Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: Va3omtGHKdn/dJAz9hH1n8MKETVgIlRKXTLBWuLJiMY=
Subject key identifier: 90:A9:5C:F6:DF:3B:D8:96:3C:FA:A4:33:C5:53:61:67:23:A5:38:A5
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01974AB1764A775A8789C3C6BB2FD8B762EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 14:00:33 +0000
Manifest this update: Sat 07 Jun 2025 14:00:33 +0000
Manifest next update: Sun 08 Jun 2025 14:00:33 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: kKMQhtOB5ktImWDPSR1gszPyFGc5pPzVRUkyvImKhhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:76:4a:77:5a:87:89:c3:c6:bb:2f:d8:b7:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jun 7 14:00:33 2025 GMT
Not After : Jun 8 14:00:33 2025 GMT
Subject: CN=90a95cf6df3bd8963cfaa433c553616723a538a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:91:01:28:64:7f:8c:a7:e3:13:a9:13:93:
57:fe:59:18:13:db:94:ab:0b:4b:d6:cb:be:88:a1:
46:ee:f5:55:c3:f1:57:cf:36:9a:80:00:47:13:b3:
a4:71:51:3a:42:ed:1f:08:8e:e8:03:f2:07:26:f5:
87:fa:f6:ab:37:e9:67:cd:e3:a3:17:b4:56:43:1d:
c4:8b:d8:b5:c3:4e:bd:e9:db:ba:f1:d2:5a:87:46:
18:d5:2c:2b:e5:bc:20:d8:d0:60:c0:69:d4:9e:91:
d1:2a:0b:28:af:31:8b:e9:13:ea:fc:b7:e8:f5:a1:
92:8b:72:8a:09:33:9f:2b:13:db:28:5e:84:37:4b:
37:2a:0f:61:57:5b:ae:44:dd:de:cc:ef:3c:ab:7e:
11:6d:9d:cd:68:3b:d1:28:68:87:31:bd:f4:5c:db:
2e:8d:2a:cc:3e:a5:8d:46:bb:91:13:f2:ef:88:a9:
01:b7:f4:39:cb:4c:79:4a:c3:ca:69:e4:e5:87:ba:
43:2f:4f:5d:fe:00:23:0e:78:cb:24:e4:62:cc:17:
7d:20:8b:c4:dc:54:aa:86:0a:74:07:fc:de:b5:0c:
52:50:64:68:72:e4:68:1a:22:55:bd:37:39:5a:af:
fb:af:cc:89:c6:1b:83:73:58:e0:91:7d:42:37:e5:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A9:5C:F6:DF:3B:D8:96:3C:FA:A4:33:C5:53:61:67:23:A5:38:A5
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:d5:b3:7c:94:ae:af:e2:c6:b2:b6:a4:b4:f3:d5:72:3a:
a7:bc:82:9a:a5:93:8f:88:40:04:a1:0f:a2:81:44:af:cf:97:
09:de:dd:00:7c:c6:30:37:ba:ef:e6:ca:18:a4:d4:cb:21:ff:
ad:58:f3:7b:d2:90:df:69:7e:02:19:55:dd:a6:1d:88:36:ff:
73:ab:0f:0b:9c:67:6d:c4:12:bc:04:cb:40:7b:a8:3b:7a:c6:
15:b9:c8:eb:b8:2f:b6:40:a6:ad:97:ff:94:95:dd:da:aa:87:
09:02:1d:3e:80:14:5e:a0:e2:ab:24:7e:14:ec:8b:5b:25:39:
3e:32:0c:e2:6f:3d:97:42:e9:fb:66:f0:96:14:18:b0:bc:31:
bd:2f:1a:3c:e3:19:8c:d5:0f:34:28:e3:65:4e:f6:39:de:a7:
ae:c4:9a:c1:99:0c:71:09:e8:7f:84:63:9e:e0:ba:b6:1a:c4:
2d:f3:ac:a3:3a:13:f3:bf:59:27:12:ee:1c:9a:1b:d6:3f:e6:
32:32:1e:55:98:4f:22:c7:f6:19:f7:af:ba:ef:5d:f8:2e:8e:
34:53:9a:5f:2d:ad:61:a5:9c:3a:fd:8b:28:71:51:88:65:10:
8c:99:40:56:cb:4f:64:e8:eb:42:01:ee:76:70:9f:fe:32:16:
a7:2b:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:38 2025 by rpki-client