Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: 6IvlKy5GHtQcP6/PJM2EPRzrK65+RIA+Nc11DgGN6uQ=
Subject key identifier: 17:77:74:C0:CF:51:7C:FD:59:9E:1F:15:9E:6E:6A:2F:F3:FC:7F:10
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 0197B6D7AA81A882091974EE2F7846F54728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0941
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: G6IDwFvLM4TCLZB77CkIaIEK3lD0zIV+oJ+U9l2hSJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:81:a8:82:09:19:74:ee:2f:78:46:f5:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=177774c0cf517cfd599e1f159e6e6a2ff3fc7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:5b:1e:a8:ea:03:60:f0:60:be:fd:b6:6c:
55:dc:fb:30:9a:30:7a:d7:19:35:ac:1b:51:ef:27:
72:57:a7:ec:b4:1e:34:a5:c4:a7:f1:9f:45:22:3b:
e6:14:ae:a0:8b:1f:7e:c2:9d:c5:56:71:f5:82:5f:
48:c2:aa:ed:d8:97:9b:04:87:b8:92:53:87:f5:54:
9a:2e:8a:d4:86:98:57:a1:17:8d:6a:ad:a3:a7:a0:
39:78:9c:7a:d4:bb:fa:06:28:f5:85:40:09:24:50:
92:e4:81:15:11:ad:4a:36:3b:d1:18:28:23:d2:69:
2b:92:c0:0e:1c:43:88:02:3e:e8:8b:57:a0:0f:e9:
16:03:d6:19:2c:1b:4b:06:68:2d:f6:64:f7:7f:1e:
70:c9:c2:27:37:1d:b5:99:92:23:dd:1a:53:4b:ec:
11:49:25:df:ac:91:70:60:72:ad:7f:50:76:c6:04:
24:9e:e8:d9:a2:9f:92:38:f5:f2:c1:4a:63:11:e1:
64:22:05:e6:de:4a:8d:db:e1:1e:d2:b6:1d:81:eb:
33:69:8b:67:4b:61:60:6b:e1:c0:5f:65:ac:52:76:
0d:70:56:38:bd:1a:aa:8a:60:ad:92:dc:e0:22:fa:
75:af:01:ff:67:e3:42:90:af:8e:ac:8f:4a:af:a6:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:74:C0:CF:51:7C:FD:59:9E:1F:15:9E:6E:6A:2F:F3:FC:7F:10
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:48:f0:0e:8f:89:c2:ef:9f:8a:19:dc:dc:96:72:ea:61:47:
56:a5:cd:a0:6f:fe:fa:d3:4c:7a:5b:7b:4d:fc:a0:5a:6d:b1:
80:e9:80:aa:84:0f:e3:98:28:da:8f:af:da:a5:ce:56:e8:38:
d8:ee:31:44:f3:60:b5:35:6e:29:01:c7:c8:32:5c:b8:99:c4:
fc:58:62:37:a8:bf:8c:99:7a:16:42:13:6d:fc:97:e6:d6:d2:
6f:99:9a:d3:96:7a:d1:b1:4f:61:a4:c9:5c:03:5e:5d:bf:3e:
0e:dc:c8:bd:bb:a8:fa:2d:a0:85:d0:71:84:16:aa:fc:52:74:
52:c3:7f:9b:72:40:97:3e:17:4d:e2:bf:19:3b:75:da:fc:d8:
bf:f0:b8:f7:9f:94:10:83:e5:d5:c2:72:00:53:92:e3:c8:b5:
ae:ff:16:60:5c:a5:da:59:3f:b1:da:95:d7:18:df:04:ad:af:
ee:bc:17:db:a5:80:b4:87:1f:93:38:f0:56:8d:ae:9d:69:66:
85:3a:29:02:6a:f5:70:29:6c:70:0c:83:08:ad:ce:f9:7c:26:
4d:71:0e:6f:6b:b6:a1:a6:81:0f:f0:08:7c:04:2f:f4:fd:05:
31:18:24:fc:ce:eb:4d:45:38:14:e9:f6:83:5e:23:51:2d:c1:
06:de:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:47 2025 by rpki-client