Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: A3TtQSgzYVI3KWrz99qk6LVz+ta0KB2afeB/6w/0JqQ=
Subject key identifier: DD:85:C3:4A:C2:10:AA:20:56:63:EB:78:5A:41:C9:9A:84:77:9C:32
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01975AC93C2A33C1DBE4FFB7F1206FA5E73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: E0
Signing time: Tue 10 Jun 2025 17:00:26 +0000
Manifest this update: Tue 10 Jun 2025 17:00:26 +0000
Manifest next update: Wed 11 Jun 2025 17:00:26 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: 4LyWQYB7T2GbQhcDISLcABGGIeaq8bGCwdCbq+WPXfU=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:3c:2a:33:c1:db:e4:ff:b7:f1:20:6f:a5:e7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 10 17:00:26 2025 GMT
Not After : Jun 11 17:00:26 2025 GMT
Subject: CN=dd85c34ac210aa205663eb785a41c99a84779c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:70:f7:17:57:9a:d4:7a:f1:74:18:fd:5e:
ca:19:d7:cc:0d:c8:ca:06:e2:e4:fc:c6:bc:be:9f:
10:2d:04:f7:41:56:9d:7a:87:ae:9c:3d:02:4a:60:
b0:d4:c6:88:70:cf:48:8d:37:42:53:2e:b2:91:d9:
67:04:5e:b3:b9:c5:91:4a:e6:54:ca:50:cc:6f:30:
03:59:8c:88:86:4a:05:81:b5:a3:4c:f2:b9:a1:61:
ba:d3:9a:87:0d:b1:0d:fe:23:34:7b:28:d7:86:60:
6d:8b:8a:ae:37:13:fe:f5:00:8e:d9:80:51:b4:5e:
e1:8b:c3:78:91:ae:59:d1:44:5b:86:48:52:dd:66:
c7:65:66:c3:8e:9a:8e:4f:66:39:50:8f:c4:38:77:
6e:de:53:1e:69:3a:4e:8c:24:0f:5d:c9:22:03:db:
c9:ee:b5:e8:fb:3b:ae:e5:8b:72:3b:9d:d5:a0:60:
66:f7:92:3a:5a:28:47:99:61:0d:b5:81:f7:2c:a8:
be:ac:2d:73:0d:29:2b:4f:88:cd:a5:a7:ec:80:03:
aa:ec:3b:7c:79:97:74:c4:fe:1f:25:3d:f7:b9:bd:
06:29:b7:6c:f0:4b:04:8d:65:b8:ad:20:f1:1c:30:
94:9d:4a:ca:2c:76:cd:21:9a:6a:89:b1:d8:bc:c2:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:C3:4A:C2:10:AA:20:56:63:EB:78:5A:41:C9:9A:84:77:9C:32
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:13:33:39:61:6b:e3:a0:d0:c0:c4:43:7f:8b:08:3d:90:
f7:61:f0:c3:27:60:6f:06:1a:94:e9:40:c2:de:c1:9b:38:50:
61:3b:5f:65:01:2f:2d:b7:a7:a4:5d:58:75:17:0e:20:bf:39:
28:20:2a:0a:46:91:fa:e2:d9:89:7e:73:d7:c3:b6:08:6a:6d:
3f:f4:6a:69:1e:b2:5d:b1:0c:b3:77:2b:57:3f:2f:85:10:42:
4a:70:ae:0f:c6:04:92:9d:ce:0b:d8:a7:c6:ee:05:86:6a:72:
2d:c3:21:e7:e3:71:8f:8f:14:84:bc:fe:e1:a9:16:37:a0:67:
6e:31:53:96:29:df:5e:c2:e6:e3:cc:d0:02:c3:d1:d5:d8:ea:
28:22:89:6d:25:e9:2e:1c:17:ce:9f:09:01:41:00:0f:2c:38:
31:98:d3:c8:f7:68:39:09:c7:74:b8:7a:d8:31:41:0d:3d:27:
a1:8d:c4:4b:04:7e:09:8d:5c:7f:9a:82:86:59:33:34:50:ef:
c6:41:79:09:2a:66:0a:1f:b9:61:7f:b8:ff:10:99:04:04:7f:
30:a6:84:2f:58:ff:12:d6:fd:a8:41:f8:e6:ba:36:62:55:dd:
8b:ba:c1:7a:e6:65:31:bb:ab:56:66:30:64:36:38:48:68:13:
a3:dd:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:26 2025 by rpki-client