Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier: OqBgK0yvatyC3cIVA/vN5aA3/DZWZ3Cz0uXceVO6AaU=
Subject key identifier: 03:98:4A:03:A4:A7:08:D7:D0:31:B4:91:B1:06:F9:E9:51:D6:E1:8F
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 0197488C39D17491CEFE3A3AA6D30A757DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number: 0550
Signing time: Sat 07 Jun 2025 04:00:38 +0000
Manifest this update: Sat 07 Jun 2025 04:00:38 +0000
Manifest next update: Sun 08 Jun 2025 04:00:38 +0000
Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: 7Ge+/kwb6+FqpAMqA2g6xpiS8aoW6/NSkHdKAgTDVEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:39:d1:74:91:ce:fe:3a:3a:a6:d3:0a:75:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Jun 7 04:00:38 2025 GMT
Not After : Jun 8 04:00:38 2025 GMT
Subject: CN=03984a03a4a708d7d031b491b106f9e951d6e18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:59:d7:2d:59:b5:e2:72:42:f5:f3:ef:4b:e4:
f0:2a:ef:d3:60:c2:4d:92:e0:dc:27:64:33:77:4d:
64:39:89:3e:d6:89:f4:28:54:c4:e1:9d:b2:49:ab:
b1:d9:1e:3b:de:47:b3:27:ed:33:e1:15:3d:1f:80:
d5:54:42:11:41:f1:cd:9f:6b:bd:89:6e:38:ed:07:
3d:e2:62:57:35:e4:98:ca:36:59:d2:8d:bb:c8:6f:
45:ac:4d:c9:75:9f:c9:bf:6b:2a:a5:3c:2d:51:7d:
ee:e1:75:57:ee:42:e6:ed:8e:48:95:78:15:4b:c3:
2f:d0:d3:ba:f8:f3:e4:25:68:47:ec:d8:91:fc:55:
23:c8:62:53:a1:af:86:6a:06:b4:b8:0b:3a:82:bd:
14:a4:ce:6b:50:29:55:d3:bc:bc:ce:a3:5d:09:e2:
86:a8:86:1b:90:09:39:42:88:18:4d:bc:58:f7:77:
40:55:7b:b5:a8:d7:7b:cd:e7:6e:47:1f:bb:dc:76:
5e:5d:c5:5b:28:38:4c:59:3c:d6:e9:78:54:53:1e:
3f:ee:fa:37:47:b4:b8:3c:4e:68:1f:b2:03:d5:1a:
8b:b2:aa:6b:3a:7a:70:85:08:81:6d:56:3a:5f:cb:
d4:43:a2:5a:30:64:a6:13:7e:bd:ce:05:ed:a4:3e:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:4A:03:A4:A7:08:D7:D0:31:B4:91:B1:06:F9:E9:51:D6:E1:8F
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:76:98:71:45:09:31:a6:3b:71:c2:8a:5d:1c:07:b7:99:
40:14:08:b9:82:5a:96:5b:fb:fd:2a:1b:72:4b:7b:bf:9f:a3:
a2:18:28:e7:84:16:99:a7:98:07:a1:1a:d5:ee:48:14:55:d7:
50:fa:62:23:ec:b1:9f:41:fd:41:46:5b:40:77:ec:68:d6:e4:
2d:1b:56:27:cd:c4:99:ec:fb:25:94:67:2d:81:a9:84:2d:af:
5a:58:eb:44:ab:20:3f:42:8c:69:98:0c:05:aa:86:ee:e0:12:
f7:08:b1:9a:dd:62:ca:6c:49:71:7a:fd:21:80:35:aa:b5:28:
e6:74:8c:ac:bb:d9:36:20:3c:1d:95:81:28:7e:ad:00:a8:55:
26:5d:55:66:2a:fc:6d:ae:3d:f1:a7:1b:b0:03:09:4f:56:77:
db:d2:58:18:f4:09:3d:29:f7:03:18:6e:2a:13:5d:d4:1b:18:
88:6e:44:49:59:dd:cd:45:18:08:90:c2:23:d9:87:f2:9a:c8:
a4:c9:4e:54:8c:ac:7a:54:dd:da:2b:45:c3:dc:7c:68:f0:89:
79:f0:db:28:9c:dd:85:52:37:6e:86:8f:39:f5:a2:df:86:95:
2c:8f:f4:47:83:b5:89:79:d9:5b:8f:52:ed:09:8f:ad:54:fb:
a5:e8:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:01 2025 by rpki-client