Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File: neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier: Y0L6WbFT1y7sO8129x4zLU9xdn/Hwgd38aRSE+g2aMM=
Subject key identifier: 3F:91:59:9F:3A:40:C1:0B:0C:68:B0:E9:C4:49:BB:3B:C1:6E:BF:42
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 0197B70F24B24E938C416111D9D0C7FEFABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number: 0579
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: t8j471ICb/3Cvs6LyN0j7KYlyJLH+GMPOtqIlFYnjxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:24:b2:4e:93:8c:41:61:11:d9:d0:c7:fe:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=3f91599f3a40c10b0c68b0e9c449bb3bc16ebf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:d8:b8:d7:15:9f:fc:cc:79:80:33:a5:0b:
a1:d8:bb:c0:39:9d:6b:44:ed:ff:3d:ce:60:7c:83:
99:e3:11:78:63:a8:56:0e:9c:5b:29:05:e5:bc:67:
fd:49:56:5b:a5:81:ec:53:4b:0d:cb:8e:e1:39:a6:
0c:75:a7:a7:a3:7f:a4:12:48:b7:86:bc:3d:2e:01:
5d:4f:90:b1:36:f0:66:22:0e:5b:73:aa:db:35:4c:
ad:1d:cc:12:fc:19:b7:5a:0d:80:a8:3f:5e:5f:5f:
a3:9d:84:f6:f4:46:9e:b6:8c:8d:48:be:e0:42:c7:
37:37:22:73:6f:89:f7:a6:00:45:69:87:c8:81:cc:
14:3e:18:84:3d:04:8e:8c:5c:d5:22:2e:71:ae:59:
30:e7:39:d1:ea:af:a0:26:fa:55:e6:28:80:d6:ff:
a5:4a:67:1e:2b:42:dc:92:84:6e:0f:49:75:ad:d1:
8b:79:6d:7e:e9:15:b3:a3:be:ee:6f:e3:a4:42:32:
76:02:14:ee:eb:89:42:10:13:ca:b3:ba:b3:bf:5d:
4c:d8:bf:54:50:29:6d:fa:27:7b:9f:96:64:8a:5c:
bb:a1:f1:da:ef:58:98:63:5d:c3:7d:b4:a1:9c:64:
77:e9:e5:b7:f7:e7:94:4a:80:45:af:9d:f4:97:35:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:59:9F:3A:40:C1:0B:0C:68:B0:E9:C4:49:BB:3B:C1:6E:BF:42
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:73:50:f7:9a:99:cd:05:35:fb:15:11:fc:f6:8f:f6:9d:64:
7a:14:3c:34:dc:15:2a:f2:da:ff:04:ff:d9:78:1b:11:53:7a:
3e:41:16:f8:70:7b:e8:98:36:4d:f0:c6:68:a8:fd:14:cd:66:
15:40:dc:6b:38:21:c6:98:7e:f6:dd:e4:4d:23:1a:28:05:96:
f4:54:8b:c6:dd:5c:f5:1e:ff:b8:a3:52:23:ed:f5:9d:69:20:
60:45:91:90:72:d9:40:ac:76:cf:5f:eb:8d:42:98:1f:37:50:
4f:07:70:ad:6f:5f:93:22:06:d2:f4:84:f8:01:6f:eb:26:b0:
11:c2:74:d5:f4:b0:a1:f9:4b:1d:2a:7f:e3:8b:b0:69:d1:4a:
b8:70:d9:f5:77:5e:73:76:1a:e2:2b:9c:78:3c:84:05:2f:92:
b3:20:f1:fb:5b:a2:92:b0:ad:a8:7e:bd:78:bc:ec:ad:bd:46:
92:65:e0:44:17:b5:2d:23:28:d3:29:9e:54:46:5f:95:d4:8f:
cb:65:05:f6:51:e3:6b:71:b5:95:e2:38:e4:a1:ea:64:42:78:
a1:e5:42:f1:9a:3a:12:a4:6b:b7:62:da:ae:31:7d:69:10:0d:
c6:35:73:c7:d3:42:23:f7:80:6f:3a:22:38:4b:33:e1:dd:4d:
12:5d:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:02 2025 by rpki-client