Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: 83fRnUdtT7D2J16NVxu9RFtLRGyIVE+RRpiRv/6kraQ=
Subject key identifier: 5F:99:3F:DB:87:FA:3B:BE:E4:A0:3F:B1:91:24:F9:CB:9D:F3:80:85
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019748FAA0F7CC05D34318EC9E2300189860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 06:01:14 +0000
Manifest this update: Sat 07 Jun 2025 06:01:14 +0000
Manifest next update: Sun 08 Jun 2025 06:01:14 +0000
Files and hashes: 1: L3eXX40R-J2MZIIUJdb8enfoeE8.roa (hash: lwjbJYBJSc/rhMWtZdkfBAupkIFWhtQl6cOuFgh+q0M=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: i9V7kCxZvmCd2lJhB7CcJcXfvdswxpe3pNOTAn8/QTo=)
3: rzrW1TWZL4bnPJ-nB128HmDlFaY.roa (hash: jgoKQgRuGI4ln2b618FpeT2y9vZl1AD1XL8CqPtrGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a0:f7:cc:05:d3:43:18:ec:9e:23:00:18:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Jun 7 06:01:14 2025 GMT
Not After : Jun 8 06:01:14 2025 GMT
Subject: CN=5f993fdb87fa3bbee4a03fb19124f9cb9df38085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:f8:7d:b3:45:ab:6e:83:db:94:3e:4f:f3:
75:9f:30:78:07:82:85:04:2c:15:62:87:90:b3:53:
0f:35:5f:61:86:47:04:ce:71:41:34:9c:e2:2e:8a:
16:33:58:3a:93:24:79:ee:d3:4d:35:2d:85:ca:63:
86:74:18:2b:97:73:45:cf:73:86:ab:e9:9e:b8:15:
aa:58:78:1a:c2:87:e2:9c:ce:3f:c1:83:f6:66:4a:
bd:20:f9:eb:cf:29:6d:de:24:2f:cf:f4:88:68:08:
ea:b0:2a:b0:55:e8:ea:37:ec:6d:aa:f5:15:6f:ee:
78:30:b4:2d:fa:2b:81:f2:7d:c9:55:b7:c7:73:c7:
b5:23:b8:af:bd:50:9a:f3:64:71:a1:8b:0b:53:cd:
48:61:4e:fd:ba:19:98:54:53:da:c6:b4:7d:bb:81:
8b:2c:97:57:98:d8:39:f1:97:9c:28:be:9d:31:bd:
87:5b:19:e2:75:91:9e:29:53:6c:fa:03:c6:4c:f9:
c4:0b:b3:0e:7a:cd:8f:8e:b1:af:da:43:f2:3c:05:
7a:11:6f:27:2c:54:e5:dc:92:c8:93:aa:05:dc:8c:
87:25:b6:c8:c7:c3:34:44:29:02:65:a3:01:05:d9:
51:c6:0e:b2:c5:58:45:30:49:e6:02:49:27:8a:df:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:3F:DB:87:FA:3B:BE:E4:A0:3F:B1:91:24:F9:CB:9D:F3:80:85
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:fd:4e:24:fb:1f:0b:3a:c9:1d:bf:1d:f1:86:1a:10:19:
45:7c:86:c5:91:4c:e7:78:56:00:52:b8:b7:90:49:83:a5:ea:
ab:6b:a2:ea:11:db:df:bb:bf:ae:cc:c5:e2:3f:b1:f0:7a:8b:
16:4e:8e:d6:98:c1:da:82:5b:82:e8:41:dc:79:0d:e2:a5:13:
f5:20:63:f4:c4:b5:ab:48:ca:c8:84:7f:e9:83:4a:c7:2f:33:
b0:f0:f5:1b:96:b6:40:67:41:fc:05:b3:46:ba:46:b0:db:18:
9c:f3:17:ad:19:f5:cd:3f:c3:3e:72:2e:ed:dc:99:23:bd:81:
f6:7e:ac:a6:d1:53:ad:e3:7c:3a:33:cc:40:23:9d:da:fe:09:
d1:2b:8a:2e:93:03:55:a6:3e:ad:49:f2:d1:06:02:80:5f:86:
15:50:f3:aa:28:69:80:b9:26:9b:f0:61:c9:a5:c0:db:7e:e6:
a8:90:98:b1:8a:6c:8f:04:8c:91:6b:16:5a:60:24:99:15:51:
57:ec:dc:d4:43:e0:96:d5:cd:d9:76:71:51:ef:41:77:47:e6:
dd:a9:b7:58:4f:5a:57:71:39:bf:f9:f2:1d:08:a3:ca:e2:82:
84:93:cd:bf:f7:88:b4:03:a6:30:cf:77:f7:57:41:07:a7:96:
52:8d:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:18 2025 by rpki-client