ba:26:e8:
fd:87:31:b6:19:49:77:45:b2:be:03:22:c0:12:4b:
1f:2f:75:af:66:3b:19:f0:9a:3b:ae:76:03:06:37:
bf:e8:f0:9b:bd:22:fc:41:7d:91:20:d1:96:18:02:
67:79:ee:79:c7:22:b2:e5:22:6f:90:f3:9e:bc:c8:
62:b5:ba:fa:f1:46:ef:cb:e0:6a:41:81:38:b3:b1:
bb:6f:d2:d1:e8:15:e5:10:29:c8:cd:19:39:d4:11:
b8:3c:91:72:5e:ee:fa:12:d1:a0:ee:69:e5:fa:bb:
dc:4d:19:0d:a2:e8:b7:47:ee:8d:7f:a6:6c:a2:e5:
28:41:31:92:0e:a2:a5:b5:53:be:32:5d:c0:28:4d:
be:31:69:b3:c8:43:e3:1b:90:cc:31:7b:14:2b:ad:
59:66:5e:2e:60:3f:00:e2:58:4c:23:cb:a4:cb:f6:
4f:8a:84:98:86:c4:4e:a1:66:5e:6d:cf:8e:03:04:
2c:61:01:b6:40:0a:09:e0:a6:5c:31:6e:2a:2c:54:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:D4:ED:E9:8B:4F:B4:9E:2C:51:AB:09:D2:3A:2A:AF:17:75:A6
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:58:01:f8:1d:43:2c:06:9c:49:82:b4:91:b1:47:26:49:a4:
09:31:c5:df:1b:2b:ba:04:5b:28:1f:c1:4a:db:1e:8d:5c:51:
82:fb:8c:8e:a9:18:4c:23:43:da:b7:ae:f3:1f:12:f1:39:3b:
41:7b:07:e3:8b:8a:90:9a:54:55:31:cd:ac:76:a5:97:28:ec:
15:aa:c1:63:7b:7e:75:bc:04:af:b8:ad:1e:8e:73:cd:0e:d7:
63:40:88:04:16:6f:7f:23:cb:01:e7:1d:80:8c:46:d2:59:bc:
e3:62:11:cc:1a:59:4e:23:4e:b8:13:bd:1f:28:93:50:e5:6a:
f7:a2:a8:57:da:65:07:96:3b:78:b7:cb:10:79:bf:f0:c0:bd:
67:03:44:bb:03:5a:15:78:37:0b:aa:9f:0a:78:7e:43:0a:7e:
f7:45:34:bd:ee:d5:ed:92:52:a5:b0:be:a6:8e:a0:81:d1:2c:
53:c6:2b:c5:0e:e9:f9:73:cf:d3:66:78:4f:44:f1:d0:57:fc:
f1:36:a8:e8:3e:48:20:e4:bb:1b:71:51:28:9e:12:e1:f4:d8:
98:2a:89:6d:97:1b:1e:29:29:c2:93:a8:99:23:a6:e9:21:64:
f4:2d:7c:a1:0c:8d:15:23:a5:be:22:c7:79:2c:85:8c:1f:2e:
c1:3e:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:39 2025 by rpki-client