Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: Orp4Fjfyl93hDgSg6i8yyC2JiGC9eeu0ir303534+BY=
Subject key identifier: 7D:F1:39:C8:7B:2A:77:17:30:E0:A8:83:97:F1:66:60:DE:A2:E3:26
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 019748FA1E70CFC5BD90F3AFB3424E83D5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 0540
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: YoLPDeGjD/VLOVGW3cAs+Oey1xGz827owBcLHi04qQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1e:70:cf:c5:bd:90:f3:af:b3:42:4e:83:d5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=7df139c87b2a771730e0a88397f16660dea2e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:65:bb:16:45:3e:1b:d2:9a:e5:54:3d:0d:
82:0b:e2:16:68:3f:a3:65:8b:0b:da:0b:69:88:02:
45:fa:0f:e7:e1:3c:e5:f6:13:9d:ee:aa:d3:2d:d9:
b4:ab:3c:07:ae:19:9e:6b:bb:49:64:14:a9:2f:08:
cb:74:0a:ce:d9:25:94:bb:68:15:5c:72:b7:fb:b2:
a7:46:04:36:b4:fd:21:58:a9:84:70:e9:ca:71:26:
eb:3c:3e:ce:24:41:ea:d3:48:00:5c:49:cd:7e:0e:
ee:c4:b0:20:d7:7b:ef:86:c3:9d:90:ed:ea:0a:35:
39:2b:f4:3b:b5:6e:ce:2e:c2:83:19:21:b6:f7:12:
f1:b5:b8:a2:a5:31:2d:13:87:ba:09:d2:20:f3:89:
fe:b4:a7:20:62:35:ed:da:a3:cd:d8:d7:2a:ac:0b:
e3:9d:86:15:b4:6b:54:d7:3f:64:5a:5f:cd:d4:04:
19:68:c2:b5:bd:c8:09:a7:ac:56:26:a1:40:0e:01:
aa:27:97:a8:60:ab:c5:d7:b2:29:60:3c:47:54:c1:
ec:65:7c:9f:a6:4c:20:e4:9a:e3:c7:69:15:3a:c5:
11:a2:7d:7e:01:03:e5:af:5e:d5:e0:dc:53:31:cd:
09:94:b1:90:91:4f:6c:ef:4c:54:85:32:48:da:2f:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F1:39:C8:7B:2A:77:17:30:E0:A8:83:97:F1:66:60:DE:A2:E3:26
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:33:92:6b:5f:55:d6:92:f1:a1:86:dd:4a:3c:50:32:59:96:
22:db:b8:33:e4:34:a7:cf:96:6a:6e:13:cc:d3:c9:0a:5f:3a:
0c:a6:de:6a:b9:65:f6:8b:d2:ed:2e:15:61:ca:05:ca:97:dc:
17:9f:f2:9e:18:eb:4c:cb:36:0b:57:8e:db:cc:39:c5:83:67:
4b:b7:f2:ad:f5:34:09:0d:c2:38:9d:34:6e:b9:b9:65:eb:d2:
ab:45:6e:3a:49:b2:87:38:76:1c:14:e4:a7:cc:13:29:1f:74:
92:2a:f4:31:56:a1:81:55:4d:fe:e5:52:ca:0d:93:9c:35:2b:
4a:a6:6a:60:aa:ee:12:40:09:cc:d6:72:75:1f:58:93:12:00:
bb:6c:c2:55:b9:3d:7b:19:d2:4d:2a:41:db:54:70:18:03:03:
c5:c6:6f:93:d2:cb:92:6f:34:7d:c4:3e:c1:2e:a8:7a:e5:e4:
e3:62:fe:01:22:4c:5f:d9:5f:bd:33:b5:fc:65:2c:2c:52:b6:
e5:ab:b0:9f:87:53:c4:eb:04:cc:c5:c8:4f:60:e6:a6:7e:a1:
41:62:66:51:49:20:33:3e:59:3f:e9:e0:b4:74:9b:b8:49:55:
07:34:ee:ad:2b:f1:0d:fd:76:66:b4:19:fc:0b:ad:d6:83:f1:
1b:02:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:09:24 2025 by rpki-client