Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: 2ChvGqWBDpLAzH8EWaKPR5m1wvWTeHQO1r7ROWjWUQ8=
Subject key identifier: 32:C2:DB:0A:4C:4F:3E:D3:D4:69:72:23:C2:CB:87:D2:F6:19:1F:48
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 0197752E19D71F7A042111019DC96EE05457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 20:00:44 +0000
Manifest this update: Sun 15 Jun 2025 20:00:44 +0000
Manifest next update: Mon 16 Jun 2025 20:00:44 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: lt4i7p8SzvjTk1C5X9Op25IonlECqHut6WZa86qMteY=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:19:d7:1f:7a:04:21:11:01:9d:c9:6e:e0:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jun 15 20:00:44 2025 GMT
Not After : Jun 16 20:00:44 2025 GMT
Subject: CN=32c2db0a4c4f3ed3d4697223c2cb87d2f6191f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:6c:a5:91:7a:d4:81:a1:2d:f8:33:54:d4:
a9:75:0b:aa:43:03:30:58:8d:47:7c:71:c1:fa:4e:
15:b8:5d:3d:fd:25:97:26:f7:22:bf:1e:c5:6d:c0:
a3:d5:20:a5:a1:99:cc:ca:3c:8b:ed:c4:d6:d3:c8:
c7:f5:47:dc:e6:fd:c2:9f:42:a3:0b:ae:f0:ae:d8:
59:1a:61:25:b9:1e:81:ca:ee:a7:69:32:c3:64:43:
77:47:b0:43:e7:88:b1:b3:b0:33:c1:13:79:20:7f:
11:8b:a9:bf:02:20:f2:95:db:5c:07:83:f3:3f:02:
60:ea:ca:86:d7:88:43:b8:74:79:b9:ab:b0:0c:f0:
6a:07:97:8a:d3:ac:da:83:79:08:d1:02:8d:2e:b1:
84:8f:2a:6c:9c:ba:12:03:b2:14:17:c2:50:5a:7b:
7b:07:26:d5:3a:02:42:55:f3:8c:c8:d8:51:81:e6:
58:32:67:ca:fa:2e:da:73:95:22:f8:39:a5:ef:36:
c6:18:ab:b0:e9:f6:8d:02:aa:a7:9e:74:a1:6b:3e:
62:5e:c8:ad:b4:3a:a3:da:d1:1c:9b:20:0f:26:97:
46:c3:02:7a:1d:91:d2:eb:d5:15:de:78:9d:18:0b:
c1:d3:43:66:2c:89:15:7c:25:ac:b6:53:89:d3:23:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:DB:0A:4C:4F:3E:D3:D4:69:72:23:C2:CB:87:D2:F6:19:1F:48
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:3c:55:be:eb:71:48:ad:d2:80:2c:86:09:11:b4:31:d8:
b8:fa:6c:fa:47:95:a0:78:dc:fd:79:c2:be:ae:a5:5e:f6:20:
79:be:59:0f:53:49:d8:1e:55:9d:ec:c9:6f:41:ac:9f:b2:c4:
40:01:c2:2e:fb:00:89:ca:a0:07:7a:ad:ba:27:b9:65:89:fa:
8c:ee:f0:8b:14:35:69:39:ef:7b:59:e7:86:4e:67:a7:7f:3c:
20:b4:93:42:24:0e:69:24:62:d1:97:aa:a3:44:af:9c:cb:12:
40:d7:b5:b8:f8:ff:8b:84:c9:92:be:6c:7b:21:62:c2:1c:35:
d9:73:c2:0f:9d:ce:42:c6:61:41:35:58:cf:12:94:c8:c5:41:
f3:bc:9d:68:d0:bf:2e:28:76:d7:89:99:80:5b:0d:85:44:be:
36:ed:cf:ab:32:fe:8b:a0:50:57:7b:68:6a:12:db:79:ad:90:
12:ad:43:eb:52:14:d3:34:c2:c6:10:a7:80:8a:ec:6d:f6:38:
f4:e4:b3:24:eb:62:ed:37:58:6d:e3:d8:0c:6b:11:f6:21:20:
33:f1:59:44:e9:de:28:44:ce:c6:6b:8e:74:43:bf:72:37:f4:
f4:74:29:df:ec:e5:e7:3b:8d:54:da:6a:d1:47:ce:fc:9a:5b:
34:36:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:03:43 2025 by rpki-client