Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier: iysr7/dWJtWP0fmj8Uajl1UGxq2jhX9D003wknUgr4c=
Subject key identifier: FC:C5:EF:1C:B5:DF:79:C5:DE:8A:3A:09:A3:B9:06:F7:D5:C7:B6:7C
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 0197B6D7825BF9D843B95FDBB2A49D36F8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number: 1478
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=)
2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=)
3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=)
4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=)
5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=)
6: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=)
7: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=)
8: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: Vgqq6EkGgOyLNW9LL/Uwe9iYEUo4kWNcVPIPr2Vpj/M=)
9: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:82:5b:f9:d8:43:b9:5f:db:b2:a4:9d:36:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=fcc5ef1cb5df79c5de8a3a09a3b906f7d5c7b67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:6c:25:2c:82:27:25:d7:7d:7e:f2:9d:2e:
f1:f7:b9:b8:fe:49:d4:06:90:45:19:e0:8c:6f:94:
ab:eb:36:22:e5:8a:41:82:58:f5:25:72:2d:cc:eb:
b4:1e:0b:0b:1b:a7:83:d2:35:af:6d:ee:a8:ef:f3:
41:c8:42:5f:2b:49:a7:bc:3f:86:44:8b:58:31:51:
57:2c:50:ef:0e:57:9f:b7:6f:b5:38:53:4c:72:7d:
92:34:a9:47:f0:13:96:37:ca:44:60:c2:5e:3d:80:
70:d3:f5:25:96:18:6c:94:ec:95:00:3e:ba:0b:63:
24:67:31:5a:66:48:d2:14:e0:b3:2a:86:79:94:d5:
88:1c:88:39:e8:16:5e:b4:d4:76:66:88:9e:ed:b0:
b2:72:02:a0:39:ac:6b:9f:b3:e1:41:8e:75:e4:2b:
6d:e2:3c:6d:4b:35:2f:e0:08:7c:16:68:a3:6b:5a:
6c:c4:9b:60:73:4a:5f:f7:ff:b4:9e:69:77:3c:89:
f4:99:a8:03:02:07:73:51:04:eb:dd:40:32:e6:31:
59:e7:e3:e1:f4:da:04:3c:b8:98:f3:2f:4b:21:f3:
55:69:26:27:47:f2:2c:83:1a:c1:9c:ec:13:9a:1a:
a7:c4:b6:4e:40:34:6f:4b:83:36:27:29:6c:a6:fe:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:EF:1C:B5:DF:79:C5:DE:8A:3A:09:A3:B9:06:F7:D5:C7:B6:7C
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fe:cf:4d:86:aa:39:09:bb:fa:de:34:73:c5:5a:93:f1:d4:
99:ed:05:5b:b2:00:a2:cb:2b:aa:5b:08:7f:86:97:84:0b:47:
0c:36:02:e2:2e:09:b9:84:26:28:0e:9e:60:d4:f6:b8:fe:00:
b8:6b:4a:07:a4:c6:de:d9:62:65:21:6a:45:5e:41:32:19:95:
f1:ec:3f:f3:30:58:80:cb:81:0d:03:87:73:2f:01:d8:77:50:
2a:1e:30:b7:3f:c6:71:d2:d0:bb:a3:62:f7:58:f9:2d:25:e0:
4b:98:b5:e6:58:bb:e5:85:00:46:23:c0:90:3e:54:9f:9f:59:
7d:f0:e5:46:22:0c:29:1d:ae:9a:c4:ab:70:7f:dd:10:dc:48:
f1:2e:fa:5d:cd:68:97:ac:19:aa:e7:95:5e:dd:11:69:b3:2d:
5c:32:6a:d9:37:8c:92:7a:de:15:c0:ee:83:3e:df:4b:63:72:
98:c5:e7:68:0a:20:ef:39:34:53:d8:e0:d7:a0:7b:16:d9:7a:
aa:31:e5:54:fd:23:3a:09:66:cd:80:22:69:fc:88:73:f6:c5:
ff:97:41:71:bf:31:a3:e2:2d:e0:4f:ee:2d:04:b0:46:0a:0a:
b5:38:44:6f:78:d9:b2:d1:c1:4a:5d:54:d9:f1:d7:54:68:91:
37:3e:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:15 2025 by rpki-client