Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: YKns4JnuBUc3Ff9wGZWO+fy68SvP19VfigTsTAUFJM0=
Subject key identifier: C3:39:70:28:E5:06:C9:33:8B:C4:1F:CC:29:1B:A4:84:6C:0E:56:29
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01976C2B6916B57DF19E0DADE857A0C26675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: YP6GPe1Z28hiHset8YWymNWgj0zwotMLafOZ1ilCClw=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:69:16:b5:7d:f1:9e:0d:ad:e8:57:a0:c2:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=c3397028e506c9338bc41fcc291ba4846c0e5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:89:81:89:b7:1a:71:a7:0e:d7:db:0a:0d:
6d:23:f3:ae:40:27:4d:85:0e:46:18:cc:ab:2e:5a:
4f:d7:42:15:06:ea:c1:36:34:72:03:94:79:10:fe:
b3:47:cb:90:8f:51:ac:54:21:bb:77:b4:f7:69:18:
b9:08:d9:e2:7e:dd:e2:af:bb:98:2d:da:37:ec:95:
79:72:6e:2c:ce:58:79:8d:3d:9b:f1:6a:b7:33:cd:
fd:9f:d2:ea:2d:5a:54:22:5c:cc:e2:aa:02:14:fb:
61:05:97:3a:d5:53:55:73:4b:d3:4c:ab:56:43:19:
d4:55:27:35:b0:e1:a8:ec:bc:be:bd:fb:54:67:35:
a1:4f:27:d2:71:e4:1f:65:c9:1b:bc:6d:b6:99:dc:
c0:39:bb:fb:49:c4:fb:e8:be:1e:5d:00:cd:61:2e:
1d:99:ca:9c:d3:c9:38:1a:80:f3:e9:8f:f4:67:fb:
23:23:a1:af:a5:34:30:ae:c4:dc:2e:d9:e8:f8:72:
7d:9d:f8:5f:90:bf:23:95:20:fd:04:48:75:ba:3c:
e1:c0:c0:d4:38:10:af:d3:c7:47:3c:bf:48:3a:e7:
68:5b:2a:e5:09:94:27:03:09:89:80:89:52:53:f0:
a1:5d:cc:ed:a0:6b:1a:fb:b9:d3:9e:2c:3b:88:a1:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:70:28:E5:06:C9:33:8B:C4:1F:CC:29:1B:A4:84:6C:0E:56:29
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:e5:56:d9:55:b5:49:84:4f:5a:e7:eb:88:de:cc:04:52:
74:86:fe:74:08:5d:9c:73:5c:41:aa:00:a3:55:bf:d7:d5:fb:
8b:ea:13:b4:f5:67:15:d4:43:4c:08:c0:66:c7:25:9e:32:bb:
81:30:ab:8c:5f:9f:39:00:2b:bd:5d:8e:10:9c:41:ac:12:14:
2e:90:5a:a5:b2:5a:2b:e9:da:eb:85:c5:e9:1f:ca:4d:75:0c:
15:0e:6e:4f:56:06:e3:2c:33:b7:34:5f:59:3b:a1:14:d9:a5:
bb:c3:df:99:ac:41:84:39:90:8e:0f:ca:1c:ab:11:7c:b2:21:
36:f6:3f:e7:54:a9:cd:90:6b:3a:bb:79:36:79:c7:e4:f7:c7:
93:13:3f:24:34:48:66:72:5b:f4:f2:f7:8c:89:9b:91:b0:a3:
75:7e:dc:81:46:cd:93:bf:6d:72:51:98:19:a4:62:e1:31:66:
e0:58:ea:0d:4d:f8:3b:eb:d7:ef:86:5d:43:cc:91:7e:34:d8:
08:57:24:e7:b5:1d:11:39:91:75:4e:e4:39:cf:90:19:5d:e6:
e9:34:12:c0:58:fc:69:f7:a3:0e:03:b0:c8:c6:6d:44:4c:51:
e6:3d:f2:f3:d9:23:4a:a9:59:c5:87:5e:48:db:a5:75:55:52:
14:90:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:29 2025 by rpki-client