Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: 3NYR48bZSWuE0oj77hEJLAabnow0Lpt4NGgA0ckGIfU=
Subject key identifier: 54:02:6D:27:95:62:E0:92:19:F4:6C:79:18:18:9D:0F:9D:73:AF:96
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019746D488F9F55F65BC488F73178D484046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0907
Signing time: Fri 06 Jun 2025 20:00:23 +0000
Manifest this update: Fri 06 Jun 2025 20:00:23 +0000
Manifest next update: Sat 07 Jun 2025 20:00:23 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: 5z1ATxWYJrdbsMkVfb2bh1nD8Cwvg+z/SPqRqFLV1xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:88:f9:f5:5f:65:bc:48:8f:73:17:8d:48:40:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Jun 6 20:00:23 2025 GMT
Not After : Jun 7 20:00:23 2025 GMT
Subject: CN=54026d279562e09219f46c7918189d0f9d73af96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:2f:8f:b0:4f:93:42:cf:4b:c2:7f:de:7d:
3a:1a:6c:69:ae:3d:27:af:97:9e:30:5a:37:af:f7:
38:c4:ac:1c:c2:2f:c0:be:53:58:f6:a1:35:c7:c8:
0d:c5:7b:66:85:44:91:89:7f:ee:8c:d9:d0:56:9e:
1c:22:cd:ef:44:b2:17:7c:62:f9:79:dd:00:dd:57:
8e:87:d8:29:a4:f0:86:e9:6b:be:95:d8:50:8e:7f:
fe:a3:03:1a:75:2e:ca:20:4a:fc:dd:db:a9:d2:e6:
06:84:ef:3d:89:c9:12:9c:b3:84:2e:d3:24:06:c2:
c4:d5:7d:a3:2f:4c:3b:73:e1:17:4d:82:4f:5a:4a:
2b:84:42:e9:51:e7:24:53:97:52:27:e1:5f:5e:76:
e7:d9:46:e8:6c:d4:9d:44:ab:02:4a:ed:8d:26:4f:
6e:3e:f4:fb:b2:91:43:31:b4:d7:1d:81:bf:75:cb:
07:20:01:eb:cc:e0:6b:c0:8d:1a:48:9d:61:6a:d2:
36:67:cb:54:df:a1:dc:18:cb:1d:ba:ff:56:b4:d4:
ef:2c:35:3b:70:b3:6f:b3:bc:c4:fd:de:a6:06:1c:
bb:8e:db:a2:7e:56:2e:2a:17:fb:22:40:44:e5:fb:
48:fe:57:b5:80:5a:dd:0a:ff:22:63:79:bb:c9:54:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:6D:27:95:62:E0:92:19:F4:6C:79:18:18:9D:0F:9D:73:AF:96
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:99:e1:de:0f:77:3b:2e:e9:77:2d:8e:56:e9:44:c9:80:
03:6c:a6:99:a1:39:33:92:46:c0:02:f6:49:ac:bb:c1:fc:1d:
3f:fc:74:07:a6:e4:67:98:30:90:21:eb:25:59:ce:c2:4d:4b:
36:18:34:03:bd:00:3e:99:51:4e:2d:7f:1a:ff:59:b6:eb:41:
aa:7e:bc:c2:fa:11:b1:9e:b6:3d:1d:3e:80:54:a1:74:0a:f0:
86:08:23:fd:72:36:e8:e5:f6:66:fa:7d:1e:1a:c9:bf:52:d1:
69:e0:c2:7f:72:f2:7d:5a:39:bc:9c:b7:7b:a4:c2:64:86:4a:
0f:91:12:f5:8d:2e:c8:58:d5:3d:11:1c:eb:44:41:6d:db:59:
d9:6d:46:aa:2f:71:e5:c6:ae:05:ea:ac:28:ed:c0:96:58:9f:
c4:73:5e:51:86:8a:70:c6:6d:27:2e:af:ef:2d:0e:c8:6a:3b:
43:69:84:01:cf:16:25:5b:44:51:90:86:e1:bd:39:53:cd:0f:
52:a0:36:7d:f3:69:a9:0b:a0:e8:d8:67:be:f4:3e:3f:bd:d3:
a5:30:77:5c:3e:0f:cc:08:fe:de:89:50:67:25:f4:9b:33:b3:
fe:0d:11:3e:b9:c6:92:ed:1a:fe:f1:9a:fc:55:a8:a8:0a:9a:
bf:0f:b8:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1Ij59V9lvEiPcxeNSEBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUwNjA2MjAwMDIzWhcNMjUwNjA3MjAwMDIzWjAzMTEwLwYDVQQD
Eyg1NDAyNmQyNzk1NjJlMDkyMTlmNDZjNzkxODE4OWQwZjlkNzNhZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptgvj7BPk0LPS8J/3n06Gmxprj0n
r5eeMFo3r/c4xKwcwi/AvlNY9qE1x8gNxXtmhUSRiX/ujNnQVp4cIs3vRLIXfGL5
ed0A3VeOh9gppPCG6Wu+ldhQjn/+owMadS7KIEr83dup0uYGhO89ickSnLOELtMk
BsLE1X2jL0w7c+EXTYJPWkorhELpUeckU5dSJ+FfXnbn2UbobNSdRKsCSu2NJk9u
PvT7spFDMbTXHYG/dcsHIAHrzOBrwI0aSJ1hatI2Z8tU36HcGMsduv9WtNTvLDU7
cLNvs7zE/d6mBhy7jtuiflYuKhf7IkBE5ftI/le1gFrdCv8iY3m7yVTvIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQCbSeVYuCSGfRseRgYnQ+dc6+WMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN+Z4d4P
dzsu6XctjlbpRMmAA2ymmaE5M5JGwAL2Say7wfwdP/x0B6bkZ5gwkCHrJVnOwk1L
Nhg0A70APplRTi1/Gv9ZtutBqn68wvoRsZ62PR0+gFShdArwhggj/XI26OX2Zvp9
HhrJv1LRaeDCf3LyfVo5vJy3e6TCZIZKD5ES9Y0uyFjVPREc60RBbdtZ2W1Gqi9x
5cauBeqsKO3AllifxHNeUYaKcMZtJy6v7y0OyGo7Q2mEAc8WJVtEUZCG4b05U80P
UqA2ffNpqQug6NhnvvQ+P73TpTB3XD4PzAj+3olQZyX0mzOz/g0RPrnGku0a/vGa
/FWoqAqavw+4eg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:26 2025 by rpki-client