Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: VNi6iR5erHEhM2wETq92NFvmLidxXbjo+GyctQDb6o8=
Subject key identifier: E3:1B:86:2F:1E:E5:C2:6E:A4:BC:A3:AA:E8:D0:68:E0:96:79:6F:A2
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 019749D592988CEF493D7CC8FA971A1A2EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:22 +0000
Manifest this update: Sat 07 Jun 2025 10:00:22 +0000
Manifest next update: Sun 08 Jun 2025 10:00:22 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: 35fKf70zVDerj71l5beJF4ka/IVwaC/RA9ChfTWcaEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:92:98:8c:ef:49:3d:7c:c8:fa:97:1a:1a:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jun 7 10:00:22 2025 GMT
Not After : Jun 8 10:00:22 2025 GMT
Subject: CN=e31b862f1ee5c26ea4bca3aae8d068e096796fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:8b:ed:59:5b:f6:36:59:eb:00:e7:69:1e:
07:06:ac:cb:6b:67:65:14:a2:51:2e:81:6a:41:71:
68:6f:bf:77:91:60:f1:46:83:e4:4e:b3:1d:73:05:
b6:53:d6:98:ed:69:af:d8:d6:91:4d:ac:1f:3b:66:
cb:c3:94:c6:11:a8:6d:07:40:c5:49:e5:20:9a:b8:
4c:16:e0:af:ce:93:5f:0d:dc:f9:16:f6:20:9f:48:
a4:58:25:b5:72:12:61:00:8b:f0:ef:b4:c0:5c:d7:
32:f9:6d:00:52:32:27:dc:4c:f1:d3:72:c2:8c:b9:
b3:49:df:49:72:b5:31:4c:63:07:31:f1:21:13:39:
58:5e:2f:ad:b8:20:b7:55:11:18:dc:06:1b:92:c8:
48:5f:c4:87:7c:ff:d8:9b:c9:3a:91:e3:f6:7e:74:
d8:54:53:a8:b6:87:bd:88:6d:53:4d:9f:4a:bc:8a:
8d:b3:6a:bf:11:b5:de:9c:6e:f2:56:48:39:d4:7e:
9d:95:e0:bb:28:64:41:e4:0f:f0:7d:55:39:43:8e:
52:8d:27:96:43:7d:dc:a7:28:40:ba:d7:72:12:45:
94:5c:9e:0c:35:bb:e0:f4:fb:cf:87:89:b4:35:3d:
a9:d7:b0:40:6a:b7:a9:5f:d1:cd:60:32:2a:46:e8:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:86:2F:1E:E5:C2:6E:A4:BC:A3:AA:E8:D0:68:E0:96:79:6F:A2
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:94:35:b4:6c:c4:17:9a:92:c1:01:cf:b5:ef:4a:1b:8f:ca:
9b:a1:1b:6f:3a:0c:35:01:c3:77:fb:fa:c0:bb:6f:a2:d8:97:
d8:09:23:89:0b:91:d4:f2:04:57:2b:8c:7c:3b:49:ea:c7:70:
22:97:ad:ab:f7:90:bd:ae:e8:9e:08:48:75:f7:d1:e7:11:a9:
e0:e4:29:e7:90:11:dc:6e:1a:89:fa:d6:15:f0:8f:db:7d:e1:
d7:30:dd:de:25:30:5e:f2:31:51:11:25:98:d0:ca:c9:3c:e5:
5a:35:b6:e0:5f:29:2b:eb:ea:7a:29:c1:50:aa:97:74:8a:65:
1d:ef:e1:de:54:09:7a:3b:4c:7e:d0:3e:ed:86:4a:e1:63:55:
28:ce:c2:fc:ec:45:ee:a4:a0:7c:94:ee:4f:46:16:1a:e9:f6:
33:01:51:91:44:cb:9b:7c:bb:66:fa:f7:ad:e8:5e:af:9a:cb:
d6:22:e7:f6:b5:bf:4d:8f:a9:c9:dd:34:bc:33:ea:a9:ee:df:
fa:df:c7:2b:47:7d:be:4f:a1:99:13:8c:5b:4f:50:35:9f:dd:
ad:1d:c8:45:9e:10:5b:2e:ea:d5:70:42:b1:fe:d9:4d:20:ce:
1d:6c:4c:5c:98:e5:61:1d:45:d2:78:6a:7d:84:53:bd:05:02:
62:55:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:50 2025 by rpki-client