Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: YOUHuc95VbozyJFR6QYpAh1aewUcc6/xHq8YFfVbxNQ=
Subject key identifier: 35:F9:5D:E6:DA:42:7D:DA:41:46:08:E0:4F:50:13:3E:10:54:26:30
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0197722CDDBEB21FACF6BC349AA4D05F5DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 06:00:32 +0000
Manifest this update: Sun 15 Jun 2025 06:00:32 +0000
Manifest next update: Mon 16 Jun 2025 06:00:32 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: 5Nupfs9W5evAlFMILH3XCwML1s8cyUFWGULj9nP3lCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:dd:be:b2:1f:ac:f6:bc:34:9a:a4:d0:5f:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Jun 15 06:00:32 2025 GMT
Not After : Jun 16 06:00:32 2025 GMT
Subject: CN=35f95de6da427dda414608e04f50133e10542630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:5e:1f:b5:19:27:b9:4f:42:ed:f1:9d:44:
9a:76:36:08:d5:bf:32:38:1c:75:0a:b6:d4:17:d8:
0a:48:de:ad:ef:34:24:c1:a2:74:00:a6:f1:c7:4a:
c2:cf:27:f9:df:6b:6b:db:d3:d2:54:b5:ce:92:46:
10:2b:ec:21:eb:66:b5:51:f2:8b:10:23:c6:c0:ae:
bf:63:b4:c6:13:b1:65:32:e8:8b:16:47:79:6f:ce:
47:8c:89:2e:31:36:55:37:e5:70:d3:35:c4:7a:91:
0b:6d:c0:2e:e1:81:8a:9b:cf:53:38:0c:f9:b0:c6:
9b:ce:00:9d:52:d6:9e:1e:70:bf:99:6c:9c:3b:a2:
1f:cf:34:0f:73:2b:c4:b4:21:2a:22:6c:75:91:07:
a0:f0:16:0b:6f:8f:7d:3f:62:3a:75:dc:06:0b:cf:
76:9b:7e:29:e9:8f:3e:65:15:95:c1:b1:48:ee:dd:
b2:5b:81:c4:5a:f0:1d:3d:e8:63:7c:e8:bf:a7:df:
a1:3e:41:08:f8:82:36:79:82:85:a8:bc:5a:6d:11:
d1:3a:19:0e:9d:0f:2a:60:9d:27:db:c7:be:7d:d2:
f4:e1:df:cb:f5:6e:83:22:84:c0:4d:97:96:7a:63:
8d:15:10:13:f2:b7:8c:7c:9b:a7:52:b0:68:a5:32:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:5D:E6:DA:42:7D:DA:41:46:08:E0:4F:50:13:3E:10:54:26:30
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:48:5e:19:6d:3e:92:0a:42:98:ec:7b:1e:6d:39:bf:c7:d9:
17:32:ee:e1:19:73:48:3f:a8:b4:a6:e7:19:ea:a6:ed:db:3e:
cc:e2:31:80:44:bc:e7:2f:d5:b2:87:95:46:e0:49:0f:7e:23:
ff:6b:41:c7:88:5c:37:bf:8a:2d:99:c9:be:6a:d0:6b:e1:49:
cd:dd:c8:0a:bc:e9:cf:63:82:60:15:5a:0b:57:42:d5:da:29:
a1:7f:27:ad:f6:fe:cd:2c:a9:7a:32:85:04:dd:c9:26:e1:22:
11:19:d1:9a:2f:44:28:cb:2c:21:7e:1e:21:88:29:00:b3:39:
db:d1:05:42:84:92:1f:bf:17:05:97:41:80:86:4c:6f:ac:0d:
0d:99:db:9e:a8:a3:b6:fe:37:84:6b:02:7e:74:3e:6b:c7:29:
34:b4:60:37:62:81:f0:40:08:4b:d3:46:53:88:00:7e:f9:60:
b1:e1:12:29:dc:71:5e:30:4b:e3:0c:86:05:1b:44:e7:e2:87:
35:8c:fa:d5:f9:78:ff:63:16:65:9e:51:0f:59:b8:11:65:88:
31:bc:f4:d5:5e:2f:53:1e:49:a5:26:91:be:ee:be:f2:87:ae:
0f:6a:da:fd:f2:bc:d3:e7:31:00:a7:9b:00:fd:1f:fd:b7:10:
a7:d8:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:18 2025 by rpki-client