Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: JKNz8+AXz6st0wEBWCj0FIqz1trZ0WeHgnjxRNbPj7M=
Subject key identifier: 40:37:24:DC:8F:D5:22:BB:7B:95:08:12:88:98:61:97:17:82:9E:D7
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 01976F62AC955B5E5827F74A472C837CF259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: y+JQUAeBQJRXIhMsSLP5ZW+SkWp7Z8TBlOsNegmD1KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ac:95:5b:5e:58:27:f7:4a:47:2c:83:7c:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=403724dc8fd522bb7b9508128898619717829ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:c2:5c:35:db:00:a9:2c:d7:56:3b:0b:d4:
2b:b5:55:b8:53:c4:a1:eb:bb:63:2d:31:5e:12:e4:
0c:14:98:ac:e8:96:9f:c2:0b:d5:be:ff:fb:ea:f0:
2c:1c:dc:49:b8:ef:83:14:c0:a4:55:17:ac:62:cf:
8a:33:29:91:8c:6b:00:f5:b4:10:3d:1c:ad:39:1b:
d7:07:84:43:f0:af:63:de:9d:b3:1b:fd:59:d5:19:
10:e4:d3:58:ef:03:7f:98:66:3f:bd:a6:10:e4:f5:
60:ac:0f:fc:2f:9c:1e:a3:15:a9:4e:56:f9:48:f4:
96:b9:cb:33:f4:88:04:00:2b:33:45:e7:03:7c:98:
f8:76:b6:2c:2a:57:57:90:18:10:51:97:b8:6e:03:
db:8e:10:f1:4c:fa:00:96:97:16:e1:96:33:67:22:
d5:19:89:e6:b9:cd:2b:f8:87:3a:fc:3d:39:71:c1:
92:42:fa:30:32:2a:a3:e1:26:b5:f6:dc:08:58:51:
c3:25:59:36:ab:23:c0:58:67:ec:0d:2d:d7:6e:56:
5a:e7:9e:7b:68:0b:61:b1:ea:0b:61:f2:99:3c:a1:
13:3b:b3:1d:db:3b:c4:31:cf:3d:fa:34:f6:e6:76:
f0:8f:53:95:48:19:f2:be:bc:2c:91:dc:18:cb:ad:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:24:DC:8F:D5:22:BB:7B:95:08:12:88:98:61:97:17:82:9E:D7
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:b0:a7:ed:29:7e:d1:f1:54:9b:61:a9:9b:5e:3b:ec:20:
f7:83:69:7e:58:81:0a:a9:5f:93:fd:3a:78:b4:85:31:3a:63:
4e:b0:eb:14:ca:42:e7:ab:5c:dd:b9:eb:ca:b5:5f:a5:e9:8b:
2d:f5:01:fb:c4:a3:70:19:db:44:7f:3e:6d:97:c1:d9:86:ee:
60:61:9c:41:4d:14:9d:e6:25:af:ab:a6:37:a3:a0:ef:dd:1d:
4c:91:6a:61:5a:d9:2d:c8:42:b4:aa:11:9f:67:75:7a:07:84:
5e:33:b1:bb:5c:5a:d1:2e:06:59:e7:68:4a:0c:10:73:42:27:
71:bd:7f:04:31:48:04:c3:47:d9:6e:44:2a:5c:66:e5:05:59:
a0:62:ad:21:2e:72:b8:9b:17:c8:07:79:38:38:89:43:88:1f:
bb:0f:3b:8f:b5:dc:32:93:38:fa:48:23:d4:6a:7f:22:be:a0:
32:98:8e:de:25:dc:dd:18:72:eb:81:40:74:9e:2b:23:7b:64:
33:e7:31:53:87:9f:e4:98:e2:dc:e7:73:6c:38:84:df:64:c4:
3b:86:52:01:d3:66:60:fe:6c:fd:9b:76:b2:ba:74:07:40:17:
0a:4a:38:5d:0c:c0:06:93:fb:52:cb:dc:a5:b3:e6:b1:42:a3:
5e:6d:7a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYqyVW15YJ/dKRyyDfPJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw
NTQ3OTYwHhcNMjUwNjE0MTcwMDI3WhcNMjUwNjE1MTcwMDI3WjAzMTEwLwYDVQQD
Eyg0MDM3MjRkYzhmZDUyMmJiN2I5NTA4MTI4ODk4NjE5NzE3ODI5ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0HCXDXbAKks11Y7C9QrtVW4U8Sh
67tjLTFeEuQMFJis6JafwgvVvv/76vAsHNxJuO+DFMCkVResYs+KMymRjGsA9bQQ
PRytORvXB4RD8K9j3p2zG/1Z1RkQ5NNY7wN/mGY/vaYQ5PVgrA/8L5weoxWpTlb5
SPSWucsz9IgEACszRecDfJj4drYsKldXkBgQUZe4bgPbjhDxTPoAlpcW4ZYzZyLV
GYnmuc0r+Ic6/D05ccGSQvowMiqj4Sa19twIWFHDJVk2qyPAWGfsDS3XblZa5557
aAthseoLYfKZPKETO7Md2zvEMc89+jT25nbwj1OVSBnyvrwskdwYy62mOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA3JNyP1SK7e5UIEoiYYZcXgp7XMB8GA1UdIwQY
MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt
NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz
LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4Wwp+0p
ftHxVJthqZteO+wg94NpfliBCqlfk/06eLSFMTpjTrDrFMpC56tc3bnryrVfpemL
LfUB+8SjcBnbRH8+bZfB2YbuYGGcQU0UneYlr6umN6Og790dTJFqYVrZLchCtKoR
n2d1egeEXjOxu1xa0S4GWedoSgwQc0Incb1/BDFIBMNH2W5EKlxm5QVZoGKtIS5y
uJsXyAd5ODiJQ4gfuw87j7XcMpM4+kgj1Gp/Ir6gMpiO3iXc3Rhy64FAdJ4rI3tk
M+cxU4ef5Jji3OdzbDiE32TEO4ZSAdNmYP5s/Zt2srp0B0AXCko4XQzABpP7Usvc
pbPmsUKjXm16uA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:21:14 2025 by rpki-client