Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: G3dgI4eO6K7u9kQxYjGfcC7UmnqitCeN5A58iCZCS/E=
Subject key identifier: 7D:E8:D3:C3:2B:6F:94:7B:CC:18:85:59:EB:F3:D4:45:77:B9:63:CE
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01976E19A1EA565804E17BBD7D57A9C3DC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 11:01:02 +0000
Manifest this update: Sat 14 Jun 2025 11:01:02 +0000
Manifest next update: Sun 15 Jun 2025 11:01:02 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: 5VD1QP9Ig+YTBW10Pj51fut3OLMmYTDlOyB4wWu+9b8=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:a1:ea:56:58:04:e1:7b:bd:7d:57:a9:c3:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jun 14 11:01:02 2025 GMT
Not After : Jun 15 11:01:02 2025 GMT
Subject: CN=7de8d3c32b6f947bcc188559ebf3d44577b963ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:d9:bf:d8:37:26:0f:b7:15:9c:93:32:c6:
e4:f8:ca:d1:9f:e6:13:24:f9:3f:6e:58:0f:e4:7e:
d9:9a:14:38:ca:ef:15:bd:ef:af:a7:1b:27:e3:15:
60:99:13:6b:1a:9b:90:08:57:ff:ae:ab:37:db:c4:
83:30:06:f9:45:05:b4:ee:7d:93:a7:29:64:bd:7b:
e5:6f:5e:f9:f2:80:77:19:9a:37:31:97:5e:d6:f9:
94:8f:a1:f3:87:d0:e3:13:6e:58:04:14:bf:90:ed:
7f:ea:77:4f:60:ad:d6:04:ac:f5:94:52:ab:fa:e0:
fc:68:d5:f0:ee:7e:22:18:ee:59:50:59:b1:a8:be:
1c:58:29:ef:93:69:49:00:dd:68:b7:5b:83:2f:42:
42:e8:a6:62:f1:73:b3:17:4e:87:9d:9d:f2:3f:e6:
24:4f:1f:59:d1:4c:58:10:fc:68:eb:2c:ac:b3:71:
83:1d:a2:a0:2c:b1:8d:24:64:00:27:93:28:38:6c:
46:7d:41:4c:8c:8e:4c:23:17:c4:b8:c6:2c:10:ac:
03:4b:9d:fc:67:e8:60:21:86:8e:3f:1b:36:9a:0e:
78:37:31:71:23:ad:f0:31:04:94:c5:42:a2:7f:34:
c9:77:6e:0f:ff:ec:24:ad:53:54:7e:46:8f:41:94:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:D3:C3:2B:6F:94:7B:CC:18:85:59:EB:F3:D4:45:77:B9:63:CE
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:47:24:22:77:67:3a:89:22:ae:37:b8:78:d8:cc:d7:3d:
45:ea:ac:e7:d2:49:03:69:41:4f:dc:33:76:b2:dd:a7:bc:79:
37:af:78:27:a5:33:ea:62:45:dc:8b:df:e7:7c:c3:df:dd:aa:
25:1c:03:24:ce:0d:ad:9e:0a:47:70:08:82:56:ae:42:cc:43:
a4:46:38:55:4b:a4:22:1a:42:c4:19:8d:33:b4:48:21:44:db:
35:a2:4a:8d:c6:1a:aa:e1:b4:ba:39:e4:ed:00:6d:6f:55:bb:
6f:92:d4:b5:ad:e0:90:00:af:b7:f3:24:f2:13:c7:2b:cc:11:
d1:57:d6:92:20:c2:66:36:5b:4b:6e:da:52:fd:30:fb:5a:93:
7b:9c:ac:49:01:e3:4a:99:44:e1:83:a7:6e:1e:35:8b:06:54:
30:c4:a5:63:88:cb:fb:95:17:e2:07:f4:de:e2:37:31:54:72:
48:3e:cc:bc:e7:f6:7c:3c:cd:e5:2f:81:07:6f:57:8c:db:f6:
d3:44:44:5b:86:29:4c:c9:6d:84:bd:0a:35:34:45:7a:7b:f0:
15:89:c1:f1:63:62:af:d1:57:43:df:15:9f:7b:e9:05:36:3e:
5e:85:b3:3a:18:04:df:ef:2f:72:85:dc:1d:12:95:58:77:c1:
93:4d:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:23 2025 by rpki-client