Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: Cxh6OPkk74AB+n9nUOi5sYBNl3sm6Lhc8CwlhzBevM8=
Subject key identifier: 48:61:7F:1C:C8:78:32:2C:98:47:3D:3F:FE:FF:89:23:49:67:68:7C
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019748C3131A53FCE0E7296BC3C83A0845C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:33 +0000
Manifest this update: Sat 07 Jun 2025 05:00:33 +0000
Manifest next update: Sun 08 Jun 2025 05:00:33 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: LcJ5Fk2Exb+aB6b62K7rVQ/0jrLn3+SSJXq+GpdexSk=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:13:1a:53:fc:e0:e7:29:6b:c3:c8:3a:08:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jun 7 05:00:33 2025 GMT
Not After : Jun 8 05:00:33 2025 GMT
Subject: CN=48617f1cc878322c98473d3ffeff89234967687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:b2:79:a2:71:bd:c8:9f:86:d4:b5:26:49:
4e:9f:ae:66:c8:d8:ad:c9:86:a7:c5:28:7c:b1:01:
21:f6:63:53:13:03:7b:34:51:73:28:cc:c5:56:9c:
d8:b6:d0:30:56:cf:46:7e:92:fd:6a:a8:71:6f:07:
c4:86:b3:ec:2b:c0:b1:1a:b4:80:2d:6d:9e:28:30:
89:b9:23:8e:0d:c4:65:a9:3a:19:96:38:7a:a2:fb:
37:a0:7e:fa:33:1e:25:a7:73:89:25:27:37:aa:6d:
73:01:9c:62:37:c1:3e:8e:da:86:52:32:5b:db:e0:
d0:f4:7c:30:9b:f6:41:f8:09:41:a9:a7:15:39:54:
7b:9f:39:5a:3d:3a:bb:0f:d4:82:cf:29:2b:70:bd:
8a:fa:8d:5c:c1:ce:b0:88:03:43:d3:69:b9:01:2b:
75:45:0a:0d:2a:35:d9:6a:d4:82:75:ab:64:9f:76:
f3:6c:3d:7e:21:79:44:b5:d4:da:f6:38:5d:75:bf:
be:4e:22:a9:b1:49:1d:9b:1b:38:6c:93:8c:f4:41:
7e:df:0d:99:d0:0a:0b:ab:d5:90:f3:90:ec:44:7a:
6c:f0:fd:82:62:9e:02:12:da:8c:f8:40:cb:33:da:
0b:29:01:62:d8:72:9a:94:dd:4b:f6:bc:34:aa:5e:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:61:7F:1C:C8:78:32:2C:98:47:3D:3F:FE:FF:89:23:49:67:68:7C
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7e:db:5e:5e:eb:97:c1:4f:3c:67:aa:b5:c0:ed:60:7f:8a:
3d:13:a9:7e:ad:96:b4:1a:14:7f:ef:f6:1b:2a:d2:1b:8a:5e:
f9:7c:e6:de:93:69:0a:d2:7b:5c:65:57:29:ba:a9:e8:52:f5:
8c:ed:af:e5:8b:e4:9f:ae:59:6d:9b:4d:71:60:68:fd:55:54:
3e:55:8c:89:10:3a:04:aa:22:cf:af:76:af:b4:94:ff:02:07:
81:27:28:55:a9:97:5d:e5:e2:3b:04:f7:f4:b8:3a:5f:23:30:
80:4f:1c:a4:dd:d4:7f:97:08:e2:de:14:fa:fa:74:aa:2e:1f:
4b:0d:b3:dd:ee:98:d3:5f:a0:5b:ec:9e:6b:15:fe:96:e0:96:
ea:80:0e:f3:6e:d1:88:97:c4:de:3e:1a:27:71:b2:aa:50:c6:
05:48:72:4b:fd:aa:10:df:98:57:61:44:56:26:fd:40:ca:e1:
95:37:7b:8b:c7:cb:e3:d3:e3:ec:b9:fe:20:e7:40:1e:ef:4a:
76:8d:2e:45:4d:81:d1:cc:d9:a9:6a:5c:2a:a1:ad:29:e5:9e:
73:d8:2a:c0:2d:21:50:bf:d8:91:27:cf:d6:d7:8d:f0:0a:1f:
30:8e:ac:31:45:87:81:95:7c:5b:ff:c6:65:c8:86:68:d4:46:
91:d2:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:46 2025 by rpki-client