Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: B1SSJpRMdZvyPso/ftEdAzAASsTH3gNhuvNweOwQz+U=
Subject key identifier: F6:20:4F:04:71:7D:40:EF:2D:CD:B5:13:2F:0E:99:73:69:BD:37:B8
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 0197B7EA4C27BD7D88DF29B142594E13A00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: LE7s0jchiUV1hLootYTlQfRuOJI.roa (hash: oM9Ns5INXcavBCDI0rWwpJS6+8nTzRBarLPa9X7uMyE=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: 287svqVT6magdCh+lSzGKMhVtNkY3AC6udwmXj1Fnkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4c:27:bd:7d:88:df:29:b1:42:59:4e:13:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=f6204f04717d40ef2dcdb5132f0e997369bd37b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:2d:44:4b:f0:64:5d:e1:02:2d:53:74:bf:
65:48:34:5c:87:1e:3d:7b:72:44:82:4f:8d:d8:1c:
b2:fd:1f:05:cd:8d:f3:15:20:bf:92:73:6a:a0:77:
f4:2a:52:6d:ba:98:5e:89:29:eb:8d:6b:1b:07:ed:
14:4c:b3:87:69:c1:9e:a5:84:63:d4:57:ce:5c:12:
87:b7:6d:5d:14:9f:32:41:08:f1:60:1b:43:a5:47:
2c:e1:03:16:51:ef:14:f3:0c:2d:b9:0b:1f:58:50:
66:2a:97:91:ed:c5:e1:85:96:bd:a4:59:c6:30:aa:
83:2b:f1:e3:ea:08:d2:88:39:89:f4:4b:4d:d4:49:
0a:38:2b:e5:35:ad:2e:34:a4:74:55:4b:fa:69:f5:
fc:e8:00:0a:80:0d:fb:5e:d9:3b:d3:db:e0:f4:a3:
41:51:77:7a:a7:61:e8:e9:e6:ec:d6:f3:db:fa:b7:
4d:92:0f:8d:1a:15:7c:bc:10:e5:29:99:4f:68:7f:
62:3d:17:b8:fa:e2:b7:db:7d:a8:0c:f6:1c:83:d5:
b3:5f:1a:d8:5b:3a:dc:92:2c:eb:5d:61:81:f5:e6:
9e:7a:0c:33:38:84:19:b4:f0:3e:08:08:2b:aa:f9:
4e:d0:f3:ed:82:2a:1f:d1:77:08:6a:62:80:4c:c3:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:4F:04:71:7D:40:EF:2D:CD:B5:13:2F:0E:99:73:69:BD:37:B8
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:a8:57:25:f8:6a:45:a7:e0:57:2d:e3:9a:25:63:fd:49:
6f:0e:44:b7:d6:d1:0c:3b:80:63:21:a5:65:a9:69:d3:33:07:
e4:d9:ee:4e:fe:a2:2e:72:cc:dd:ac:57:66:96:53:de:00:76:
1c:ed:59:a0:92:f1:77:51:09:5e:73:fd:5a:57:fb:35:32:a1:
33:65:80:65:bc:86:96:5f:55:68:17:48:5f:cc:47:48:85:37:
c0:41:84:3d:5d:60:9c:42:98:d5:ee:d6:48:38:7c:97:a3:9d:
88:c5:fb:d4:ea:65:7e:51:0f:b6:6a:fa:70:0d:c0:4d:bf:54:
41:55:98:b7:89:85:d5:d4:0a:a1:12:4a:18:4a:9a:42:b0:6c:
de:a5:98:40:4e:7d:dd:f1:6e:05:2c:94:84:e6:45:fb:45:c5:
f0:ba:3e:6b:f6:b4:37:c7:66:70:00:64:fa:c0:44:4c:12:99:
e8:f2:4b:1e:e4:39:c2:a1:19:81:dd:95:6c:f7:5c:ae:49:26:
f2:63:b3:10:52:a3:a7:0d:b2:a1:39:d7:36:8d:49:a3:31:3b:
58:6e:be:c7:1f:21:70:31:c5:0d:63:62:b0:da:cc:b6:5a:66:
9d:48:4d:83:52:9f:7d:5a:9e:ed:4f:b9:37:05:e6:4e:69:c7:
6d:a9:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:35 2025 by rpki-client