Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 7G1obHiAGS92PQV+/LYN9h9xOJeH5rb2gfPaAGhqWNA=
Subject key identifier: 95:EC:C5:95:53:24:E4:29:9F:C2:BF:A9:FC:A2:B8:33:94:25:D7:60
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019748C36CCD4C83DA50D0D824FAF3E2218E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0959
Signing time: Sat 07 Jun 2025 05:00:56 +0000
Manifest this update: Sat 07 Jun 2025 05:00:56 +0000
Manifest next update: Sun 08 Jun 2025 05:00:56 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: mtXJmxJ4DbNUoqkJJNs6Vpdpt5Uq4ocw11oDhbQEJm4=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:6c:cd:4c:83:da:50:d0:d8:24:fa:f3:e2:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jun 7 05:00:56 2025 GMT
Not After : Jun 8 05:00:56 2025 GMT
Subject: CN=95ecc5955324e4299fc2bfa9fca2b8339425d760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:33:7c:86:b4:54:c2:da:3d:b4:26:c9:85:
3a:e0:8b:f0:05:0e:5d:c0:51:e7:7b:05:c4:2d:46:
70:d2:f6:3a:98:0c:92:03:e3:9a:15:c7:d0:b9:2c:
42:2b:99:39:22:85:08:a5:c5:7f:c1:a5:3e:f7:8c:
66:3b:1d:2c:c0:a3:80:37:a1:c2:4f:45:19:45:4b:
f6:86:b0:ac:b8:7a:5f:4e:45:46:4a:a2:5e:b2:a1:
51:0c:a1:3f:ed:81:9f:13:0c:cb:6d:3f:62:96:e6:
f8:a2:58:a6:01:c2:20:9f:e9:84:4f:4b:35:ef:97:
9e:f5:de:68:2e:e9:18:12:b2:ab:4b:9e:d2:a4:89:
c5:b2:04:9b:00:e9:69:71:65:3a:a8:c3:5c:03:d0:
5a:3b:5d:f0:03:f5:20:54:76:fc:f1:18:44:e8:7d:
00:58:e6:0e:03:7b:27:66:ce:80:3e:db:0b:f1:03:
a3:86:08:2f:b3:30:f2:98:4b:97:01:56:3a:9d:00:
64:57:cd:22:3e:f9:30:05:2a:9c:11:0e:85:ce:3d:
e5:3f:08:82:08:67:cd:94:b0:a9:8c:b5:9d:ac:70:
00:cd:79:a9:3e:ea:9f:6e:ca:55:5f:bf:c3:fa:1b:
52:83:a3:64:9f:5c:d7:ec:d1:d1:f0:35:7c:2a:94:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:C5:95:53:24:E4:29:9F:C2:BF:A9:FC:A2:B8:33:94:25:D7:60
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:db:76:e8:91:30:ef:b5:f4:62:12:d3:2f:63:ba:6b:32:cb:
20:68:c2:1e:a3:f1:0f:5d:ae:8f:dd:1e:df:72:9a:e7:15:00:
75:be:ce:64:6d:72:d8:84:9c:c0:d1:f8:40:a7:c2:1c:b8:ed:
41:23:0f:99:75:18:ae:b0:18:fc:a4:a6:c7:62:b5:39:b5:fe:
38:d4:1d:22:6e:0a:d4:03:db:21:bb:77:a1:a1:21:6b:1a:62:
be:a3:37:7f:df:88:34:ea:e8:9f:1c:40:e1:c3:c2:77:65:c4:
11:90:6a:a8:4c:10:45:c0:30:fc:51:21:ca:66:e9:ac:f0:8c:
58:36:0a:5d:15:7f:bc:bf:ab:1b:07:4d:9f:5a:19:ec:29:2c:
4f:ad:c5:85:19:1b:28:e3:b8:89:ca:6b:3e:eb:22:d0:43:d7:
38:d0:42:99:6a:8d:4f:8f:c9:05:25:ca:0e:5c:e2:9c:26:50:
7b:4d:7d:29:29:de:17:f2:c3:e1:1c:3e:1f:ee:23:ec:76:f8:
e7:5a:99:7e:c9:a2:42:9c:24:da:bc:3d:3e:ab:a8:62:b8:7b:
a5:62:b5:02:77:0c:a9:d7:da:84:10:2b:12:dc:b4:f5:a7:3e:
88:31:47:18:70:a7:47:31:fe:0b:d8:ef:69:6d:4e:90:06:60:
48:fe:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:24:32 2025 by rpki-client