Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: BPcoQtfnIYmZ1bAbN50WseBFXIhu9JBBKbzvODfbAjQ=
Subject key identifier: 3C:C7:11:19:2F:4D:BB:0C:8D:48:B1:4C:C4:EF:D1:F5:FE:6C:F2:21
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 0197470BAA0FFB231CD48683A9A1A6A5482E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 21:00:36 +0000
Manifest this update: Fri 06 Jun 2025 21:00:36 +0000
Manifest next update: Sat 07 Jun 2025 21:00:36 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: FhG148ZdZgvTEKYgUUulCVTBHt4Go68e+fJPloBvNsk=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:aa:0f:fb:23:1c:d4:86:83:a9:a1:a6:a5:48:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jun 6 21:00:36 2025 GMT
Not After : Jun 7 21:00:36 2025 GMT
Subject: CN=3cc711192f4dbb0c8d48b14cc4efd1f5fe6cf221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:bc:98:7c:86:e1:b8:e3:7d:25:9b:f5:32:
09:a9:99:82:8c:0a:3e:bf:0a:03:bc:b0:76:ec:01:
63:3b:5c:ba:f7:5e:ca:a6:43:84:3c:94:a1:63:54:
f5:3b:c1:f2:b3:a2:dc:4e:a7:17:81:e5:cd:c5:95:
26:76:03:78:99:0f:96:c1:ef:1f:7c:f4:f4:f6:44:
3d:73:de:06:ff:03:f7:9c:b2:1b:fe:33:c9:5b:b6:
ac:8f:0f:9e:7f:96:36:2a:93:7d:67:5b:48:3c:de:
fe:b0:e1:ad:11:83:fe:32:51:5d:c6:9a:cb:c5:12:
3e:f8:31:1f:b2:27:da:67:f9:f7:d9:9c:7a:2f:49:
f3:e7:93:fb:35:05:90:4e:32:a8:b4:3b:e7:08:13:
58:5c:c7:ea:81:fe:ed:bf:a2:09:b5:29:bf:a6:ac:
4d:83:58:11:a2:50:55:52:40:8b:8a:cf:b0:9a:79:
4e:e8:ae:d4:b8:65:db:3c:69:03:75:01:81:81:a6:
85:52:3a:12:ec:7e:e4:5c:bf:10:e3:00:47:dd:14:
b6:9e:b6:62:93:fd:6e:56:b0:18:26:5f:f1:0b:0c:
9e:2e:9c:6c:ab:b8:c9:6e:bb:f5:fc:08:20:7c:0e:
86:eb:ee:f6:ae:3e:2b:ef:29:e5:27:96:dd:65:25:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C7:11:19:2F:4D:BB:0C:8D:48:B1:4C:C4:EF:D1:F5:FE:6C:F2:21
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:dc:48:37:35:06:a9:38:cc:b4:8e:89:05:63:67:b0:41:
fb:fc:e8:d6:a8:f6:66:d6:3e:70:61:fa:b5:62:e6:70:3a:e7:
1b:9c:71:0a:90:11:0b:21:64:f4:2b:ad:23:69:f3:f7:1a:44:
58:38:b0:3f:c8:76:4c:9a:0b:4f:60:ff:37:f3:69:2a:3e:93:
c9:01:64:48:8e:d1:f9:30:5b:c4:72:19:b2:a0:61:43:6b:1b:
60:01:ae:97:2b:79:91:2f:87:7a:4b:4d:b6:15:2c:11:89:a3:
5d:dd:eb:bb:69:74:7c:e9:81:01:e0:8e:b2:b9:30:77:ad:a6:
60:b6:69:cb:7a:12:30:d0:9d:a3:ac:69:e7:36:4a:3f:c4:e6:
35:29:8b:ef:82:aa:af:18:00:41:47:18:84:b3:7e:56:7c:9e:
e3:4d:a5:24:ed:89:3a:d1:5b:70:af:a0:9a:5a:6e:18:52:76:
a8:43:f6:4e:f4:a4:b2:ff:2f:99:24:67:6f:b0:65:f2:f2:0b:
5c:34:3d:6e:35:9c:5b:09:a6:07:95:d2:a7:47:cc:bb:34:7a:
0e:4c:ac:5a:3c:29:22:c8:44:c1:f3:d2:80:80:19:08:0f:d7:
a7:5a:68:7b:52:a4:12:61:b2:ab:fb:f8:74:cb:92:ef:3a:02:
0b:aa:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:21 2025 by rpki-client