Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: 8D9/bhP+Tg93g8i2l7uUjf4pSWPK+3VOb+U2VN2pUp4=
Subject key identifier: E4:9D:37:2C:D8:E9:2A:AE:70:38:BC:0E:A9:70:81:5B:54:AA:FC:31
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019768BBE11768FBA93C95BE0F97DBAF31D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0567
Signing time: Fri 13 Jun 2025 10:00:32 +0000
Manifest this update: Fri 13 Jun 2025 10:00:32 +0000
Manifest next update: Sat 14 Jun 2025 10:00:32 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: +DqACjCkU0Fei5L82grxFqQbncXHld1iUnEO3De3sIY=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:e1:17:68:fb:a9:3c:95:be:0f:97:db:af:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Jun 13 10:00:32 2025 GMT
Not After : Jun 14 10:00:32 2025 GMT
Subject: CN=e49d372cd8e92aae7038bc0ea970815b54aafc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:2c:2c:9b:25:b4:0f:4d:0a:fb:f4:4b:b7:
d3:84:92:1c:bc:ab:ce:54:11:f0:8d:87:09:a4:06:
92:bf:0c:d3:fb:ce:2d:9e:4a:70:93:d6:a2:5f:2a:
a8:8f:08:f2:7f:7c:4c:5c:fe:d8:4d:ab:f7:c9:91:
18:d5:d8:f3:e1:a3:be:e4:ec:9d:33:2a:50:d0:27:
b9:b7:14:f1:22:1e:81:38:ee:94:6e:79:02:2f:b1:
85:14:3c:66:78:81:51:b8:e2:f0:b0:7f:40:9c:fc:
bc:38:36:e4:92:5d:80:c9:c6:d0:be:bb:a9:a2:3f:
d1:f5:a8:d7:9a:3e:73:66:03:f8:ed:c7:5f:07:2d:
20:a9:4e:a9:14:94:e1:6d:44:48:18:d2:6f:97:d0:
e9:30:a2:d1:fc:b7:b3:bf:f0:98:5a:a0:fe:6f:66:
b9:1b:c8:d1:1f:a0:d5:8a:76:be:d0:b5:40:7f:0a:
29:46:f1:dd:b4:45:57:ab:33:28:b1:23:4b:74:5f:
30:ac:4b:dc:2c:ef:15:d6:0b:4d:69:5e:33:bb:98:
1a:ad:bd:ba:e2:3c:08:ec:2f:4a:fe:95:02:8e:d7:
86:9b:31:54:95:2f:d3:e8:ce:26:f4:9e:97:70:aa:
5e:9e:19:38:34:62:61:2a:b8:a9:59:35:0d:54:ab:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:37:2C:D8:E9:2A:AE:70:38:BC:0E:A9:70:81:5B:54:AA:FC:31
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:97:72:8d:fc:51:b2:5b:7e:f3:e2:b7:74:86:06:22:0e:
b6:e2:ed:df:1b:02:c2:63:39:fb:42:4f:fa:73:2f:ba:f5:60:
57:79:5d:e6:e8:b8:ac:be:1b:f2:8e:15:c8:1d:aa:a7:d9:12:
d9:3e:02:49:bf:c1:6a:22:fe:6a:45:6a:42:00:d2:e3:f2:3c:
6d:63:66:2b:be:45:fc:62:65:6e:6d:5a:79:f7:12:ce:06:e9:
16:5d:50:14:dd:8d:9a:a5:5a:c3:47:9c:b9:29:1c:bb:3f:3e:
9c:63:3d:b3:5c:c7:8b:dc:47:e7:56:0b:66:91:04:2e:80:f6:
7e:01:05:02:21:63:6b:90:4f:fe:29:31:91:c2:e0:bd:a5:0f:
74:c7:7b:3b:8b:07:ab:e8:41:94:95:4f:12:c2:f8:07:eb:0f:
07:9d:86:3e:15:70:74:68:c9:20:d6:93:a9:bb:9c:49:76:ab:
6c:84:b5:be:89:87:73:d9:0a:e7:5d:39:b1:42:07:d6:61:bf:
a4:b1:c2:32:18:1a:98:c1:e8:b3:27:53:4e:92:82:ec:ec:c6:
9a:2f:be:26:bc:5b:c0:aa:39:37:d8:58:81:88:60:46:39:c0:
fd:aa:ab:42:99:0b:ac:93:0c:5b:3e:32:fe:04:19:1a:44:4a:
dd:df:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:12 2025 by rpki-client