Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier: 2BGXJIwFKqjRUgazWiLLA8f/mxAXZc4aNbLEE/b6Boc=
Subject key identifier: 5A:50:2B:8F:A9:A5:6A:19:9B:BE:1A:FC:0D:1A:BC:B8:A1:5F:C7:42
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 0197C380CB181A907935DC1147F26C3A4CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number: 0B68
Signing time: Tue 01 Jul 2025 01:01:27 +0000
Manifest this update: Tue 01 Jul 2025 01:01:27 +0000
Manifest next update: Wed 02 Jul 2025 01:01:27 +0000
Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: PY2Je7Q5l6crq0t+8qGTzwT01g/ZDg+1rA5xllowu7A=)
2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:cb:18:1a:90:79:35:dc:11:47:f2:6c:3a:4c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Jul 1 01:01:27 2025 GMT
Not After : Jul 2 01:01:27 2025 GMT
Subject: CN=5a502b8fa9a56a199bbe1afc0d1abcb8a15fc742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:c7:6f:8a:54:96:d4:c5:a5:da:e3:fd:55:
7b:29:ce:41:50:01:1b:6c:52:5e:40:e0:f5:4c:e8:
90:ca:4a:bb:56:ff:9a:3a:ed:13:c4:ef:6d:57:93:
3b:ec:9f:49:8b:a3:d1:b3:0f:50:5a:ff:ca:c1:c7:
c3:44:3d:b8:26:d9:35:14:ae:62:56:e0:e1:f0:f6:
16:b4:b1:a5:05:3d:18:cd:7e:17:55:50:89:cb:1e:
fe:d7:a6:d5:01:69:ed:fb:bb:90:d9:91:6b:f7:45:
bc:ea:61:54:1e:a4:63:66:d7:7e:50:04:9d:4b:00:
eb:1b:30:ee:0e:74:7a:c9:b5:d9:e8:a4:a9:ac:3f:
60:d9:27:70:38:c8:8b:66:66:8a:33:d3:2c:e3:00:
57:e3:7a:09:23:9c:71:d2:a2:86:7b:3e:63:33:08:
aa:ef:ca:1b:40:95:98:10:f2:78:f8:72:52:73:b2:
4d:10:42:24:2a:4e:08:da:a9:f9:52:e2:71:17:b9:
3a:d3:83:f7:fc:77:4d:84:93:ce:bc:1f:40:e4:fb:
6d:e8:71:94:a3:40:ba:72:3a:4f:57:51:0f:62:bc:
23:1f:6b:3d:52:b4:c9:5b:4d:92:86:be:1e:b9:46:
30:a4:c9:2f:a8:e7:81:eb:b0:79:0f:0a:98:dd:90:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:2B:8F:A9:A5:6A:19:9B:BE:1A:FC:0D:1A:BC:B8:A1:5F:C7:42
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:12:c2:c9:9f:bb:15:14:7c:28:bd:2c:a0:e6:ff:c5:19:d3:
d8:02:13:0b:b9:20:a1:e8:e6:0d:7d:87:54:9f:ea:37:a6:d1:
63:c8:73:d4:1b:31:9b:87:21:d8:a5:b0:57:82:94:f0:a5:10:
16:06:25:69:71:65:46:6f:22:0b:e5:e0:7e:9f:c3:f9:cb:4e:
2e:45:8d:b7:da:77:7c:e1:02:c2:44:3f:4e:68:c7:76:df:73:
7d:af:dc:92:ec:f7:41:5a:1c:49:6e:97:e2:bb:9f:dc:20:a4:
98:35:7e:be:91:0e:a9:af:1f:22:36:fb:c6:99:bf:53:01:93:
4e:c8:2e:35:3f:ea:ce:fb:2c:e9:6f:f1:0d:fe:a7:48:c9:c0:
32:52:aa:20:04:17:6e:9d:31:45:d0:ab:5f:97:f3:3d:61:68:
62:58:1d:39:cb:95:36:91:de:e9:c0:5c:5c:3e:31:82:87:b5:
be:35:39:43:59:3e:8f:35:49:6d:ef:e6:2b:d8:a4:4e:65:5e:
f1:a4:99:90:77:63:a9:30:c2:fa:1c:c5:bd:7a:99:6c:91:22:
c2:34:d0:8f:41:69:c2:0b:a5:1a:21:fd:9b:6b:ee:9f:89:fc:
a3:bd:b2:3f:55:44:d8:27:b1:3a:f1:93:07:9c:da:79:cb:aa:
08:e2:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:24 2025 by rpki-client