Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: YISTnkS6suTGCKawo5oO8YEWSlBkHKk6j9WarsPsaVw=
Subject key identifier: DB:8E:09:62:5E:B1:89:48:B0:11:9F:9D:CD:E9:44:6E:D5:B8:06:43
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 0197B6A1A294A37DA199EA7C5204A24A58F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 04B8
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: Qrp1Q+HMOVuqMF4UGbbkGdUkMZIO0iuUAnRkgm78U4Q=)
2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a2:94:a3:7d:a1:99:ea:7c:52:04:a2:4a:58:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=db8e09625eb18948b0119f9dcde9446ed5b80643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:b5:2d:18:8b:f7:a1:ea:40:ff:ec:71:23:
69:18:f2:d0:79:1f:ff:a5:f4:d7:5d:f7:7a:e4:4b:
91:02:5a:08:d8:42:92:b3:c9:0c:3b:3e:35:d6:6a:
15:7f:2e:ec:b1:ff:2e:d7:74:94:c1:af:06:e8:06:
9d:1a:79:8a:ca:cb:82:87:57:ce:ae:d0:4d:d2:4c:
2f:2d:e5:2b:23:86:d7:38:2e:78:0f:d3:4d:1a:6b:
86:cd:54:55:1b:2b:47:6b:ce:08:92:ef:c1:e1:0a:
8e:64:1f:6a:39:d3:f4:23:1f:57:9a:66:7b:9a:51:
9e:7a:b9:25:09:30:00:30:d7:d7:10:35:cf:6a:b4:
29:00:8f:f6:36:7c:80:0f:74:53:45:dd:5f:5f:c1:
3f:75:42:92:9f:ae:a1:c8:38:23:75:a1:50:31:70:
dd:e8:a4:fc:85:19:6a:e9:0f:e1:c3:ea:10:7f:c5:
31:94:b1:4f:33:f4:bc:0c:c6:f8:95:28:1a:d3:c4:
37:88:83:d6:0e:a6:16:51:21:fc:31:fc:51:0b:95:
2a:fa:08:cf:5c:0f:a5:b4:0f:d3:53:82:18:c5:91:
c5:08:46:93:38:be:09:f0:3f:f0:50:7a:07:72:8c:
f7:c3:78:b3:1d:26:fe:40:4e:77:e8:de:cd:74:7e:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:09:62:5E:B1:89:48:B0:11:9F:9D:CD:E9:44:6E:D5:B8:06:43
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:64:9b:24:bc:7e:40:d6:55:1d:a5:b3:f0:50:0f:3d:c9:
1f:65:6b:72:9b:26:69:99:38:3b:51:14:c2:49:c5:29:08:d7:
c1:ef:60:7f:8c:8a:e6:46:34:f5:58:2b:df:dc:62:27:4f:dc:
c8:17:5f:3b:70:06:d6:7c:ce:d1:0e:3d:dc:5d:c7:15:4f:7e:
cd:35:2c:1c:7d:04:1d:85:52:66:e2:5f:09:a7:2a:1b:fe:19:
d4:e7:3b:cd:13:dc:f3:37:be:f3:c3:b5:47:de:4f:40:9c:c1:
f5:5f:63:29:02:29:78:6b:64:df:f4:03:c2:c0:b4:40:a3:30:
81:ba:45:15:9b:6f:39:37:49:39:1d:87:bc:66:e7:f5:87:7c:
f3:1e:97:a2:bd:fb:46:08:fb:5d:e6:04:e2:ba:e9:0f:7a:5e:
15:b5:54:17:ba:32:b0:b5:c4:c6:cc:ce:e6:29:ee:2b:38:41:
fd:8c:b0:50:1d:26:90:75:ec:0a:f6:c9:ac:10:55:e6:5a:f8:
c8:08:51:9a:28:da:94:9d:90:e7:79:f3:b4:c9:cf:0a:06:1d:
f1:01:ca:f9:d6:e2:38:75:01:e1:6c:24:bd:8f:58:4b:b3:08:
ec:64:2e:38:fa:df:ef:39:b8:1c:27:19:39:0f:19:76:5d:0f:
71:59:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:29 2025 by rpki-client