Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: MScPVTmLUOFurx/YZqrX1foaSNKO6oGcJKVgRtcqpuc=
Subject key identifier: C7:19:F0:C9:DB:C4:87:12:2B:C1:21:17:F2:E7:A5:2E:21:C6:D9:01
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 0197B70F12AEF1EE7244FFBF872C985222F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1598
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (hash: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=)
2: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: az+oPUpToZRIIOEQNa2uF3RpKtmG0Vh7/Pf7cO/+kh8=)
3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:12:ae:f1:ee:72:44:ff:bf:87:2c:98:52:22:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=c719f0c9dbc487122bc12117f2e7a52e21c6d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:58:c7:2c:67:d5:b0:ae:3b:91:c9:7a:79:
41:56:87:f8:b3:c0:82:12:7c:73:47:98:10:e3:be:
bb:54:dc:99:e0:13:25:ef:2c:ce:f8:87:ad:3c:3a:
eb:72:1f:bf:d3:a8:6a:68:9f:b6:7c:d0:06:26:3f:
ef:66:c0:50:a8:a5:25:0e:b0:ea:ef:92:6e:b1:20:
d1:ba:4c:2c:76:8d:4f:9a:dd:38:45:69:04:1f:21:
d6:b8:24:69:d0:70:49:1a:51:b2:bd:a8:85:86:e5:
91:24:1e:e6:1e:ef:81:4f:1a:c0:f3:11:c4:6b:76:
ae:c2:db:66:07:17:86:17:bf:f9:1a:dc:07:12:64:
5e:03:83:31:3e:b8:92:25:99:43:21:26:29:5d:bb:
fa:64:03:d5:b0:71:5c:7c:97:40:a0:ef:3b:ac:e8:
6c:7e:54:b0:7b:81:09:3d:4a:e3:1f:53:37:7e:72:
8d:59:ee:7e:c4:35:e3:e7:48:87:fb:f3:9f:2a:3c:
67:9d:23:54:8c:ae:43:55:7b:f9:47:56:05:90:ce:
1b:97:9d:dd:e2:94:d6:a1:47:35:6d:9e:c4:5b:23:
ba:b3:7b:ff:1f:bf:4f:e1:07:3c:92:23:27:9b:59:
13:aa:27:a9:6f:ac:b4:db:ee:d5:d1:bc:fa:4f:7c:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:F0:C9:DB:C4:87:12:2B:C1:21:17:F2:E7:A5:2E:21:C6:D9:01
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:16:8a:0c:d2:eb:11:2b:b9:c7:ca:56:ef:11:4b:2e:bc:2d:
a3:97:42:99:fc:4f:15:00:99:31:65:78:e7:0e:52:4f:32:7a:
e3:9e:b0:08:eb:5a:77:39:69:74:7b:10:99:16:35:c3:eb:e0:
84:b6:eb:92:e3:42:82:1e:0f:ec:d0:1a:32:72:10:e8:90:ca:
b2:44:70:3f:7d:43:83:47:65:a2:33:1a:95:67:42:35:39:15:
6b:65:ff:4b:3c:6a:f6:75:a0:ee:fb:75:41:4b:4a:89:97:a8:
81:c5:77:1a:06:dd:64:87:0c:ba:21:ff:96:50:ec:93:b5:76:
03:fe:00:38:e5:1f:db:57:28:8d:89:5f:b8:17:40:47:47:61:
e9:ff:72:c1:5a:55:15:60:34:b3:e4:b1:27:da:df:3f:c2:57:
0d:d8:2f:99:1c:56:0b:56:1a:ed:22:2c:d3:06:15:1b:f0:a0:
95:e3:6a:51:78:85:3b:2e:39:da:29:34:31:17:1d:40:6e:0d:
9d:49:66:2b:43:7c:93:83:c1:bc:10:42:15:a0:69:ef:ea:fb:
d5:49:de:48:02:d8:3f:82:9f:e3:30:72:8a:5e:fe:f7:6d:ec:
31:ea:bf:32:7a:97:c0:b4:ee:59:81:c9:b6:47:5c:d5:45:7c:
5c:9a:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:27 2025 by rpki-client