Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: T0LXnNIR7I9m5Bl20tm0bLpu7sAHTrDpfygKU4d6Uxg=
Subject key identifier: D8:21:69:9E:3F:62:60:AB:34:77:F4:34:08:D2:F3:E3:3B:F3:FE:97
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019776E52D33138D5E181B9F2A8E345267BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 0497
Signing time: Mon 16 Jun 2025 04:00:19 +0000
Manifest this update: Mon 16 Jun 2025 04:00:19 +0000
Manifest next update: Tue 17 Jun 2025 04:00:19 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: AvCx7kUpc+Kh0w5MKqkDukUw8MaWfDBdF9J9av6Y1HI=)
2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:2d:33:13:8d:5e:18:1b:9f:2a:8e:34:52:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Jun 16 04:00:19 2025 GMT
Not After : Jun 17 04:00:19 2025 GMT
Subject: CN=d821699e3f6260ab3477f43408d2f3e33bf3fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:98:05:fb:2b:78:8e:66:e6:84:11:08:44:
b4:1f:1c:3c:28:b9:3a:68:a9:b2:75:2d:27:23:ad:
17:a8:8a:d1:fd:5d:c2:d5:4c:45:34:12:fd:36:de:
ee:32:ee:e8:4e:21:95:de:57:28:a9:ce:89:9e:70:
2a:14:27:5b:a6:50:c7:05:e7:09:ca:db:29:53:28:
2e:57:61:d8:e5:f6:96:62:51:92:f9:c9:93:84:9d:
a5:92:47:32:16:d6:35:f0:61:80:45:17:36:01:ee:
2d:3b:7f:81:ec:6e:17:e6:cd:ec:59:61:54:fd:df:
79:01:67:f7:ec:54:86:18:bc:f8:0d:c1:53:53:8c:
ec:f5:4b:2a:7b:9c:df:cd:79:59:af:65:a5:76:66:
04:5d:58:8e:de:c2:91:3e:a9:44:54:13:9d:89:97:
58:0d:d0:f5:32:2f:59:7a:e4:b3:7b:c4:a4:18:72:
28:7f:bc:a7:a7:7f:00:d6:20:b7:7c:6e:c8:8e:71:
e7:c2:9c:a8:04:41:46:99:2f:ec:e5:15:f0:01:68:
40:16:be:71:a6:63:d0:86:a9:cf:36:ce:60:ff:65:
d6:de:5d:7c:c5:03:d8:53:c7:cc:73:69:80:8c:77:
b3:2e:61:c8:97:96:30:55:dd:cd:d4:03:08:2a:f9:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:69:9E:3F:62:60:AB:34:77:F4:34:08:D2:F3:E3:3B:F3:FE:97
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:5b:16:42:91:ee:a9:17:cb:6c:d5:79:2e:c5:cf:e9:a8:
ac:07:97:27:6e:6c:67:7b:e1:d7:56:ce:ad:3f:f5:50:84:8d:
62:cc:bd:a0:6f:14:5a:b0:c8:fb:22:a4:84:f8:4c:e6:f9:47:
0a:b9:0e:36:bd:16:1f:e3:4d:5e:3a:0d:bf:e7:fe:fa:0b:7c:
d8:9e:6e:c2:a8:c9:3e:4b:62:5f:95:a4:73:db:7f:66:a0:ae:
fb:12:91:fd:2c:08:7c:81:f0:25:cd:2c:27:cb:27:1f:7a:ce:
f9:74:68:07:df:2f:c5:04:70:5a:36:a2:fe:b0:d6:1b:bd:64:
87:58:da:03:4c:94:30:33:44:f2:5e:b2:98:16:b5:04:12:df:
37:da:ae:69:0b:48:f7:a7:8f:03:4d:4a:c8:99:ab:08:a7:45:
dd:81:8a:74:e4:87:ef:25:68:44:2c:70:0e:19:41:83:6e:11:
91:0d:6b:82:3f:85:06:cb:99:4b:9c:5e:8b:6d:76:e3:4b:24:
fb:c1:28:20:d4:4e:2d:82:52:de:e8:73:7d:a5:d5:75:bd:22:
f7:d6:34:a4:1c:15:62:6b:56:7b:d5:39:76:f1:4d:0a:22:22:
ec:33:f1:27:09:4e:34:8c:3e:d1:59:b0:e1:2e:4f:03:46:e1:
86:e4:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:14:24 2025 by rpki-client