
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: 928KE6L+i3hyZGW3TN8xnnvyCgDSQDsfti4ABvMUL/c=
Subject key identifier: 4F:3E:91:82:B5:25:C1:AA:D0:0B:49:13:A5:AB:D2:65:6A:32:A9:0C
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 01974BFB9E320FA121BAB18B5C92418B48C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 20:01:10 +0000
Manifest this update: Sat 07 Jun 2025 20:01:10 +0000
Manifest next update: Sun 08 Jun 2025 20:01:10 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: rLE2AHRZ/IkI41L0b7NpBG5QGgqeeyJc10i+cNggv1o=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:9e:32:0f:a1:21:ba:b1:8b:5c:92:41:8b:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Jun 7 20:01:10 2025 GMT
Not After : Jun 8 20:01:10 2025 GMT
Subject: CN=4f3e9182b525c1aad00b4913a5abd2656a32a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:9f:b2:8a:4a:6d:2a:2b:83:40:6e:57:5b:
e4:f7:07:17:52:23:5d:16:18:29:e3:9b:f5:7f:7c:
fb:40:54:fc:f2:67:04:90:ed:5d:1a:bb:ca:84:27:
d4:b0:1b:f9:9d:b1:93:6f:50:0d:d7:b1:43:e9:59:
54:46:65:09:b4:18:a4:17:00:ce:54:53:52:09:92:
15:f8:d8:27:45:9b:a3:d5:29:c8:e3:33:07:e6:05:
75:03:c1:c2:7c:b1:a0:59:10:dd:ff:41:0c:7b:a8:
4b:28:d6:e0:c2:d8:73:ad:e0:d6:f5:96:82:69:0f:
90:29:ee:f9:4d:b6:b2:bd:d1:29:a8:4d:be:ea:c8:
76:30:cf:f3:0b:4d:69:29:21:17:fc:af:8d:9b:39:
e7:f4:d8:c1:bf:a5:1b:0f:ba:6c:98:da:66:01:42:
05:07:4e:64:4d:c1:e8:44:61:ee:aa:41:25:18:e3:
b8:4c:89:97:db:cb:6d:a9:99:a9:3d:d2:c6:88:fb:
79:57:d0:da:18:36:2c:93:b2:8f:59:c5:46:48:5a:
53:f6:f9:44:26:a5:c0:ba:46:30:cb:c2:64:06:52:
0c:41:c8:c6:e1:3f:34:17:75:65:c8:04:2d:2f:49:
68:b7:d2:e9:7d:41:e9:7a:bb:99:dc:ef:9e:65:1f:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:91:82:B5:25:C1:AA:D0:0B:49:13:A5:AB:D2:65:6A:32:A9:0C
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:02:08:8d:b4:4b:3c:08:71:00:97:e2:2f:6a:21:d9:77:
1b:7a:1d:43:31:92:80:0d:8b:f1:dc:08:fc:55:ee:8b:46:ca:
58:6b:7d:df:a1:2d:f4:74:d2:1f:2c:fb:91:55:ab:35:52:1f:
81:cb:f4:e9:c6:2a:50:a9:a0:ae:6b:cc:a4:49:35:d7:ac:4a:
e1:2d:21:a7:a2:99:99:fe:43:d2:cf:30:f1:05:68:6f:fd:26:
71:39:39:3d:b4:94:f8:6f:b6:c4:c5:f1:dd:a9:69:05:e5:ea:
3c:36:7c:b3:7e:ca:19:27:a3:c8:d5:cd:5a:12:af:ff:56:8e:
23:2a:24:8d:70:37:74:03:5f:b1:70:42:72:e2:83:6e:12:ab:
7c:58:96:df:ed:6e:b3:88:21:ca:3a:f0:8d:9f:8c:c0:64:b7:
ef:3b:b3:cd:5c:26:c3:66:76:ef:e6:16:1e:d1:d4:73:7e:be:
e4:a6:55:11:67:95:d8:97:7c:8b:0f:34:0f:1e:49:dd:10:49:
aa:fd:3c:29:10:49:54:a3:8a:e0:de:53:ab:0f:7e:34:eb:12:
36:11:21:f6:fd:62:c7:0c:a2:cb:7b:62:36:c1:ca:14:5f:83:
99:b0:4c:e0:62:0e:f7:5e:8d:0e:7e:d5:65:07:e5:4f:60:55:
1a:48:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:58 2025 by rpki-client