Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: 6XE3yYzz6Uvib44a3VwJpv9j/XtY1ww/dY3r7WVgEA0=
Subject key identifier: 7F:CC:C4:AA:18:85:7F:9C:89:B2:27:5A:37:16:49:70:9D:52:49:0E
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0197B632821CDD35EDD77BD73EC761F0F144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:52 +0000
Manifest this update: Sat 28 Jun 2025 11:00:52 +0000
Manifest next update: Sun 29 Jun 2025 11:00:52 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: FMjf5Lc8QUznQueJ3ye/wLPkqOL+x0io9IRdK8YSG58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:82:1c:dd:35:ed:d7:7b:d7:3e:c7:61:f0:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Jun 28 11:00:52 2025 GMT
Not After : Jun 29 11:00:52 2025 GMT
Subject: CN=7fccc4aa18857f9c89b2275a371649709d52490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:bd:fb:fb:ce:d6:36:af:5c:68:f4:b2:da:
71:5a:36:e7:83:0e:ab:c6:a8:77:1d:bd:ca:b4:d4:
32:6c:a9:de:09:f7:18:c3:c3:5d:ee:3e:38:2f:1f:
9c:f6:1f:ae:98:dd:04:be:2c:20:a7:7b:d5:a9:d1:
27:70:1c:09:f0:75:c9:33:dc:d9:11:e2:0c:63:a8:
cc:49:d2:aa:aa:d3:fa:d7:b2:4b:55:c4:de:bf:f9:
6b:b5:36:33:b4:92:ee:53:06:10:69:b9:68:65:46:
0a:fd:d5:35:62:46:c0:75:e1:f7:e7:8c:61:f8:41:
97:da:04:58:85:ae:ce:0f:11:38:de:8d:f2:32:cf:
3a:92:45:e0:2a:88:3b:63:b7:30:71:61:b0:1b:fa:
14:50:58:ba:70:6b:6f:29:5e:1d:76:d2:d3:e5:ca:
c5:c9:6f:a7:a9:49:09:20:bb:93:ec:80:83:9a:3c:
e0:80:7a:b7:9b:83:35:b3:c5:3f:7a:f7:a5:ae:ed:
84:65:54:6d:88:11:79:24:bf:7e:19:a7:cc:b4:2d:
f4:42:a5:57:1e:61:ff:a7:4e:fb:80:d4:76:be:c8:
8f:22:0a:46:32:41:98:1c:28:8c:a9:55:4c:51:9a:
53:e7:93:ef:d4:8e:be:85:ac:5d:a3:a0:64:00:0e:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:C4:AA:18:85:7F:9C:89:B2:27:5A:37:16:49:70:9D:52:49:0E
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:96:c5:8f:c3:0d:af:b7:0f:e2:ed:9b:62:6e:36:20:40:b7:
91:f4:ca:85:e4:49:31:31:77:a8:a1:4d:34:b7:4c:8a:df:b8:
7b:1e:54:17:8c:4c:63:ab:56:2a:67:0b:1f:97:76:02:bb:d8:
99:78:8b:7e:90:49:2c:99:72:fe:95:8b:e1:3d:9b:66:13:8d:
8f:dd:ff:54:46:ce:32:91:07:82:94:d3:91:8a:c1:8b:e2:39:
60:6b:ae:4f:ff:50:fa:7d:db:a1:14:cc:f1:67:69:de:52:ae:
d9:c8:93:14:76:79:19:a0:5b:75:b2:e1:79:bf:e1:61:36:0c:
25:bf:1f:64:20:41:7f:1e:bf:bb:6d:be:e5:56:e9:97:1d:db:
d0:71:9f:69:85:c7:e3:95:d6:ee:e5:28:37:d6:20:47:f5:5b:
93:fc:d1:b4:47:4b:88:66:dd:af:38:6f:37:58:c7:4a:6a:1c:
e3:63:10:cd:56:d6:0b:4b:06:98:a3:8c:e5:06:cb:e8:be:63:
07:24:95:9f:ff:a4:b7:9f:0e:8e:e4:f5:a3:00:66:68:9c:53:
7b:b4:6d:50:24:3f:b1:97:41:2b:03:d9:6f:96:7e:55:db:6a:
d7:7d:c4:d9:78:8e:8d:07:1d:fd:44:6c:0a:30:e3:3d:bb:c1:
57:f5:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:41 2025 by rpki-client