Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: v2Yqwy0NzQeevEGKCuDbKiG5VRF6W7xZ3l3q/HOolzQ=
Subject key identifier: 51:26:14:CC:76:E5:DF:E5:34:E5:2B:CD:AB:AC:B6:D3:B8:B6:67:3F
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 01977865FE308D1D284594C57E141CF4A9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 11:00:39 +0000
Manifest this update: Mon 16 Jun 2025 11:00:39 +0000
Manifest next update: Tue 17 Jun 2025 11:00:39 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: YS/Gzn+vI53Upag+VmblDbkoCVbn+76b3cv5XsZFsAo=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:fe:30:8d:1d:28:45:94:c5:7e:14:1c:f4:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Jun 16 11:00:39 2025 GMT
Not After : Jun 17 11:00:39 2025 GMT
Subject: CN=512614cc76e5dfe534e52bcdabacb6d3b8b6673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:75:07:de:fa:3f:fe:48:ca:2c:d5:a2:fa:
22:9e:16:34:c8:ca:56:99:93:58:17:36:92:60:88:
67:88:9f:7c:39:50:b9:be:71:df:23:3b:3f:c6:8f:
3b:90:e7:79:c2:6e:c9:06:b3:82:4e:c1:ed:09:0c:
49:73:6f:4d:60:ae:64:d8:21:af:b6:1d:79:83:a3:
44:b4:ec:46:61:31:ac:28:d3:b6:b4:70:f9:d5:ed:
b3:54:53:1a:95:11:da:94:5e:e9:83:07:7a:6d:69:
58:45:b2:f2:b2:3b:9d:5a:c3:e2:c7:14:1f:73:73:
43:01:e3:3b:6d:fc:e9:82:73:3b:c0:92:b1:ae:0e:
70:ea:50:58:9c:73:7c:1a:a6:0a:3f:7e:b5:93:a3:
e0:68:bc:81:a7:67:9e:7e:48:91:fd:58:43:44:76:
32:9d:c0:a6:9c:f4:d9:5c:c4:ec:03:e8:c8:b4:c8:
44:3f:b9:51:0e:59:23:c9:27:bc:b3:b4:88:a4:d6:
9e:b0:52:87:a3:eb:9b:c9:47:9f:71:00:41:68:44:
06:12:03:2f:86:06:fa:69:99:1b:92:17:51:37:09:
35:31:e8:18:07:be:3b:df:12:37:d2:1e:12:12:2a:
6c:7c:b4:59:b2:7a:f3:04:d3:c5:9e:37:6f:2f:43:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:14:CC:76:E5:DF:E5:34:E5:2B:CD:AB:AC:B6:D3:B8:B6:67:3F
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:e5:29:2f:1f:53:68:2e:7d:8d:6c:cf:12:3f:ed:57:a8:
c4:33:d8:bc:16:aa:a6:41:af:e7:a1:b4:64:9c:e9:8d:bf:8e:
28:9d:15:cc:72:9f:59:db:74:69:1b:aa:86:3b:76:21:b3:f3:
71:2a:0b:87:27:e3:90:59:83:5c:fd:bb:5a:2e:8b:ce:d6:32:
ed:55:6d:77:9a:25:a2:1f:60:47:d9:d0:a6:ea:27:68:48:37:
a3:39:2f:4e:9e:cb:38:31:25:bc:f8:65:86:89:81:bb:46:c8:
b4:95:b9:9b:e9:07:73:33:01:6b:d3:4e:92:c9:aa:54:49:da:
e6:d2:e3:f3:8f:4c:7f:48:ab:a1:b0:71:84:92:4d:06:2e:2f:
d6:5d:53:b4:b4:9a:61:3c:09:75:b5:5c:c8:22:90:c6:d1:7b:
a6:38:82:35:17:2f:8c:21:00:c2:24:40:50:e5:a1:0b:40:fd:
74:ae:f2:b9:21:12:88:8e:ca:4d:f5:f0:52:7e:2c:2b:cc:1c:
fa:83:4b:95:ce:8e:8d:e6:2e:09:e7:0f:45:c9:c7:03:45:48:
4b:15:4c:1d:6f:af:c0:69:68:34:7b:5e:ed:65:83:ad:f6:8c:
48:59:a6:70:ba:66:15:af:e5:a1:48:41:9e:9d:9e:bb:ef:e1:
18:54:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:25:47 2025 by rpki-client