Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: eYLtyEQqgcG6jOhgVZuVstp1GHpqHqmQKk10sK2UqBc=
Subject key identifier: 4E:7E:E8:B8:E2:EA:D6:0A:22:E5:2F:46:D2:6C:75:83:69:A1:44:3A
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 0197B77C658B51C39DEA5020C34C27DDD68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: JdLB6n+kFeJx7Qud9cyllUFMIP2KRL4m422XfQplXXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:8b:51:c3:9d:ea:50:20:c3:4c:27:dd:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=4e7ee8b8e2ead60a22e52f46d26c758369a1443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:71:43:f6:7e:7d:ef:02:4f:04:2e:c5:12:
72:75:09:f9:b8:39:0c:ab:d5:5d:61:8a:dd:9f:d0:
42:bb:c8:ba:46:5c:3d:83:6c:88:77:75:88:58:9f:
74:54:2f:5b:55:e4:68:84:ff:19:10:87:72:86:5e:
5d:fa:f2:b7:cb:e6:94:b4:fe:2a:da:c6:f7:8c:52:
be:4d:19:79:06:ec:85:33:b6:cf:1b:12:15:37:d0:
c2:37:95:dc:0b:2b:35:ff:26:f0:cb:77:ff:f3:88:
dc:21:7a:3b:9e:f0:1c:55:01:da:02:b8:74:80:7a:
77:7d:bc:9b:53:ba:32:f1:77:78:cd:d4:9e:b0:44:
0a:bd:3f:8a:b2:a0:c8:b9:de:05:da:f2:17:99:13:
8b:df:1c:86:be:a7:11:ff:40:21:dd:27:80:71:55:
17:cc:d6:74:aa:6c:45:77:37:1c:75:86:9a:12:77:
dd:5f:c2:c3:eb:3f:dc:fd:a2:78:4a:73:0a:c1:2c:
86:e1:e5:99:d4:60:3b:7e:f3:c8:b7:d8:07:fa:5d:
2c:da:d4:d2:6a:10:0b:4c:99:9a:a5:87:26:16:c3:
87:3e:4a:ff:09:d6:d5:b6:ec:5a:77:5a:b3:29:12:
0a:c5:1a:d0:23:ea:69:4e:73:7e:10:1c:04:f9:ca:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:E8:B8:E2:EA:D6:0A:22:E5:2F:46:D2:6C:75:83:69:A1:44:3A
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:0d:60:bc:82:fb:2e:ac:c5:dd:1b:b1:26:d4:91:5b:28:
ef:19:34:10:26:6e:4b:53:c2:cb:b5:6c:05:eb:21:95:b2:a8:
c5:00:d6:50:4f:ac:31:0f:22:00:c1:62:3f:b3:d1:97:93:c5:
3c:4d:77:eb:22:bd:de:18:c6:50:d1:17:d1:43:e0:c8:7a:8a:
08:a3:c0:dd:38:76:e1:d9:71:85:49:0a:eb:47:e9:45:58:69:
39:09:c9:6b:99:77:91:a4:37:1a:9e:5c:3a:9a:0b:c7:5d:57:
58:f4:ac:4d:4e:ec:7b:1a:07:04:cf:f3:90:0e:e5:4e:60:2a:
fe:9d:e4:79:09:b9:04:73:a0:77:aa:dd:1c:b2:77:ee:04:cd:
82:e8:65:92:a4:9b:32:2d:86:40:09:80:78:43:b3:04:6e:c4:
da:2f:fa:8f:e9:37:7f:00:dc:65:6f:ee:1a:1c:df:cc:2b:1e:
89:5a:3f:5b:5e:3a:8c:64:d8:bb:5e:32:5a:8c:46:b5:9b:b2:
e6:eb:68:f2:b3:25:12:40:25:8f:e2:9b:10:c6:70:32:e1:47:
dc:d4:8f:24:e1:69:60:12:9c:df:79:d3:09:df:b3:78:a5:cd:
ad:15:65:07:0d:9e:7e:25:2f:ce:ec:ce:a1:12:3b:94:a3:30:
d8:62:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:03 2025 by rpki-client