Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier: GbbUHBUt5aitlsyTGAiobOvIvfTaMgLQHmtkW5yS9cM=
Subject key identifier: 18:31:44:E9:F5:6A:09:D0:5E:45:EE:60:4C:7F:F1:CD:A7:F8:07:F7
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial: 019777C1311DC844683E9BE13D51846C21B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number: 1D
Signing time: Mon 16 Jun 2025 08:00:39 +0000
Manifest this update: Mon 16 Jun 2025 08:00:39 +0000
Manifest next update: Tue 17 Jun 2025 08:00:39 +0000
Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: mqg9LLI2CyQv/msqHmioZ0uTnhGhhFhv8pAl6lucF0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:31:1d:c8:44:68:3e:9b:e1:3d:51:84:6c:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Validity
Not Before: Jun 16 08:00:39 2025 GMT
Not After : Jun 17 08:00:39 2025 GMT
Subject: CN=183144e9f56a09d05e45ee604c7ff1cda7f807f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:94:3a:21:f7:dc:82:e4:37:e0:d9:03:50:
24:37:71:45:c2:4d:bf:38:d5:43:eb:8c:be:b2:9b:
b1:36:5c:7c:12:de:ce:13:a4:61:de:ec:32:9f:72:
c2:ad:dc:cc:f2:96:58:88:3b:3d:3b:ac:0f:07:a9:
9a:83:1c:14:20:b4:63:d2:1d:6a:84:b2:fa:19:be:
6a:7c:f6:b3:d3:b8:9d:5f:39:97:65:bd:56:e4:9c:
7d:e8:5d:ec:e8:29:8e:34:ad:d1:94:7f:05:1d:a9:
6a:09:58:c8:f6:60:fe:23:6d:b2:8d:92:6c:27:27:
8a:3b:49:ea:b3:44:ed:ad:42:ee:a6:8a:56:2b:d2:
83:83:b3:a8:4f:46:63:4d:a8:37:d4:15:03:5a:38:
09:ea:f8:49:45:e5:c6:22:57:f4:80:ff:7c:a8:c2:
6d:25:a7:df:d1:95:4b:f3:2c:19:40:6d:e8:32:5d:
14:92:c3:15:81:b6:f6:12:10:13:60:7a:80:b7:a8:
47:0c:ae:d0:0f:b0:2a:6c:59:d0:13:f1:6a:f2:a3:
a9:e7:5f:6c:f6:df:fc:b1:9e:b7:c9:ed:43:85:55:
77:9d:4c:96:a1:8e:9a:ac:32:63:45:fd:af:56:d9:
fb:cd:3c:c9:bd:66:2d:ad:f4:2b:07:2d:bc:b5:d1:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:44:E9:F5:6A:09:D0:5E:45:EE:60:4C:7F:F1:CD:A7:F8:07:F7
X509v3 Authority Key Identifier:
keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:89:7e:53:14:2d:be:76:3e:8d:0a:7b:9a:e8:e2:17:87:
2b:ac:ea:69:17:ec:fe:5e:c9:ab:48:6c:4b:c6:82:06:46:ff:
8b:fa:e4:f8:cd:b7:52:33:1c:67:93:91:c1:33:5c:73:19:73:
2d:82:a2:f7:2b:53:59:fa:d9:58:9d:8b:09:a1:fa:d2:89:29:
09:d8:46:75:47:7b:a9:a2:a4:93:d0:f0:50:76:be:99:f9:a3:
0b:56:c6:71:89:9b:8e:d9:38:82:a5:23:b1:88:60:3f:ee:e1:
c7:cb:77:21:ae:f6:17:de:a3:19:5a:04:0b:33:8a:bb:79:81:
44:f4:93:75:57:bb:6f:d9:9a:ec:24:84:6e:b8:e1:a1:00:8a:
f5:fb:d6:04:d1:21:25:bf:eb:a2:8a:43:36:92:06:e6:9d:ef:
f5:1a:73:99:ea:f3:6c:a3:68:fd:3a:60:20:41:bc:92:19:37:
0c:ea:c2:5a:1d:56:b0:9a:20:64:3f:b0:f7:b3:9c:b0:7c:e5:
e1:61:7c:3d:bc:d6:52:2c:d4:46:0c:65:1d:54:60:76:dc:d9:
4a:84:31:87:97:c2:cd:c2:fc:0e:9a:8c:df:28:76:7b:c5:51:
82:81:90:8b:1a:45:19:27:ab:9a:1d:1c:8f:fb:13:ca:e8:75:
13:76:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:18 2025 by rpki-client