Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: 9szzj8gJxlj81ZvW/oF0L5Mn8NkKVYM8Y38pUnBf6jM=
Subject key identifier: 7E:B1:22:89:E4:23:01:34:C8:35:52:A5:C3:68:0C:EF:BD:AC:7D:FD
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 0196B9358C489665CA50F5FA005A481A7138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1539
Signing time: Sat 10 May 2025 08:00:16 +0000
Manifest this update: Sat 10 May 2025 08:00:16 +0000
Manifest next update: Sun 11 May 2025 08:00:16 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: 8MZXQRkDFsJl+guXoZe/M4HnbPOCIHGcKNQdDT7SXwM=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:8c:48:96:65:ca:50:f5:fa:00:5a:48:1a:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: May 10 08:00:16 2025 GMT
Not After : May 11 08:00:16 2025 GMT
Subject: CN=7eb12289e4230134c83552a5c3680cefbdac7dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:64:0d:c5:9c:8f:48:80:f4:16:c0:6d:2b:
c2:39:0d:69:51:27:86:2d:58:96:05:e8:00:bb:8c:
12:87:ac:12:dd:35:54:43:a7:4c:2e:a8:8b:0f:b4:
42:cf:93:40:c4:8f:fe:14:2b:90:81:bd:1e:c8:5c:
92:02:65:70:d9:fb:2c:13:c2:9f:9d:f4:10:3a:9d:
35:de:d6:e3:5a:f1:52:81:07:31:bd:a1:4a:73:71:
8a:e9:8d:95:f7:9e:80:12:67:26:00:46:47:7b:ac:
7e:6b:38:4d:7f:a9:fd:41:71:fd:c1:bd:eb:85:8f:
05:7b:aa:60:e9:58:af:7c:ab:b9:da:4d:6a:2e:89:
f5:8f:54:a9:84:5a:4d:ac:27:1c:ca:c6:64:0a:7b:
26:c8:98:cb:00:f5:27:0e:70:ae:94:aa:22:83:a6:
e6:36:f6:7c:14:17:70:90:35:44:60:d1:8d:a8:4f:
32:5f:b4:f2:98:d6:24:69:c6:3e:ec:38:c3:f4:6e:
f9:a1:ad:ab:26:50:e8:1d:36:6c:21:9c:86:5b:ec:
70:69:42:ed:02:43:01:fc:b2:31:d2:09:d1:49:9a:
2e:55:fe:54:dd:0d:73:15:49:64:b2:a6:82:25:be:
bd:76:ed:84:a6:8d:7e:01:cc:94:e4:e9:3b:ad:af:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:22:89:E4:23:01:34:C8:35:52:A5:C3:68:0C:EF:BD:AC:7D:FD
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:e0:d6:c3:d4:d1:9a:5a:ea:1c:33:8f:61:6f:50:25:bc:
d2:96:b6:c1:83:0d:7e:ee:0e:98:78:d6:b1:2a:c3:cd:7d:92:
c2:46:05:30:7b:71:63:30:86:9d:12:cf:b4:39:79:24:02:55:
58:cb:e8:8b:fb:78:c1:8f:bc:fc:42:ea:5b:06:9a:fd:88:ac:
df:64:ad:25:64:2f:af:ee:20:c2:80:35:f5:dc:7b:61:b8:5a:
4c:f7:4b:a7:c5:dc:9f:de:08:d6:e6:3a:ed:62:4d:4e:01:ef:
8c:75:2a:1c:00:d6:46:da:a5:00:5a:09:53:e7:09:05:1c:c6:
9d:81:f2:56:ee:68:85:d8:eb:38:8e:6a:4c:05:d9:1a:b9:fe:
87:c2:36:36:9e:8f:99:f5:ab:0d:e3:31:30:dc:51:e3:93:cc:
e9:f3:e2:11:86:76:0d:35:1c:43:ab:49:50:d1:e5:e7:03:1f:
70:f9:a3:19:d6:d4:e3:13:4c:1c:80:7d:c9:75:92:4b:f5:2a:
b6:ff:a2:9c:ed:2c:d0:71:f2:d6:85:22:f5:e2:ad:df:0c:00:
00:cf:ab:e9:76:c8:52:f4:63:79:a1:ed:e6:78:62:5c:b9:0c:
ec:a9:4e:65:e5:b7:a3:8e:a1:16:3f:52:cf:a6:3b:11:54:95:
cb:2f:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:42 2025 by rpki-client