Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier: EgwVG2hIT9Zo64jqqiY/KqlpzVTV2w70pxHwsKw1Wu0=
Subject key identifier: 94:5A:F0:EA:96:99:FA:24:3D:E6:FA:3D:5D:DE:A4:17:35:B2:E4:4E
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 0197B6D79BB2227B1DF04E8950ED4A71D352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number: 0590
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: M7lN0Agq4P9c5eyvQpbSpnasYP93fJiDLzz5qp8Zan8=)
2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:b2:22:7b:1d:f0:4e:89:50:ed:4a:71:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=945af0ea9699fa243de6fa3d5ddea41735b2e44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:aa:61:9e:9c:fe:78:99:23:f7:d7:76:ce:
f7:be:2a:2a:d7:a0:85:eb:89:f7:c3:71:79:67:3d:
18:bc:28:6a:5d:ff:be:ce:d8:9c:a2:21:3b:07:be:
39:7e:82:39:35:f2:e9:91:58:9b:9d:be:30:ff:a9:
99:89:34:d8:c5:bc:91:6a:2d:cc:5a:e6:61:39:e5:
c1:f5:6e:3b:6a:84:6b:a4:9c:da:02:2a:96:37:3a:
eb:f7:b4:34:77:27:71:cc:72:76:77:8a:1e:11:d0:
6a:04:9f:33:f3:2e:da:1f:80:39:f3:2f:bd:68:6d:
41:a4:1a:21:cf:3e:a3:e3:3e:a8:2e:a0:c2:37:8f:
de:ac:5b:b4:56:e9:5a:cf:25:3f:40:a8:b1:a4:6d:
df:fb:59:59:20:74:84:aa:eb:6a:be:21:47:c7:8c:
42:bc:e1:5f:5c:7a:74:7b:4f:7a:79:8b:c7:49:f3:
5e:98:ed:5a:49:18:f3:ad:05:05:d3:0d:39:cd:4a:
54:c7:a5:6f:10:04:22:af:fe:b1:81:42:36:b4:8d:
e2:3e:18:3a:e7:a9:e0:7a:2e:6b:d4:1a:96:89:04:
13:34:9f:42:83:42:fc:f1:63:df:02:60:be:e0:ae:
46:88:80:ec:3a:d3:2a:e2:2c:e4:8f:7b:1f:0b:97:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:F0:EA:96:99:FA:24:3D:E6:FA:3D:5D:DE:A4:17:35:B2:E4:4E
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:2f:29:ee:b2:00:60:12:40:9e:72:63:0f:3c:26:b0:25:
1f:eb:27:de:a5:89:c5:f4:9b:1b:ad:e6:5f:04:29:0b:f3:38:
78:5d:ce:3e:8d:fd:df:f7:a9:f1:01:d3:19:3a:2f:2c:b8:32:
59:a7:52:f8:9c:f6:ae:2b:23:ce:b9:36:bb:24:2f:67:65:19:
5d:af:49:7c:a1:dd:d3:e4:68:44:cb:64:21:9a:ab:07:67:27:
22:2a:92:95:b4:7b:61:70:f2:d4:ab:d6:19:fd:9b:a3:fd:3b:
9a:f3:f9:ed:b7:d1:0f:b9:81:d0:ab:fe:c2:65:eb:57:6d:34:
21:33:66:aa:53:df:a5:68:28:d8:ad:55:45:e3:52:6a:d1:4a:
37:55:92:5a:67:9d:75:26:02:ea:b3:80:f0:74:ea:84:3c:e4:
78:c8:ff:70:dc:1b:a0:62:0b:94:2f:e7:d9:8f:bf:82:e9:6d:
cc:7e:47:f1:be:e9:b3:87:02:7a:66:ab:fc:27:a9:e1:d4:f5:
66:86:d0:b0:04:f2:9d:53:54:e4:92:13:43:47:89:e6:be:0a:
12:66:a3:93:eb:6a:be:58:f7:73:a3:e1:c5:20:85:9a:89:38:
d2:94:4a:d6:fc:f5:b3:e8:62:ed:2e:7c:2d:de:5f:c0:66:08:
7b:0f:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:40 2025 by rpki-client