Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File: NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier: F8MBf931ZWQq+uHio7q83h+tZHc9Cg4/8148YoC3jvU=
Subject key identifier: 4F:EE:9B:99:E0:01:F3:E9:11:18:01:72:ED:7B:3B:6E:9C:72:72:25
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 01974742EF0C47B194CA60329C96B71BD0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: h1fruLF4RRgYa/qCkfjmljfekJFk1HWLvdN3n9E3g5E=)
3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ef:0c:47:b1:94:ca:60:32:9c:96:b7:1b:d0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=4fee9b99e001f3e911180172ed7b3b6e9c727225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:85:6f:1e:1e:58:bc:ed:f5:1d:a3:2f:1b:
50:8f:6a:10:90:10:8d:9e:d4:6a:c0:43:b4:d5:58:
fc:b9:23:99:67:1c:74:3e:5d:56:43:2e:84:41:7f:
57:60:fe:10:2a:e4:3b:b2:2b:63:42:e8:b1:35:8f:
a1:33:e0:89:e3:b5:e0:a2:f7:67:11:f3:ec:7b:78:
8e:06:14:75:e2:50:95:3b:64:9c:f6:36:55:95:0d:
11:ce:7b:92:b5:98:e1:26:ad:2a:e2:40:08:5d:22:
bb:dd:6e:85:d1:1d:24:31:ff:8b:b4:8a:5d:40:e8:
8d:08:eb:81:2b:fa:e2:91:61:0f:e8:7b:db:96:78:
48:64:06:f1:77:9f:7f:58:d6:0b:1e:c1:3d:f7:58:
0f:d2:aa:00:96:72:7a:33:e9:57:66:6c:b3:db:ea:
f0:37:1d:bb:1d:d0:b6:ab:6d:6d:7a:a5:60:96:0d:
35:44:09:2d:a8:28:42:df:16:f4:83:a2:ef:6e:45:
ac:2f:a7:ce:e7:58:09:ba:15:ab:21:3f:8b:0d:55:
14:2d:b5:58:8c:34:20:45:9d:93:1b:ca:01:f2:2e:
c9:69:73:8f:a2:f0:98:33:6a:3d:ae:5b:75:cc:d4:
c0:e3:a7:3a:be:d5:28:23:bb:f6:23:22:60:7b:85:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:9B:99:E0:01:F3:E9:11:18:01:72:ED:7B:3B:6E:9C:72:72:25
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:b9:c1:cf:51:2a:5d:25:21:e7:ff:41:6b:97:02:ed:98:
2c:66:2a:71:37:07:5b:e8:78:94:f2:5f:a0:de:77:f2:1f:b9:
ac:0a:34:ee:c0:6d:89:aa:8b:7e:0b:69:93:15:ef:e1:78:54:
35:96:a9:7d:e8:5e:c8:86:89:59:75:2c:00:d9:87:95:1a:04:
85:41:57:60:ec:80:d0:1e:9c:b7:e1:a2:15:a1:1f:89:5c:39:
ae:b7:0b:20:a0:73:2b:8b:74:98:93:a3:10:91:b1:b9:1f:80:
8f:95:be:45:80:b9:2a:e8:24:ba:66:a4:e3:6c:1b:89:c4:2b:
dd:1f:1b:3b:52:5a:0c:e2:af:ad:55:ad:5a:1c:2e:3c:64:70:
d5:34:42:4b:7c:d5:e3:4b:2d:25:02:0f:ca:86:d8:cc:a8:7d:
80:d9:10:e2:86:62:14:0a:d4:b1:58:2c:61:e2:4b:e7:e3:c4:
96:41:ec:f1:34:8b:9d:ea:72:73:36:ff:32:4d:e9:1d:3d:15:
60:70:c5:58:09:95:ec:88:df:b4:7b:9c:42:e0:ff:4e:54:07:
b9:b4:c4:0b:05:95:64:3d:d0:1e:40:8a:81:34:d1:4d:c6:0a:
f0:0d:77:0b:86:d3:1e:d7:1b:07:c7:a0:f5:a8:62:6b:dc:78:
b9:0b:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:00 2025 by rpki-client