Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: yVl8BWKda3GCHBPhgrods7Vbg/YSnYPsvmzOP7Q9Yq0=
Subject key identifier: 5E:EF:68:7D:E3:04:8B:97:20:39:59:F0:FD:0E:3D:23:A7:37:07:01
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 0197B70F46852488E0B81AC77AE9CCB4A4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 047A
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: qlvNnedWjT+ZIIOnswQ5yPO1YL6mTAV2PKw2ybz5n2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:46:85:24:88:e0:b8:1a:c7:7a:e9:cc:b4:a4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=5eef687de3048b97203959f0fd0e3d23a7370701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:05:6f:f7:da:95:31:d3:7c:d0:95:17:2d:
5a:b7:8c:92:ae:b2:62:55:82:c5:ec:44:36:a7:d2:
7b:17:92:b1:aa:5b:b0:15:69:18:47:6f:60:ff:4a:
ec:1d:3f:91:60:eb:e4:08:b6:41:39:30:3f:42:39:
59:41:4a:82:38:18:f9:1c:dd:7f:eb:4c:e5:ea:64:
04:9f:0d:a4:d3:b9:0b:51:ae:7f:9c:a6:0c:6b:56:
72:f0:f8:07:30:ba:6e:4c:d9:26:b3:72:d2:b7:be:
cc:71:70:89:80:86:5b:26:d3:4c:b0:42:a5:4f:bd:
94:c1:1d:5c:46:a0:0a:4a:f6:00:85:a6:76:13:c1:
a8:a9:e4:85:88:c0:f7:ad:77:55:26:f7:90:95:71:
9f:f4:f6:ac:2b:91:71:75:eb:2f:28:23:c4:6c:c9:
7f:53:90:75:b9:21:fa:6f:bb:e3:e1:28:f9:e1:83:
f5:3e:4e:a8:d2:ea:f5:3d:eb:70:aa:7c:c5:c9:ef:
40:5d:02:9a:c2:6d:f7:d4:5b:84:02:4e:2c:43:dc:
7f:9e:fd:8a:c8:86:ed:74:ea:af:3c:29:65:3a:78:
47:df:cb:a6:6d:d6:16:a4:15:a8:ab:12:2e:40:69:
e7:bb:8a:cd:75:23:4a:6c:6f:41:76:07:dc:4e:11:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:68:7D:E3:04:8B:97:20:39:59:F0:FD:0E:3D:23:A7:37:07:01
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:71:41:4d:de:1b:eb:5f:00:fc:d7:d6:e9:4a:d0:a4:ee:90:
30:b9:c4:fa:15:25:ea:50:93:8b:a0:0b:fc:92:f9:b9:71:1a:
20:26:36:1f:7d:58:a7:d0:eb:37:07:f6:a6:60:06:1e:65:b1:
9b:f1:b4:a6:d2:88:e3:93:d4:f2:57:ba:29:9a:4a:7c:19:e2:
ea:5b:c0:8c:76:bc:e3:35:61:a7:1f:40:8e:48:5b:1f:29:61:
3e:33:7f:da:39:65:7c:5a:17:a0:ea:dd:bd:15:9e:f9:7b:3a:
59:2c:18:a8:7a:93:51:2d:8e:37:82:c6:fa:59:c1:84:20:36:
24:5c:54:88:23:d4:8f:5c:9d:4b:f3:e8:97:cd:4f:2b:2c:81:
b8:7b:4d:af:36:c7:20:e9:16:92:a7:18:0a:35:a9:5a:43:86:
aa:7a:4c:4e:39:3a:41:20:98:af:b7:31:5d:17:38:fd:34:ad:
cc:89:59:af:f7:d8:8b:5b:c0:54:e4:27:ee:1f:a6:41:ad:90:
5d:a2:02:27:56:48:0e:03:62:63:5f:c5:f3:d5:cb:3a:a5:05:
7a:9b:6b:6d:c9:86:c7:0a:d8:45:6f:b2:b2:e1:f7:a8:90:d6:
cb:5b:21:93:14:76:79:41:c3:60:65:8a:e7:f2:39:4b:fe:71:
85:35:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:50 2025 by rpki-client