Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: /r+jy93BiumQQgypZNuoE6lCHJXuM88UyT339iGzLHA=
Subject key identifier: F7:E9:C0:11:D5:32:2C:B3:90:D5:24:B1:5E:84:D6:00:CB:31:51:10
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 01974F32E7F51DB0ABC0702AAD4C00E49E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 11:00:25 +0000
Manifest this update: Sun 08 Jun 2025 11:00:25 +0000
Manifest next update: Mon 09 Jun 2025 11:00:25 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: ZQQXSynXnp1t/p8nC2OYxYW1508qDidCn0rt6gFkm3c=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:e7:f5:1d:b0:ab:c0:70:2a:ad:4c:00:e4:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jun 8 11:00:25 2025 GMT
Not After : Jun 9 11:00:25 2025 GMT
Subject: CN=f7e9c011d5322cb390d524b15e84d600cb315110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:4c:4b:88:de:fd:f6:10:2e:c9:60:38:55:
28:11:14:cc:a2:7e:2e:ea:84:10:f4:8a:16:37:58:
70:25:bc:58:d4:7f:10:6a:d2:5b:e1:20:2b:0e:49:
c7:e0:41:11:08:9c:15:bb:e1:c2:d2:80:48:06:5c:
59:c6:b8:05:8a:eb:41:2d:28:f3:41:e9:63:13:b0:
79:34:51:72:f3:b3:f2:e8:08:a7:3f:b5:3f:85:6d:
a0:21:b6:f9:54:54:fe:e4:18:39:b1:a6:5f:68:e7:
7d:86:b2:66:9d:11:df:27:d6:e0:8e:3c:53:28:18:
0d:40:d9:4d:47:a4:79:8f:d6:9e:eb:f9:6c:c6:7e:
e8:55:3b:99:58:a1:63:fa:ff:41:52:a8:66:05:db:
db:27:d2:de:96:09:6b:37:ac:6d:00:a0:03:df:d9:
25:32:68:fa:f9:83:40:0e:35:c6:b4:e2:aa:27:5f:
61:d3:85:92:76:30:0c:48:d4:4a:2b:d0:27:db:4a:
a7:f8:87:a4:c6:c7:e7:ce:3c:82:10:90:77:ea:a4:
25:f8:b7:e1:13:9d:6c:82:37:4b:7d:54:60:df:7a:
72:19:1e:d8:41:76:0f:a2:eb:1a:76:7e:05:ee:16:
29:cf:f6:8c:1a:a1:90:24:3e:b9:81:d2:e6:65:bc:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:C0:11:D5:32:2C:B3:90:D5:24:B1:5E:84:D6:00:CB:31:51:10
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:50:8f:60:9a:d3:2b:56:e4:b0:0d:bb:b4:3a:b3:60:3a:51:
f1:ea:ba:3b:c6:ac:63:7a:81:67:cf:4a:d2:f0:93:c3:9f:df:
ff:b7:d7:41:31:12:d0:ae:c1:a9:94:c7:ae:bf:c8:3c:5d:23:
36:bf:f5:f5:6d:d6:d7:77:94:94:dc:cf:4f:71:cb:7b:f7:1b:
61:eb:b8:38:76:c3:2d:9c:4d:3a:6e:75:76:1e:e4:5c:45:4e:
c9:1b:8f:d1:b0:f1:65:4d:04:db:ab:01:75:95:33:9a:91:77:
02:b2:c1:33:00:34:94:bd:0b:6e:95:9b:9c:40:0b:0b:47:bd:
eb:a7:6f:12:04:77:0d:b9:80:9c:30:6e:cb:e2:19:bc:0a:80:
24:99:8a:86:60:36:d8:64:23:56:d4:4f:79:4a:51:a2:98:fb:
f6:91:03:ba:fe:32:d4:ad:1f:51:23:10:3e:a5:65:53:c8:c3:
5b:65:14:1c:04:3e:32:46:90:be:31:9a:61:7a:08:24:7c:65:
8b:ae:b9:66:ea:1f:22:bf:5d:25:4d:47:0d:94:dd:42:43:aa:
85:85:d2:2f:ad:51:37:34:bf:0e:6e:fb:69:67:f5:f2:93:5e:
1c:e1:4a:87:69:5b:5d:da:0f:43:86:5b:70:75:b3:0f:6b:94:
70:94:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:29 2025 by rpki-client