Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: ngW9rMz+ZMvNFBz66rqxny2eB9LhdGCte5hd1MGxCDk=
Subject key identifier: 9D:FF:BA:F7:90:5A:B7:EE:EF:15:D5:23:94:AD:E1:DC:0A:66:40:48
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01976C2AB19AF4351075A390B5DE67208C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: E9
Signing time: Sat 14 Jun 2025 02:00:26 +0000
Manifest this update: Sat 14 Jun 2025 02:00:26 +0000
Manifest next update: Sun 15 Jun 2025 02:00:26 +0000
Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: u7im/h8Hgi8G2U6tJZGzAr5UMGYPCgxwsKNixAXVHrs=)
2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:b1:9a:f4:35:10:75:a3:90:b5:de:67:20:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 14 02:00:26 2025 GMT
Not After : Jun 15 02:00:26 2025 GMT
Subject: CN=9dffbaf7905ab7eeef15d52394ade1dc0a664048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:13:55:b7:b1:3c:5d:7f:e7:f3:20:b9:19:
e6:af:d4:2d:b2:bb:22:78:0d:18:b5:03:e6:f1:33:
93:e9:a1:3c:86:95:db:41:56:4a:10:a7:3c:90:7e:
11:1a:1b:93:8d:18:c4:74:7f:b3:2d:0b:95:4d:da:
1d:ea:84:ec:94:4b:e8:85:88:9e:da:74:12:8e:fb:
e1:d0:88:d5:95:52:f1:02:4f:95:88:7a:03:46:0c:
98:8c:5a:f4:8b:fb:4d:c9:68:35:ad:e4:bb:f3:67:
06:72:70:32:a5:54:8b:02:99:cf:a3:ac:18:6e:5d:
76:dd:65:01:01:94:6a:7d:c1:1c:03:43:66:0b:d8:
03:5d:48:5a:67:a0:3d:2e:7e:4c:d2:69:52:ed:c4:
42:54:fd:12:af:72:0d:80:20:41:77:4d:23:25:3c:
cd:08:e0:91:5d:e7:a0:c3:af:12:dd:f4:d7:75:5e:
82:05:58:fd:c9:d3:c7:40:97:56:75:ad:74:2d:d5:
b5:34:fe:ca:76:30:d1:82:32:c8:75:b5:67:26:ef:
d8:61:84:ca:d6:64:0b:11:5e:4b:32:be:4d:3a:5e:
b3:45:be:fe:c2:22:12:01:2e:58:6b:96:75:d5:dc:
6a:f1:85:63:7e:2e:6a:30:92:19:d5:d3:e7:c0:ea:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:BA:F7:90:5A:B7:EE:EF:15:D5:23:94:AD:E1:DC:0A:66:40:48
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:e8:ed:61:a3:c1:ca:a5:2c:ee:01:d6:a2:da:06:3f:64:
03:20:3a:87:f1:03:51:e8:0b:48:d9:50:37:74:7a:3d:31:d6:
f5:4a:0d:a5:a6:e4:cf:e7:4d:75:dc:5c:5f:62:54:c4:56:ae:
9b:a1:76:38:18:04:65:81:3a:57:6b:54:6a:bd:aa:d2:e0:58:
d4:95:a9:e8:27:39:d3:4c:a8:67:cc:08:04:cb:05:13:ec:b2:
07:80:0c:66:d4:a3:1b:3d:3a:79:72:7a:14:59:02:ec:c1:23:
5c:de:f7:37:0e:b3:13:b2:f8:2f:85:f9:8c:75:14:d5:c6:66:
01:f0:e1:4f:cc:f0:72:12:14:f1:39:e3:ce:c6:c2:57:a6:ab:
24:42:5f:8f:f3:80:e2:5b:2f:ec:b9:60:8f:21:92:3d:08:42:
7e:93:f4:4d:82:dd:26:f0:7e:d8:d9:09:fc:86:a8:f4:e7:dc:
23:c2:d6:84:f8:98:65:43:8b:2f:c3:55:51:04:2a:cc:1a:0f:
07:2d:24:a0:5f:ad:1d:5c:dc:86:72:98:c0:be:0f:9b:b5:6d:
2e:35:29:2a:2e:8b:5e:41:6c:63:4c:69:a8:f2:99:ab:c0:59:
64:76:a6:b9:83:d5:06:17:be:8c:70:02:37:66:ce:2c:65:59:
9f:f6:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:56:44 2025 by rpki-client