Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: f3j3Npdz5KtFyyo6pA7dYk5dTrVt52qU3Zet52u/T4s=
Subject key identifier: 3E:73:2F:B4:1E:3D:7D:C6:66:4A:7E:D6:B1:46:7B:B9:1D:A0:84:F6
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019748FAB64721AFC1A47C58BE0D91160A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1500
Signing time: Sat 07 Jun 2025 06:01:19 +0000
Manifest this update: Sat 07 Jun 2025 06:01:19 +0000
Manifest next update: Sun 08 Jun 2025 06:01:19 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: 25ai2jpueJa4nZPSBSq7oAUluTLn9ryixstP0D9I56c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b6:47:21:af:c1:a4:7c:58:be:0d:91:16:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Jun 7 06:01:19 2025 GMT
Not After : Jun 8 06:01:19 2025 GMT
Subject: CN=3e732fb41e3d7dc6664a7ed6b1467bb91da084f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:8c:7b:df:1d:a2:a7:c5:43:ba:15:0c:42:
06:d7:9e:e8:29:b9:6e:7c:7f:cc:35:2c:35:27:5c:
10:4e:46:72:6b:90:20:fe:23:9a:a8:dc:e6:68:bd:
45:87:d0:c4:28:01:48:3b:39:20:cb:3f:2a:0d:b5:
ac:36:d7:04:fa:1f:cd:aa:58:42:fa:47:52:a4:01:
e8:1a:10:41:74:f8:a5:43:81:4d:29:0a:bf:65:40:
1b:04:cf:c0:58:4c:95:6c:c7:5d:4c:e3:d5:30:ce:
3a:86:c0:a4:aa:20:ad:5b:01:28:10:45:25:8a:fe:
a7:ad:97:eb:83:15:fa:31:ef:d9:3d:d7:8c:21:69:
89:ea:3b:e7:8f:3e:79:08:d0:44:f2:dd:c9:c7:ba:
33:09:0e:71:17:a0:f2:2a:b8:c7:5c:b9:2d:c4:ca:
d8:db:98:11:c5:25:41:0c:6c:36:56:7a:09:33:29:
68:56:2c:3f:2f:0d:2a:71:9e:f9:74:d3:b4:e0:15:
54:93:8b:95:37:f5:22:b3:4d:e7:b9:48:c6:fe:1f:
20:c5:b0:1a:0c:4e:b8:f2:a0:70:c4:3a:98:65:28:
f6:3e:d4:dd:57:81:3f:82:9a:4c:02:4e:55:b8:24:
9a:2a:98:3f:c5:3e:69:fe:37:4a:63:2a:7d:2a:ac:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:2F:B4:1E:3D:7D:C6:66:4A:7E:D6:B1:46:7B:B9:1D:A0:84:F6
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:e5:aa:2e:c4:c2:70:50:8c:85:18:32:b4:63:70:07:c4:
10:fb:83:01:df:77:84:d6:7c:5a:a5:ea:ff:ae:d2:ea:2f:dc:
c5:c2:74:36:aa:a2:17:12:1b:b8:0a:df:e1:6a:0e:a0:3e:40:
c9:02:f3:03:2c:cb:65:22:8f:8c:c5:af:94:45:13:bf:0c:a7:
84:5c:68:d4:2f:5b:4d:c5:4c:4e:8b:fd:ca:16:a0:c5:59:0a:
96:ec:f2:f2:9e:a7:55:75:74:91:6e:7d:3e:da:3d:d1:62:21:
03:31:4e:8a:20:b5:b7:24:de:0e:91:10:16:d3:29:fd:18:4f:
62:09:9e:32:a1:f7:a4:3a:bc:92:10:ae:1f:78:7d:bc:0a:df:
07:e7:34:4b:7b:f1:2e:9e:64:ce:a2:d2:9a:88:cd:7a:45:1e:
61:ed:79:ff:5c:47:ae:f0:cd:e2:34:6f:4e:1b:9b:fa:ab:72:
fc:87:cd:41:a8:fd:e5:65:66:36:ab:25:8f:e8:f2:f4:df:c9:
fb:21:2d:26:bb:52:dc:2f:77:91:f5:9d:27:56:73:dd:3a:dd:
16:57:ab:f9:e9:1b:0a:e1:7e:de:4d:42:a5:4e:d2:3c:7c:f6:
85:7b:91:a9:55:c8:d9:62:94:cf:ba:26:90:37:d4:ab:60:02:
ae:ea:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:08:10 2025 by rpki-client