Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: 7JLJeqYfleVNbw50fLS7hclm84hqbEeP13YRlukccNU=
Subject key identifier: 26:75:C5:CD:AE:48:7D:D1:BD:3A:17:79:69:B2:41:98:73:6B:F8:8B
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019747797072D7038CC7C5AA85458BAE55BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:30 +0000
Manifest this update: Fri 06 Jun 2025 23:00:30 +0000
Manifest next update: Sat 07 Jun 2025 23:00:30 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: 5NIoTuwTswEuCfQOV8vLwDtcMhpV3/fBERer82eXDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:70:72:d7:03:8c:c7:c5:aa:85:45:8b:ae:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Jun 6 23:00:30 2025 GMT
Not After : Jun 7 23:00:30 2025 GMT
Subject: CN=2675c5cdae487dd1bd3a177969b24198736bf88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:9d:5f:7b:27:b5:b8:57:1c:d4:2e:6d:9f:
46:44:a4:64:76:b5:64:5c:e1:07:eb:74:2b:57:77:
fa:2c:6d:31:3d:4c:1a:12:ad:34:91:4b:8e:cf:1c:
79:19:bc:ab:5c:92:03:f3:b5:bb:ea:83:7d:d4:3d:
95:95:0c:0e:8c:22:0f:70:33:67:02:09:e6:38:ab:
de:c9:d3:16:bf:e7:ba:a2:16:53:84:00:3f:d7:f9:
7b:c8:90:d9:65:46:ac:42:7e:8b:e4:f0:f8:a3:18:
73:3b:24:43:19:c5:e1:30:5a:7c:17:16:e0:15:51:
8a:89:e6:16:6a:65:19:ed:3c:ef:82:eb:21:a9:99:
01:7c:e7:c4:09:71:56:51:b0:f2:92:f5:89:80:80:
cd:5a:ae:f5:6a:71:d5:48:ab:50:66:e3:f8:01:63:
78:95:3e:a7:9b:84:07:11:ea:7c:8f:91:ea:dd:c0:
ea:88:6d:99:52:aa:86:d2:3c:2e:b9:fd:28:17:dc:
3e:e1:32:2a:51:3a:c1:b3:02:4f:7c:45:05:e3:10:
df:60:03:23:11:7b:ab:0b:19:0c:81:90:c0:de:8b:
cc:6c:b7:49:dc:4b:d6:19:4c:de:86:8d:25:a0:60:
15:b3:56:03:68:73:83:1c:98:05:02:d3:1e:ef:8a:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:C5:CD:AE:48:7D:D1:BD:3A:17:79:69:B2:41:98:73:6B:F8:8B
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3e:a6:55:bf:cd:50:3f:1e:25:49:d0:a8:50:4f:b2:f1:e6:
48:86:a6:43:a7:bf:e2:a4:6c:7f:67:18:60:b6:c4:3c:16:45:
1e:27:7c:c2:2f:b4:15:08:3d:2f:6a:25:fa:04:c2:b7:96:04:
66:a4:5b:6a:ac:13:a3:30:12:60:68:54:18:be:ff:66:96:19:
4a:80:50:95:d2:e4:de:a3:77:aa:58:31:10:68:85:e9:92:bb:
de:bc:d7:f9:0e:23:5f:9d:be:9e:d6:e5:15:25:fa:0f:f5:ce:
28:65:da:93:a8:12:29:82:a2:4f:39:db:5d:14:1e:6b:a6:eb:
a1:dd:bd:a2:a5:c6:3b:24:85:d4:0e:48:a2:9d:46:68:0e:bf:
43:c1:5e:47:6a:f6:1a:52:fa:95:86:cb:c5:b9:fa:06:8b:d1:
fc:fa:93:05:c6:eb:17:f7:d8:20:53:ae:94:dd:b8:fb:99:c9:
16:f1:01:49:d5:55:96:a3:7c:17:66:83:73:d3:7f:0d:7b:f7:
d3:3f:0f:a8:55:c0:27:65:76:37:d8:7d:ce:09:4e:c3:a8:ec:
9e:87:ea:bd:df:f8:fe:64:f6:c3:ec:43:d4:3a:87:18:f3:66:
47:53:7f:c5:bc:2a:ef:ac:17:0c:84:d4:33:89:d0:05:47:59:
8e:8a:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:08 2025 by rpki-client