Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: aTnaA7mhdbnvVtpw/Uyj/Lgwn+8yn13WJ05wyro2BpI=
Subject key identifier: 3A:33:72:30:52:FF:12:0F:8F:2C:4F:34:70:3A:BA:88:7E:29:C6:D1
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0197771C6460519C3462C246E98F374A9F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0414
Signing time: Mon 16 Jun 2025 05:00:38 +0000
Manifest this update: Mon 16 Jun 2025 05:00:38 +0000
Manifest next update: Tue 17 Jun 2025 05:00:38 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: GevVKDa7jw6ICg69t3CYiBZzDLW+KqzjOD6IrP7Cb9c=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:64:60:51:9c:34:62:c2:46:e9:8f:37:4a:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Jun 16 05:00:38 2025 GMT
Not After : Jun 17 05:00:38 2025 GMT
Subject: CN=3a33723052ff120f8f2c4f34703aba887e29c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:01:4a:88:ce:71:72:08:a8:f6:15:79:39:
95:8a:14:11:ea:b5:b8:40:55:b5:23:f6:f0:49:90:
85:ee:13:03:80:30:73:3b:37:41:aa:77:a1:cc:ab:
e3:be:a6:6e:66:2d:08:08:e9:85:0e:3a:65:af:6d:
74:d9:13:56:d5:e2:12:9f:80:3d:da:49:42:91:35:
43:39:72:8e:85:e8:d0:24:b5:66:64:6e:5d:e8:7f:
57:a3:36:92:2e:42:ac:c7:ed:9d:e8:69:b6:9c:e8:
a8:9a:cc:71:56:b7:01:3e:84:f2:c2:0c:a8:d6:ee:
d2:77:35:d6:3b:02:44:dd:e9:d0:04:5d:b6:4a:d4:
84:3d:1c:48:82:af:7b:dd:7f:9c:16:bd:74:1e:9d:
81:14:9f:86:3e:e7:4f:0c:e3:a9:c3:9d:bd:bc:02:
11:c4:96:0c:97:a2:57:09:4a:dc:fe:47:16:7b:79:
61:32:6a:29:61:a8:b6:f6:7b:c1:4d:04:aa:0d:ed:
8d:9a:95:d6:4c:9c:70:ef:d8:1e:50:a9:7d:66:78:
75:95:6f:88:45:c2:77:ae:c7:6a:1b:d3:de:87:ac:
3e:1d:62:be:fc:be:b9:2f:8f:3b:b9:ef:08:7f:c7:
41:88:ea:61:d0:bf:12:82:5c:d6:d8:4a:76:1c:84:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:33:72:30:52:FF:12:0F:8F:2C:4F:34:70:3A:BA:88:7E:29:C6:D1
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:21:9f:bd:3c:8f:6c:7e:26:d3:6e:3e:5f:14:e1:21:06:24:
6e:37:f5:b4:e1:f3:fd:f3:86:82:9d:41:fe:17:52:2b:1f:f2:
2b:e2:e0:11:cd:ae:af:9f:dd:fb:6f:33:aa:91:f5:15:40:9b:
21:74:6b:db:a1:89:3a:a6:59:8d:12:e5:95:b3:c0:49:29:e6:
2b:af:f3:27:06:c4:30:2e:97:7c:c2:10:86:ed:37:4f:fc:f2:
5b:42:e6:c7:6e:df:bc:cf:ee:47:b2:7b:07:31:de:8f:b1:ca:
df:8e:09:c9:fb:6a:b7:4e:66:10:88:4e:ab:2a:7a:d2:c8:c5:
cd:e0:ad:fe:4c:36:9a:9b:63:62:b8:d4:05:2c:50:09:06:ef:
d5:3d:b2:3e:1e:c4:a2:b8:9d:3c:6e:47:68:ef:8b:8d:37:bd:
f3:f0:a8:55:0d:d1:8d:e5:ce:cf:08:80:0f:24:61:e6:c0:2d:
39:ae:2a:5c:b9:f3:88:6e:2c:40:d7:7f:5b:ef:b6:5a:c9:44:
51:f2:13:32:9d:0d:11:b6:9e:4f:78:02:1b:5c:9b:f7:fc:48:
9d:c4:f2:22:6c:33:8d:73:13:e1:ea:ef:a5:1c:4e:3b:0d:8b:
5e:1f:4b:9b:47:e7:9b:6a:5c:96:02:d6:13:97:d2:5a:af:49:
ae:f1:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:48:49 2025 by rpki-client