Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File: NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier: tXa1ExFOU+4fH58oWIr04rABdkBAL+HtHkK+94edayk=
Subject key identifier: 18:AE:85:B8:10:A7:B3:EB:26:6D:87:B0:01:03:19:57:AE:7D:88:74
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer: /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial: 019786C668708B08E2A0391D8DDCEE192C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 06:00:39 +0000
Manifest this update: Thu 19 Jun 2025 06:00:39 +0000
Manifest next update: Fri 20 Jun 2025 06:00:39 +0000
Files and hashes: 1: G75hDgiyd2LwDpJ76o2-U8H3uNQ.roa (hash: S5OSLsFsbCnXpNSoGI0qFyRFbDiGy+ql70CMoNWtluw=)
2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: xgzGigM0l5/JOQbTg9sLDm1gtnBNS5Hr7S2fNQM5J9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:68:70:8b:08:e2:a0:39:1d:8d:dc:ee:19:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Validity
Not Before: Jun 19 06:00:39 2025 GMT
Not After : Jun 20 06:00:39 2025 GMT
Subject: CN=18ae85b810a7b3eb266d87b001031957ae7d8874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:7e:3e:9c:7b:f8:9a:15:10:09:9b:c4:dc:
88:2f:71:c0:06:0f:c3:c8:19:93:80:c1:b3:66:2b:
ae:be:e7:15:b1:8e:15:91:57:98:db:2d:9a:bf:8f:
02:e9:05:5b:33:5d:fd:c9:60:ad:8f:56:29:5f:fc:
3c:09:50:85:a9:c1:4e:e9:db:0b:15:0d:48:4d:fd:
fb:6b:92:e9:47:51:07:db:30:b4:94:18:80:38:c8:
54:8b:9d:32:a2:a9:6e:b9:01:8e:99:70:1f:16:92:
7b:aa:eb:50:ff:7a:d7:07:7a:93:e0:fc:1a:09:dd:
56:d7:ce:6b:16:a7:25:46:2c:29:47:35:58:87:23:
fd:15:19:f3:b1:a9:db:69:27:22:57:0a:27:ed:a2:
82:d6:05:31:4b:de:44:fe:86:0b:c4:f0:a1:91:d5:
b2:78:33:3a:1c:26:04:d5:ca:71:98:72:dc:01:9a:
01:bd:df:8b:1d:dd:66:a3:d8:0a:fb:39:d0:a7:0d:
e6:fc:d8:bc:3d:d9:d4:29:39:40:46:32:ad:9f:fa:
d4:32:d5:67:eb:c6:50:4a:48:04:27:49:50:b8:04:
b9:5b:bd:19:93:96:d1:da:45:b1:c5:93:eb:84:f6:
30:dd:fa:23:58:5b:f2:d9:60:8c:99:dc:84:5e:35:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:85:B8:10:A7:B3:EB:26:6D:87:B0:01:03:19:57:AE:7D:88:74
X509v3 Authority Key Identifier:
keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:04:4d:1c:06:8a:57:5a:79:5b:ee:98:35:d6:e5:fa:ee:
e3:17:6d:bb:25:6d:6b:05:d6:23:9c:af:b6:69:3c:49:a4:a3:
44:bc:20:dc:88:2c:96:b3:ef:b2:44:5b:4c:20:c2:97:59:32:
40:8c:5d:62:8f:fe:91:b1:69:fc:a9:90:09:8b:72:5d:c5:6e:
0c:ca:10:0e:e7:ac:d0:56:5f:52:5f:57:71:b5:b0:74:0a:a6:
d3:37:b3:55:aa:4a:53:4c:e2:67:dd:ab:60:fb:b5:97:bc:c2:
ab:12:27:b1:2b:6b:9f:00:d4:4b:94:68:f9:0e:ff:b5:5e:b3:
ce:9e:80:29:10:1f:0d:14:c0:bc:70:25:c4:1e:c7:5a:c4:d8:
8e:86:a2:e5:6f:4e:1c:a1:c1:49:99:5a:8c:3f:6a:0e:20:05:
15:16:b7:f5:4e:f8:a0:8b:9d:3f:ba:b7:24:ed:dc:d3:47:a9:
f6:5c:c9:1c:7b:0c:34:5f:ff:17:fa:c0:76:1c:30:14:da:8e:
53:c4:9e:a4:1f:fd:bd:7e:65:ad:22:43:3f:cb:31:a7:92:53:
fb:01:fa:53:22:98:87:69:c9:bd:ff:a4:6b:d2:19:b8:62:92:
f3:a4:91:b6:53:66:bd:a3:65:0a:ae:77:97:be:3b:a8:8e:40:
c0:7e:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:09:45 2025 by rpki-client