Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: BXMDb3JDEk84rKTYN6/hW3q08xmxIyWffVShaC8cGhg=
Subject key identifier: EE:72:A4:8E:7F:29:CE:32:97:8B:13:07:BB:F5:8C:0A:29:77:78:0A
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01974BFB503501E97DC852A7DB88374DFE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 20:00:50 +0000
Manifest this update: Sat 07 Jun 2025 20:00:50 +0000
Manifest next update: Sun 08 Jun 2025 20:00:50 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: IPjHdUziTtxnIQLUGSEl/BPze1gTs/q6Vo9jGx80ZR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:50:35:01:e9:7d:c8:52:a7:db:88:37:4d:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jun 7 20:00:50 2025 GMT
Not After : Jun 8 20:00:50 2025 GMT
Subject: CN=ee72a48e7f29ce32978b1307bbf58c0a2977780a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:7a:b8:c4:c4:0b:15:04:00:41:6c:82:09:
58:ed:9c:10:d2:6f:1c:f6:b0:cd:a2:6e:9a:13:bf:
58:ea:55:20:32:b9:e4:f1:c3:4c:cf:60:30:76:21:
b7:72:3e:dc:a1:8f:e8:06:7a:cc:1e:b5:a3:6d:91:
b9:29:66:71:31:3e:3a:7b:58:4a:dd:b1:d4:15:5e:
16:2b:c0:f4:a6:1f:c5:a3:95:d2:c3:f8:13:79:fa:
fb:68:6f:a5:cd:7c:99:37:56:77:de:41:92:82:dd:
e4:e1:b3:4d:47:c4:48:f1:05:1f:ed:1a:40:0b:c0:
b2:6d:ca:fc:95:1b:0a:5e:31:f6:08:c7:cd:4a:88:
24:3a:f3:ea:c9:37:27:c1:33:7d:47:fd:e4:02:88:
9b:7e:96:ae:a5:a5:5c:bb:8a:83:c3:64:2c:d9:ba:
b1:3d:61:d1:77:13:1e:5a:a5:da:dc:92:cc:02:f8:
84:e1:02:7e:15:a6:55:f4:37:5d:bd:a0:86:f4:5b:
df:fd:b3:24:7b:81:c4:34:f2:4e:e5:92:93:ec:2d:
52:ac:8c:c8:b7:fb:93:d5:57:b1:0a:ea:82:62:53:
f6:99:54:68:1a:2d:1e:e3:56:55:8a:69:44:98:63:
5f:35:97:33:f8:34:45:c5:83:77:b8:85:4d:56:50:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:A4:8E:7F:29:CE:32:97:8B:13:07:BB:F5:8C:0A:29:77:78:0A
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ab:98:2b:e9:dc:ed:81:85:45:e4:53:96:b0:66:cb:df:b8:
f3:84:97:a5:6c:4a:f7:3e:c1:5a:b8:ef:29:78:43:a1:2b:d3:
e2:06:62:64:1b:5d:95:8b:89:aa:dd:6f:a7:13:c2:59:ea:8a:
12:78:f8:ee:a8:96:25:f2:a6:04:5b:4b:49:39:c8:ca:39:96:
f2:d0:68:95:45:7a:d8:a7:3c:73:1e:e0:6d:ec:4a:4f:86:eb:
c1:c3:46:59:7e:43:19:48:1b:a7:7f:a9:a0:0c:5b:a8:a8:61:
cc:8f:72:5b:3f:dd:85:f7:4e:bc:6c:b1:bf:9e:20:3d:3f:9f:
66:44:5c:98:42:f4:77:27:d4:ed:d3:b3:91:6b:f6:4a:27:84:
e4:03:b5:f1:02:16:47:b0:a9:00:2a:a5:08:7d:c2:38:c8:59:
13:90:1f:d6:12:6c:55:11:c8:3a:60:b5:69:31:64:80:ec:c6:
c7:ff:aa:b8:c2:9a:b3:8b:d6:eb:0c:ec:b7:81:2b:60:0f:94:
af:d1:da:99:b5:d0:ec:aa:bd:e0:08:bf:70:62:7d:23:49:de:
6c:4a:4a:a0:e2:86:a1:7d:53:f1:c6:e8:1b:7f:98:5e:a3:35:
18:e6:2f:33:ac:a3:10:c0:2d:30:eb:c9:50:77:72:a6:c4:6f:
74:6c:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:40 2025 by rpki-client