Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: Q7dAO35h8vO9G/eENuU2cQUVetN8X2WcVjGWHXdUpNc=
Subject key identifier: 47:B0:B5:F1:5F:71:34:E8:7A:8A:98:D5:4D:51:DD:EB:31:5D:70:45
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019768F2AF0DE2F5362B7C7023E55B30A5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:24 +0000
Manifest this update: Fri 13 Jun 2025 11:00:24 +0000
Manifest next update: Sat 14 Jun 2025 11:00:24 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 0/yRMxdFsfoUWmhAtWmzIwg3nHd3+GYY/OxND6rRUw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:af:0d:e2:f5:36:2b:7c:70:23:e5:5b:30:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jun 13 11:00:24 2025 GMT
Not After : Jun 14 11:00:24 2025 GMT
Subject: CN=47b0b5f15f7134e87a8a98d54d51ddeb315d7045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:57:71:04:1f:bf:ff:48:49:e6:ba:14:e8:
e2:b4:7b:a8:e1:f3:48:55:bd:6c:b1:e4:35:9f:18:
c4:8d:56:e1:bb:37:11:0f:b1:05:2a:a0:4c:f8:f9:
d7:7e:e9:ee:ac:bc:15:92:e7:ee:20:ba:c1:2e:42:
d5:73:77:ee:21:e0:39:18:ca:51:cc:1c:7c:0f:97:
41:98:4f:19:30:b4:06:30:e2:0b:e8:72:9f:7a:0c:
d9:20:c0:ef:04:fb:bd:e3:92:50:35:c8:b7:a8:1a:
27:a6:21:6c:5c:9b:a7:f5:2d:fa:cb:fc:3c:71:75:
f4:44:18:f0:b5:6c:90:f3:a8:87:63:f6:24:13:5e:
ee:65:6e:fa:4a:71:3a:19:ad:20:f1:45:15:1f:7d:
2c:0b:88:3d:5d:ee:34:34:0d:4c:c8:fe:92:0f:a7:
b8:f3:d6:fc:ba:48:0c:7d:67:19:68:5a:93:52:de:
45:5a:9d:2d:51:fe:a2:be:46:8a:a0:91:21:24:19:
e5:52:4d:85:bd:0b:2d:54:a4:5e:1b:37:29:2f:4c:
4a:70:94:09:59:c7:35:31:30:3a:3c:24:93:28:14:
6a:8e:c7:19:03:57:bc:98:c6:a1:3a:f8:87:0e:9d:
83:ee:9c:6b:6f:22:aa:f6:dd:4b:39:b4:ff:e6:fa:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:B5:F1:5F:71:34:E8:7A:8A:98:D5:4D:51:DD:EB:31:5D:70:45
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:c9:d3:41:90:dd:66:4e:c6:1a:e5:d9:5d:19:35:2e:ac:
8f:3b:b3:ca:a9:7b:55:ae:cd:7d:2d:10:35:bb:d9:66:fa:6d:
c0:be:ff:23:34:8e:8d:71:06:e0:bd:36:36:40:5b:9a:bc:c6:
a1:33:67:32:a9:32:b6:f1:f9:57:23:79:4a:19:f6:82:9e:ed:
ef:b9:3a:d3:c1:11:9f:51:b6:01:6f:ef:7a:5b:e1:a6:43:eb:
7e:29:34:98:5f:2e:80:ba:61:e7:19:ae:6c:7f:fe:d9:70:b6:
11:6b:b9:34:77:ae:5e:4c:aa:2d:8c:b4:81:00:57:d4:90:ab:
41:39:bd:d2:02:21:78:a6:3b:4e:9d:df:53:3c:49:9b:6e:84:
7b:29:af:12:43:ee:51:43:3e:1d:a4:b5:0f:bd:05:08:58:54:
a2:5f:df:44:f6:9a:c5:e5:6b:bd:aa:53:e3:fa:fc:a5:83:2d:
e6:0b:2a:e3:e8:e6:c5:e0:0f:4e:47:cb:55:c6:1d:ae:af:89:
e2:08:ea:05:e8:89:85:52:b6:aa:86:f8:4e:90:84:1e:93:26:
3f:69:da:46:0b:8d:bf:01:74:71:8b:46:77:10:39:08:ff:28:
c8:c0:b3:47:80:ac:c8:11:64:7a:92:24:50:1c:13:d5:56:ac:
ed:20:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:43 2025 by rpki-client