Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: FnwFMUGcLN9x4VM3EFq1c0BcgwakUW8zT6bK0MGAnjE=
Subject key identifier: DD:4C:43:81:35:BC:7A:AF:EC:2F:56:47:2D:77:9D:74:59:B3:E4:58
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 01974B563B7EF82D39BB7E0EFED3F47C57CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 17:00:31 +0000
Manifest this update: Sat 07 Jun 2025 17:00:31 +0000
Manifest next update: Sun 08 Jun 2025 17:00:31 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: n+SjLSSrIaRLHNBlfi8/gNLbryXVyUbFyimLuUWJsHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:3b:7e:f8:2d:39:bb:7e:0e:fe:d3:f4:7c:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jun 7 17:00:31 2025 GMT
Not After : Jun 8 17:00:31 2025 GMT
Subject: CN=dd4c438135bc7aafec2f56472d779d7459b3e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:98:e5:57:28:27:29:e1:54:a2:ea:f0:f9:
83:b8:83:9a:0b:a1:7f:a9:eb:89:6a:fc:03:e5:35:
e1:c1:b5:6e:4c:f1:65:f8:ae:32:3f:d2:86:37:83:
05:f1:3a:54:73:90:89:8d:87:49:00:97:71:07:3b:
97:6c:1b:21:e6:62:5a:cb:01:43:ce:28:eb:3f:8a:
4d:db:b1:0f:76:66:f2:15:bf:c7:56:77:4d:06:d5:
f1:bc:9a:d5:29:cf:d9:bf:2c:fb:2f:70:5b:ee:49:
18:9e:ab:22:ed:6a:d1:55:f5:a8:41:01:c8:ba:b6:
cc:08:16:54:ff:9b:2b:42:53:de:e2:9c:81:65:5f:
36:4c:7d:d2:98:67:66:32:35:d8:b4:ff:16:4f:61:
af:1b:fd:6c:f6:23:5e:ba:8f:a8:4a:c7:9d:7c:e2:
41:ce:ca:02:1a:b6:82:c8:5f:6f:cc:39:4d:be:f9:
7c:87:af:62:30:8f:dc:58:3c:55:dc:0e:d2:92:8c:
d6:aa:26:e2:58:a9:21:76:2e:9f:23:48:41:13:fd:
4a:2b:ac:b7:d1:84:e4:42:f0:c1:23:23:48:25:e7:
d2:2e:73:ba:8e:12:80:a7:c3:a5:49:3f:14:d6:a9:
de:37:c7:42:2b:8e:a4:ac:24:24:64:f7:82:87:e5:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:43:81:35:BC:7A:AF:EC:2F:56:47:2D:77:9D:74:59:B3:E4:58
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:9a:74:38:b0:ad:8c:b5:f6:71:36:55:98:d6:0c:60:0d:
4d:49:c9:79:b4:5b:49:9d:0f:9c:d5:cd:e3:2d:8e:10:bd:00:
32:b6:90:9e:5c:20:9b:8c:07:7e:12:39:e1:aa:b7:0b:fc:aa:
22:10:f1:ff:ff:68:2e:6d:19:91:3b:ed:f8:25:cc:c8:e6:8a:
9c:61:d6:c1:7e:8c:26:99:15:2c:5c:19:29:37:03:bf:9c:b2:
00:ac:47:5b:b8:48:2f:1d:08:bf:43:16:02:2e:e3:93:8f:00:
dd:a7:55:71:fd:8f:a6:a4:c5:24:94:a6:f8:c0:a0:11:88:12:
e2:d1:3e:ae:4c:b1:ab:fe:e0:85:97:2b:7c:ff:41:50:27:99:
28:d2:f7:a1:c9:0b:5a:77:8f:1f:36:76:e7:fd:c6:93:48:59:
03:73:a9:55:c7:ac:21:61:33:ad:3d:f5:45:bb:19:49:b5:6a:
19:ae:a6:69:b8:ee:7b:42:c4:de:f2:5a:47:04:e8:2f:90:27:
9e:04:96:d5:5d:9c:e4:9d:21:79:eb:88:4b:64:e4:0f:d1:40:
91:9d:7e:1f:41:96:1b:30:11:23:dd:e6:33:bd:e4:15:35:d3:
1c:42:f6:2a:cd:48:73:27:9d:cf:05:41:26:00:8f:4b:96:bc:
17:64:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:33:33 2025 by rpki-client