Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: lTfmjK2MuEUrEWQcHMItXshMwJOLQKqXcPV3YFi86ik=
Subject key identifier: 27:9C:D3:54:F2:66:28:13:6C:39:0E:DE:16:F1:73:CB:DF:FA:CD:B9
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 01974EFBE12A28B507F912F458CAB41A17A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 14DA
Signing time: Sun 08 Jun 2025 10:00:19 +0000
Manifest this update: Sun 08 Jun 2025 10:00:19 +0000
Manifest next update: Mon 09 Jun 2025 10:00:19 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: 9QHjKXofE02bcFOE2yxwk4oaDliYEs7k/KBLAMTmV70=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:e1:2a:28:b5:07:f9:12:f4:58:ca:b4:1a:17:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jun 8 10:00:19 2025 GMT
Not After : Jun 9 10:00:19 2025 GMT
Subject: CN=279cd354f26628136c390ede16f173cbdffacdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:ed:f8:aa:a8:e7:1a:63:fb:5b:2b:b0:75:
72:f0:31:00:26:5b:0b:25:c8:19:43:e4:76:e7:02:
e7:25:09:71:12:2b:ac:f0:b8:f8:2e:b1:47:8a:c4:
84:83:b9:a6:31:f9:77:1a:28:29:1a:03:44:7d:93:
4c:d2:68:98:aa:8d:8f:94:40:70:ab:be:a6:d8:f3:
a2:28:1f:94:08:2a:de:ed:fb:de:85:04:e9:45:60:
25:16:59:23:96:dd:9b:39:8c:67:0f:a1:c6:1e:fd:
0e:02:5f:fb:a7:e0:0a:c3:41:71:23:90:f9:44:63:
77:f4:a3:70:ba:2e:5d:b0:42:bd:d9:de:5f:56:81:
88:9a:dc:1e:0d:43:e5:52:d7:a6:12:91:b7:61:14:
6d:d6:85:ea:ff:00:d0:0e:b3:3b:cd:fd:04:ed:ff:
83:2c:5d:21:44:a4:5f:fb:ef:41:8f:4d:55:b9:c6:
be:0f:7c:ba:1d:5c:b6:b4:e0:b6:f1:8d:46:89:7d:
5f:5d:be:43:7f:c0:80:53:d9:1e:14:a5:ca:59:10:
e3:ea:7d:84:13:0e:9a:53:57:c3:43:2d:0a:83:a9:
74:a6:b1:ee:91:73:25:c0:69:c0:a2:2d:73:e1:e3:
f5:bd:da:1c:6d:61:be:3b:f4:18:96:77:f6:7e:7c:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:D3:54:F2:66:28:13:6C:39:0E:DE:16:F1:73:CB:DF:FA:CD:B9
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a2:35:f6:e2:a1:ae:94:70:27:aa:47:b8:0c:64:78:77:70:
cb:2c:54:8e:5f:2b:69:97:0f:5f:d8:08:a5:24:70:64:73:7a:
29:04:1c:9f:66:2f:a6:c1:56:ca:c8:81:6b:0f:3e:92:0c:d9:
85:03:1c:33:2b:75:1d:f6:3f:a0:a3:f6:67:b1:86:a1:e7:0e:
5b:66:cd:95:d6:79:d2:c0:75:55:11:b1:50:e8:13:75:83:a0:
ef:08:df:d1:51:7a:02:a2:0c:18:ce:17:03:9a:7b:72:9d:49:
78:a4:e9:2c:c8:6c:b9:7c:2b:1a:43:43:98:32:39:0e:3b:b0:
ef:e8:65:44:7a:e6:87:d7:e8:cc:be:f3:3a:06:a8:dc:4c:1f:
81:16:49:f0:78:32:65:32:7b:fb:9e:d0:90:81:75:9d:51:1d:
e3:53:4e:b2:c2:98:0d:aa:0b:37:ac:93:93:f9:78:4d:26:7b:
cc:fd:1a:03:5a:0d:23:07:be:ac:82:26:42:37:28:b3:e7:5a:
d2:14:c9:5b:d4:56:3e:4e:df:f9:de:22:cd:6b:06:d3:65:e1:
ff:f5:68:c2:d3:07:72:ac:3e:af:d9:be:21:fb:ef:02:1c:b8:
c4:14:90:1c:ec:45:18:c2:24:0e:b3:f9:8f:4a:2f:41:09:70:
88:3c:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:55:10 2025 by rpki-client