Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: cWt5inKziWSKqGHdHg1SlJ9rxfGY/KcYn3VQ0Gzz/Cw=
Subject key identifier: 9D:5B:E7:F3:BF:B5:CE:5E:E2:B9:24:6A:68:29:34:DF:15:2C:54:BE
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 019748C323D507DABEABB97BE0D7C4AD0F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 1571
Signing time: Sat 07 Jun 2025 05:00:37 +0000
Manifest this update: Sat 07 Jun 2025 05:00:37 +0000
Manifest next update: Sun 08 Jun 2025 05:00:37 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: dkj9zd9a3Skom+QpyLYMK29PYeCWylfNGN6UDnjy/f8=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:23:d5:07:da:be:ab:b9:7b:e0:d7:c4:ad:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Jun 7 05:00:37 2025 GMT
Not After : Jun 8 05:00:37 2025 GMT
Subject: CN=9d5be7f3bfb5ce5ee2b9246a682934df152c54be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:5d:18:9f:ea:4f:ea:fa:d6:07:7d:0a:14:
9a:cb:30:4b:91:25:21:da:eb:ed:ec:0a:9f:39:54:
e7:bd:1b:3b:a9:94:47:ff:3d:a0:1a:e7:1b:7e:11:
5a:84:e0:a9:48:79:c5:36:1d:e0:e3:ee:08:13:c5:
24:27:e2:58:d1:45:ea:2c:ff:aa:3e:bb:a7:ad:86:
e8:f9:66:0f:93:22:6d:b9:54:42:48:68:26:74:be:
14:da:5d:37:26:4d:d7:33:dd:cb:e0:f4:02:4c:3c:
82:8a:85:08:da:0d:e7:44:44:06:a8:4d:73:cc:90:
b9:a2:c6:de:7d:3e:88:8e:61:f5:47:f6:df:3d:72:
af:93:06:6e:52:55:95:5f:7d:f2:e0:1e:1b:75:b6:
d1:ed:cc:7b:14:a6:aa:14:b7:18:46:2b:f5:d3:d6:
93:2b:ee:4e:8a:0a:9e:0b:42:07:01:44:f2:b5:12:
35:65:6a:41:f0:14:03:21:06:6e:81:86:be:5f:95:
d3:f3:48:aa:34:3b:95:90:eb:49:4d:ed:d6:b8:b2:
24:c0:e3:e2:e8:20:6a:e4:8c:1c:f0:51:d5:86:00:
da:59:43:44:28:30:26:bd:a4:15:8d:12:d8:39:81:
51:11:0b:7f:58:f1:ca:e5:dd:b2:94:9a:49:e3:d4:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:E7:F3:BF:B5:CE:5E:E2:B9:24:6A:68:29:34:DF:15:2C:54:BE
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fe:79:2a:d6:a6:ae:ae:79:bf:57:40:32:d9:7f:6d:44:a3:
ce:10:6e:6e:f0:06:2a:e8:31:13:01:b1:52:08:32:a4:ce:ed:
c4:90:13:5b:73:7f:95:67:b1:e5:28:28:a0:d7:1e:c7:86:8f:
c4:cd:39:62:c3:35:62:5f:6f:a8:96:e1:d9:16:80:cc:5b:83:
37:98:eb:00:d5:d8:f3:52:cf:ee:f7:cb:63:6e:4a:77:3f:bf:
af:28:8d:15:22:3a:30:46:f5:56:b4:ee:2b:0d:ca:73:09:9d:
02:2f:57:a6:f6:03:46:a4:f8:27:73:ce:65:44:fc:10:66:83:
6b:77:8b:b0:9e:38:b6:99:fb:09:ec:03:2f:7d:07:a8:22:32:
0c:76:b8:91:0b:db:3b:de:e7:a3:c7:47:8a:04:00:47:ae:da:
f5:60:5c:8a:bf:fd:2b:29:9b:04:07:b1:ac:5b:fd:7f:3c:9c:
48:30:2d:0f:bc:8f:2c:2f:93:62:f6:aa:05:9d:e4:12:cf:52:
2f:b7:a5:07:f8:cf:67:09:9a:32:a7:39:b8:0b:27:87:4a:14:
a4:3f:c6:63:18:70:81:10:1a:30:0b:f8:3d:a8:12:82:62:51:
92:84:62:cb:89:3e:bf:f5:6c:76:d5:79:90:00:e0:fa:1e:73:
8f:f8:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:32 2025 by rpki-client