Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: Qdzj74RudcLuoNFwRAGLTEbcIwSr1NJg0/zRf8cgQoY=
Subject key identifier: 65:09:73:07:59:D7:04:D8:FB:77:FC:4A:80:9F:C0:19:D7:EC:EE:DE
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 0197B7EA4FF2D4B39A6391D96A09361CDCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 0F30
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: motFj7ou8UtLGdQxFqY0lZ1mtdN4fjS739QA2xWTjHA=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4f:f2:d4:b3:9a:63:91:d9:6a:09:36:1c:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=6509730759d704d8fb77fc4a809fc019d7eceede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:f2:57:78:30:77:c5:77:37:de:50:af:db:
2e:ab:f9:c0:78:40:2c:df:a5:73:d8:25:ea:8b:d8:
8f:c3:bd:68:23:61:bc:bf:2a:28:27:e5:d4:0a:7b:
3c:bb:79:1d:30:09:b9:0b:1b:8f:e8:ff:43:f3:43:
d4:ed:a2:b0:a9:ea:15:0d:32:4e:11:17:89:29:33:
98:52:38:aa:36:aa:a3:5c:c2:9b:10:5b:6b:04:6d:
da:34:eb:51:01:89:46:51:4b:12:00:60:3a:d3:de:
6e:11:cd:bd:34:be:97:96:42:ee:e5:63:03:25:31:
d6:df:b0:77:a0:6f:b5:0f:2c:9c:dc:57:33:11:63:
31:c2:4d:05:1d:98:e9:23:1e:b5:c1:95:1e:40:1a:
c4:93:53:c4:70:08:c9:33:3b:2b:43:19:99:ef:e7:
69:06:d3:9d:31:16:54:8d:1c:15:0e:d2:c5:85:e0:
0f:fa:90:e4:35:c1:1a:1f:53:bd:27:06:a2:ee:fe:
b9:22:d7:fe:59:ac:e8:02:41:aa:b8:9f:be:5b:63:
98:fb:36:c7:62:db:b6:e7:7a:a4:30:0f:02:ac:5b:
d5:b5:0f:c2:32:82:8f:47:bd:d0:e1:85:ec:64:71:
94:1f:a3:96:b5:17:69:dd:cc:a7:e9:a0:26:ab:fc:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:73:07:59:D7:04:D8:FB:77:FC:4A:80:9F:C0:19:D7:EC:EE:DE
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:83:86:15:d2:0f:13:b9:77:22:b9:5e:20:48:b7:a4:67:
76:64:e9:30:4d:ce:20:72:d6:cc:8c:10:67:c0:7c:6b:05:80:
be:8c:5b:59:17:75:da:8f:13:c6:7e:b6:23:02:27:69:09:59:
cd:ac:3e:c7:c0:91:a0:b2:49:be:22:26:37:04:cd:3d:30:98:
00:ee:77:46:e0:c7:8e:40:9f:95:24:36:1c:37:68:79:51:f2:
8f:79:69:89:96:5b:83:4a:1f:bd:3e:32:9c:bb:78:24:d4:dd:
77:d4:97:76:a6:24:2f:fa:0a:3d:1e:10:ca:62:a9:fc:6c:89:
9c:be:e1:4c:f2:f5:97:3a:f4:84:39:f2:13:fd:86:9d:f9:de:
9b:14:c2:44:9b:0a:78:ec:47:fd:5e:da:da:8c:01:a8:ae:97:
57:06:5b:55:88:62:99:3e:68:d7:dd:36:7d:e4:0d:bc:45:65:
7b:83:c6:9f:82:ce:d2:b5:a2:a3:e4:a5:45:0f:e7:6a:fc:9e:
73:02:c2:1f:be:89:d8:a2:a1:8c:7a:71:ae:04:f3:2f:d4:fd:
ea:02:45:94:42:46:d3:ef:13:30:fa:57:c7:f7:ac:bd:34:72:
e9:80:36:2a:37:8f:17:b9:00:76:9d:b0:07:6f:74:87:95:7c:
19:7b:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:33 2025 by rpki-client