Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: 8GCO98aS7xDMpCTfZ2V2FihllDwTy1+KgPqLIBJsMCY=
Subject key identifier: 0B:50:2E:D3:2A:60:F2:9F:41:51:1A:ED:FA:66:50:97:AF:2A:4B:FA
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 0197B77CA6AE145DE464E8DF46180FB1ACA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: dwKayLUvrgFLo2CN8yGbrQrWeK4LHdWikBNtrrBGISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:ae:14:5d:e4:64:e8:df:46:18:0f:b1:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=0b502ed32a60f29f41511aedfa665097af2a4bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:a6:19:13:40:c9:27:61:30:78:d0:6f:31:
f9:bb:61:c7:8d:f4:1d:76:56:ab:24:d2:2a:a9:c5:
89:a7:62:51:5f:da:2d:ec:15:d7:c5:c1:98:94:62:
39:c7:36:32:8c:60:ec:32:27:57:56:c1:c4:66:1e:
c8:9e:95:c6:be:78:19:47:b7:f4:7c:3b:f1:87:dd:
f4:be:af:25:5d:21:e3:8d:26:16:6b:db:7f:cf:85:
1b:c6:51:35:b6:7c:65:5f:37:0d:21:d1:93:f0:c3:
34:e5:f7:fe:a4:9a:2e:de:12:4d:45:4e:6a:5a:6c:
1f:36:09:3d:9c:40:79:87:a9:c8:2c:64:36:19:34:
fe:af:45:00:a8:7b:6d:d6:f6:4d:8f:7d:f3:bc:74:
6e:6e:bd:63:a9:57:11:d5:be:6f:01:06:00:96:4c:
e2:e0:6c:6d:08:c4:b9:49:e5:5b:f6:c3:b8:7c:2f:
fa:34:33:10:57:6a:e9:3d:b6:cd:3b:7d:af:a1:4c:
5a:55:65:48:12:e0:13:70:38:1a:d8:65:51:e4:fb:
66:d5:3f:a7:10:3e:bf:6e:a2:1c:dc:79:80:c0:9b:
2e:3e:fc:3f:b8:ca:36:d4:5d:3e:c5:8d:c3:90:90:
17:f5:0b:23:34:23:6a:95:05:ee:cd:bd:22:bb:e0:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:2E:D3:2A:60:F2:9F:41:51:1A:ED:FA:66:50:97:AF:2A:4B:FA
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:a6:8c:9c:3f:bd:5e:18:ad:ed:45:d8:b6:fa:5c:4e:b6:
b1:d3:5e:5a:1b:f4:d4:b9:0c:17:9a:29:15:02:d6:34:16:b0:
8b:7c:ce:37:ce:ad:a5:f6:67:31:14:4d:d0:7f:83:11:f5:92:
07:8e:4d:fd:79:5e:e1:4e:f9:e6:14:bb:45:12:33:a2:f8:6d:
7b:ed:c3:da:dd:6f:aa:a3:d2:92:f0:98:e4:17:76:ca:56:36:
b6:29:3b:6d:5b:0f:7b:db:f9:73:52:d6:35:06:5b:10:cb:d9:
85:ec:7d:21:2c:cc:d7:fc:15:c0:7b:26:28:de:6c:44:c9:5b:
be:92:86:e1:f1:10:f0:bb:fb:13:30:5d:7a:c2:c9:fa:5e:d8:
6c:2f:0f:67:f9:4f:f6:d2:04:35:21:d1:0d:8c:52:25:43:76:
33:bb:eb:b9:99:0d:07:08:ae:d7:37:a0:aa:bf:a3:1e:e4:a8:
7e:bc:48:df:44:80:95:27:6f:d4:06:33:e7:7f:03:7d:12:d3:
65:fd:6c:f4:d4:25:8c:e7:84:a9:d9:33:cd:ea:18:08:1c:be:
d9:04:c7:45:78:c3:18:32:84:ac:bd:27:20:f9:56:ee:11:f3:
e1:78:44:77:b1:c1:3c:8f:e1:28:17:52:25:96:cd:04:2d:d1:
1d:57:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:37 2025 by rpki-client