Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: 6ArG/Q7NJRY8S6cB9PxB/nYpe0aUD14gofybMogTOh4=
Subject key identifier: 10:00:30:1C:27:EA:44:91:89:0C:6A:71:B5:0A:03:73:76:09:01:85
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 0197868F2538FF18146462306F1AD03D0DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 05:00:17 +0000
Manifest this update: Thu 19 Jun 2025 05:00:17 +0000
Manifest next update: Fri 20 Jun 2025 05:00:17 +0000
Files and hashes: 1: 7lZV2ikXSn1leCy9JVthXv0dDRw.roa (hash: KGZRr2d4Ylo5EtwkQy4v0KYV8IVaaAhpVSXxUr8x4yo=)
2: HRxI47MJmPRRcZuvobrot8euLTA.roa (hash: A/IWoERrDN0mR2hexd+6zlTgeLvRzHoqb7ZrQlTFoGM=)
3: K0e97lq8to45G4bjAY8oagFU4QI.roa (hash: bTG+6EZ7O3xegYBqouKDHymp2EvAOOtKRJXkBxvyI8c=)
4: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: IxBqAVYUa9esMYEXzwdobH9X472OfdM9oxBEMLioEJQ=)
5: P33SSWlpyqijB0gHEOLaoCaM5OM.roa (hash: 7b5pymjGWkYqf8q+lDaj/5SKIALqOGUwKbQhUuKpSQo=)
6: Y_jo-YJu2PbRSOLAQ7xTf_r0vtA.roa (hash: QUNrldTiuNEx4ojoaKc5e0ZjUX5UdNXjzYCNRvPqGvw=)
7: p97Avl9nV3Nx0i1w45Yl3T0oKzg.roa (hash: ZPQA4d87YOhKqcuAke+P/kmc4CIdEE6HBQuGK1D7QA0=)
8: zIC946FC0tsOsf4Kuz2japvLyHo.roa (hash: /WiTcC8LPqyGnuHmvDEdj47rRpjftzM8GAt7AZLlAmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:25:38:ff:18:14:64:62:30:6f:1a:d0:3d:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jun 19 05:00:17 2025 GMT
Not After : Jun 20 05:00:17 2025 GMT
Subject: CN=1000301c27ea4491890c6a71b50a037376090185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:69:1a:e0:d8:30:b0:d5:fa:dd:0d:7f:54:
b6:6d:fb:98:76:9e:9c:f7:cd:4b:03:be:60:fe:f3:
53:97:26:b4:72:34:32:8c:bc:38:92:34:db:9d:2e:
11:9e:ba:e0:75:e2:06:e2:d2:6d:7e:3c:57:bb:54:
44:8f:cf:56:4c:6c:73:c6:56:9c:b1:e9:10:93:51:
11:3d:c6:a0:30:12:fa:ba:c4:ce:95:bf:c7:2f:ec:
68:c1:f6:e1:03:6a:ac:a0:73:85:4f:d6:0e:81:fa:
4d:8e:b1:8f:1c:7e:f9:7c:d4:6a:c8:9c:5b:ab:f1:
f0:e0:11:83:86:14:e7:df:ca:0a:f5:0e:6b:26:a9:
ae:58:1f:33:f5:0d:10:69:df:17:b1:f7:5e:c5:bb:
46:d4:09:b2:1e:1d:8c:4e:5a:c5:5c:c3:22:d5:89:
6b:e6:54:40:6d:ec:2f:dc:b0:52:1a:d4:50:7b:92:
d9:99:fe:99:58:0c:74:fd:18:52:af:ef:27:da:a5:
bd:d9:fd:5b:e9:9f:eb:b7:d8:7f:be:09:0f:94:0a:
5e:d5:39:4d:96:51:35:48:de:bb:68:a0:95:3b:30:
bf:09:c1:70:71:89:a3:94:c0:ef:5d:55:5d:13:fe:
81:f9:78:97:c7:90:11:92:d4:6c:4e:e5:8a:c2:f3:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:30:1C:27:EA:44:91:89:0C:6A:71:B5:0A:03:73:76:09:01:85
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:0f:7b:6d:8e:4c:93:ea:66:69:38:22:fe:1f:64:c0:b1:
78:60:9c:a3:3a:32:42:69:4a:82:e6:43:3e:dc:3f:ea:42:54:
22:1d:af:1e:b0:da:9b:1b:74:2e:19:93:2d:ea:22:d5:51:6b:
ad:29:f6:f4:d7:d6:48:d5:ea:84:76:d3:51:f0:0d:71:b8:3e:
40:d6:63:81:40:e6:a6:44:9b:08:22:d8:3b:f7:70:78:d1:ed:
ef:eb:7f:4b:b2:22:94:fe:99:0d:10:86:a6:ad:c3:a7:45:4f:
2c:89:aa:52:a2:77:b0:29:b9:c1:64:46:3a:e3:18:05:9d:a3:
ad:64:43:73:30:c1:72:39:ff:f8:7f:f8:a1:3d:a0:24:e8:3d:
8e:24:4a:a3:62:89:f9:ec:89:74:2c:67:e5:f4:05:f6:64:7b:
7f:e1:5e:d1:32:8b:f0:4b:9b:20:9f:33:73:29:c5:8f:bc:f4:
3f:14:1f:06:75:25:6c:f6:5a:19:ec:32:c3:b2:e8:32:bb:2b:
b2:ce:17:42:82:3c:df:0c:56:4d:9c:ea:32:49:39:46:26:9a:
67:d2:01:56:8d:4f:d0:d6:de:65:fc:26:c6:fe:f5:6c:03:e8:
e5:3d:59:98:5c:2e:50:dc:91:0b:39:c0:2e:62:19:8b:ac:9e:
03:b9:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:57:05 2025 by rpki-client