Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File: NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier: QVIcqDdWPi7f5S5XbHVvMJpa3tmDbilNW4iSn+it/RM=
Subject key identifier: 31:C2:47:E2:DC:C0:98:AB:E7:D5:52:29:B3:1A:9D:BB:D1:65:CC:CB
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer: /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial: 0197B70F33AEC5A29D5842ACC7D39BC9D1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: G75hDgiyd2LwDpJ76o2-U8H3uNQ.roa (hash: S5OSLsFsbCnXpNSoGI0qFyRFbDiGy+ql70CMoNWtluw=)
2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: mbI0bwq+xb/a+Wo1NqZ/txGP+UGoMFbC7ofQaFYprtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:33:ae:c5:a2:9d:58:42:ac:c7:d3:9b:c9:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=31c247e2dcc098abe7d55229b31a9dbbd165cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:eb:bb:34:a1:ba:0d:14:bd:e5:d2:f6:f3:
60:7c:2e:49:18:ab:b6:18:79:be:11:75:91:52:8e:
57:e1:e3:75:02:9a:e1:19:63:ad:02:fd:72:04:12:
c4:2d:93:b8:89:cf:f1:3a:56:0e:b0:e5:d1:0b:40:
01:70:05:ce:c0:39:ff:6b:11:04:41:d1:87:a3:a0:
60:b2:e0:83:93:c6:60:0c:13:77:44:12:44:aa:85:
c6:76:42:77:e1:ca:5b:ea:62:57:be:c6:f7:aa:09:
02:4c:b7:29:01:70:0e:47:ad:ce:61:ee:3f:65:dd:
51:ea:1c:d2:1a:0f:81:10:48:dd:01:2f:4b:e5:40:
63:01:9a:39:e9:86:bb:ff:cd:71:2a:7b:08:38:f8:
4c:e7:85:a2:af:55:bf:64:7a:5f:bc:70:9e:6d:f3:
4c:8d:45:b1:23:89:d3:37:76:1f:1b:b4:ea:66:6a:
17:f7:f0:25:12:db:5e:b8:f1:b9:d3:27:6b:ff:58:
8a:dc:a9:d4:76:9c:55:88:c0:1d:7f:62:f0:04:87:
ab:bd:c8:17:22:69:eb:42:b9:83:29:a2:5f:68:9b:
4a:10:8f:da:99:16:fa:2a:13:df:57:31:3a:15:2c:
ad:ce:f7:f6:58:3f:cd:41:47:61:93:2a:5a:1e:87:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:47:E2:DC:C0:98:AB:E7:D5:52:29:B3:1A:9D:BB:D1:65:CC:CB
X509v3 Authority Key Identifier:
keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:df:a7:b4:d4:85:3c:05:de:47:4e:f4:dc:be:42:7c:25:
30:1d:fc:be:a1:7c:d2:20:59:4b:10:7f:80:05:27:53:da:bb:
01:42:83:60:e5:ac:de:f7:1f:14:ac:70:e9:cf:f1:f4:45:d0:
22:0a:eb:5e:d5:d7:dc:b9:cc:57:2b:b3:64:65:e1:e3:16:44:
73:80:dc:12:3a:fb:14:91:4a:41:b5:82:fe:54:16:d0:28:ef:
e9:bb:db:2f:f5:56:ad:c1:91:f6:1e:d1:94:59:f6:ae:40:15:
ca:77:c4:45:74:ef:2b:03:1e:bb:c7:ac:15:32:9f:f7:26:38:
22:b7:56:a1:39:0a:08:73:e5:a6:40:bb:6b:36:86:ed:f3:c2:
f1:ca:3e:a3:99:c9:82:fc:7b:fa:ce:f4:fb:fb:6a:b5:9b:b0:
65:78:e1:8f:c2:a4:b5:fc:ba:96:bc:67:13:31:ac:53:f5:4b:
64:d4:d8:62:16:cb:de:f2:78:fd:78:90:36:0a:3c:85:36:60:
69:64:13:55:23:a9:1d:71:48:a8:ed:14:cd:51:ac:31:af:d1:
9f:39:e2:c9:75:a4:28:29:dc:47:7b:d7:cd:30:21:16:eb:99:
2e:81:5b:00:2a:1d:71:e5:d0:68:c1:c2:41:f0:f3:9d:dc:56:
d6:45:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:40 2025 by rpki-client