Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: CBocCb82hnjPRb3O22PWALg2VN3MkqGLdL/5VgxJ1J8=
Subject key identifier: 84:72:CB:FC:04:F3:81:82:5F:40:C1:7B:67:5F:F4:73:06:74:1F:DE
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0197B6D731F5809EAA079D7FCEF8A0975798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: r2HlYEnlBOc6tkELwFDddhXkPnp12arsvYcPh0WeIp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:f5:80:9e:aa:07:9d:7f:ce:f8:a0:97:57:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=8472cbfc04f381825f40c17b675ff47306741fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:b3:b7:9f:d2:6f:cf:50:b8:c1:21:5d:2f:
0e:a3:ac:75:51:d7:6d:15:04:ad:47:38:be:32:9f:
2c:8c:e7:ee:96:49:d8:95:7e:7f:64:d5:83:28:48:
4c:6e:78:99:e0:17:ee:21:a1:2a:2b:98:e8:9f:c8:
ff:3b:a0:e2:ce:37:ef:95:9c:1e:5b:37:25:cb:f7:
a1:f8:6b:ce:1a:bd:c0:fe:b7:65:2c:5e:d1:68:a3:
04:e0:ca:52:c7:c9:6b:ce:2d:a9:e1:50:fc:e0:47:
ba:1c:d9:df:fc:50:06:dc:3f:db:44:5c:ab:72:4d:
6b:f5:28:06:30:5b:b5:ba:30:04:0e:35:f2:1f:8a:
8d:78:f9:b3:16:ba:f6:ad:fb:aa:e0:50:0b:be:a7:
68:0c:bc:bc:60:7c:26:f2:bb:6e:d1:14:ea:81:14:
09:a2:0e:9c:e0:35:b7:1b:6b:5d:4b:89:7f:99:16:
78:86:0d:08:40:87:a5:85:4a:3f:46:a1:f8:c7:bc:
82:7a:cf:ed:e2:bb:8b:06:e8:57:e2:af:85:93:86:
33:d9:c1:9e:9b:be:4e:de:79:f3:a0:a6:38:4a:f6:
93:10:cd:e3:e8:5e:c0:d7:f7:0a:09:4d:4a:3c:11:
40:4f:d7:48:83:1c:5b:62:df:60:f9:21:f2:94:88:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:CB:FC:04:F3:81:82:5F:40:C1:7B:67:5F:F4:73:06:74:1F:DE
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:06:68:63:05:24:6b:cb:4d:b2:55:18:5a:d0:87:f0:7d:
03:43:c5:d4:f9:5e:3c:e7:4d:09:95:fe:37:24:cb:88:a0:66:
b4:23:d1:8e:34:dc:be:b6:db:15:54:4f:c4:58:f9:6c:00:b0:
7d:5e:3c:35:39:31:c7:b7:b9:b1:29:5d:78:8b:e5:e0:d0:5c:
15:09:ae:9f:94:2e:e8:e1:50:cf:f1:71:70:6a:47:fb:1b:ea:
9d:29:83:85:64:cf:ba:d4:5d:6e:4e:05:4d:43:21:b2:16:08:
b0:93:5f:a6:b6:2c:21:7e:f6:ca:15:5f:d9:d7:09:b6:87:70:
61:08:75:bd:b3:54:36:35:4a:61:24:77:c2:3a:84:be:16:f0:
6c:0e:1d:1f:24:31:7f:9c:d3:04:ef:4a:3a:cf:b5:04:02:c6:
2f:92:9f:54:be:f6:55:f0:f1:cd:54:5d:9e:00:78:61:7f:05:
84:52:46:52:3d:b4:04:20:1f:71:5e:f6:70:6b:69:cd:42:ba:
b6:69:6d:cb:f1:af:87:e1:9b:0c:5e:66:84:d6:ba:66:ab:3b:
e0:a4:a9:0d:e9:61:dc:35:cf:2c:95:48:aa:1a:ef:af:06:ff:
be:93:31:48:2f:52:99:49:1a:d7:e3:46:e4:52:ba:e5:98:48:
c4:15:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:41 2025 by rpki-client