Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: VJ/9zsJa3LWjvQnweCGUMedM0bG+ABrLfUAioPQJMG4=
Subject key identifier: 7D:30:83:0A:08:82:86:BB:A9:81:28:05:56:C8:7F:34:4A:35:CD:3F
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 01976BF48C9DCC1DA30C9985DE9C3C8260A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0DC2
Signing time: Sat 14 Jun 2025 01:01:17 +0000
Manifest this update: Sat 14 Jun 2025 01:01:17 +0000
Manifest next update: Sun 15 Jun 2025 01:01:17 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: knzn1oroJHM79wI16yhh10cimsDZLndAZjm3EAAeMdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8c:9d:cc:1d:a3:0c:99:85:de:9c:3c:82:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Jun 14 01:01:17 2025 GMT
Not After : Jun 15 01:01:17 2025 GMT
Subject: CN=7d30830a088286bba981280556c87f344a35cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:ef:46:21:43:2e:ff:03:6c:25:8d:c0:de:
89:24:91:63:4b:c9:d6:52:59:00:46:19:2b:7b:45:
64:f0:2b:1c:54:d8:fd:36:7f:e4:59:76:82:eb:53:
68:a5:1c:f4:a6:93:f0:1e:c3:36:85:51:a3:4d:ad:
04:7f:6a:1f:56:a7:f5:0f:98:47:5e:cd:cf:a0:2a:
d0:de:26:8b:93:ea:a1:fc:17:21:d0:10:af:d2:b1:
17:42:32:98:59:78:61:d3:c0:95:33:e9:fc:4d:65:
59:91:cc:29:d6:42:91:aa:52:a5:24:65:f3:8d:fb:
e7:81:88:df:a2:0e:5c:91:78:21:2e:c0:58:6d:e4:
cd:b3:b5:d8:76:c3:02:a3:3d:d3:63:90:48:11:52:
8a:7c:3f:92:ae:9e:76:65:63:5c:c7:84:89:3e:15:
3e:0b:da:7c:3b:26:12:1d:a8:d3:2d:c4:b0:92:de:
9d:99:b6:fb:a1:d7:49:01:4a:8f:fd:43:1f:48:e5:
ac:2b:ad:d8:59:c6:c3:c9:c4:23:94:00:dc:57:59:
5a:2f:3b:fa:75:7c:b3:d4:f6:fa:ae:41:74:d8:57:
97:98:5a:7d:16:18:e4:15:88:b0:25:27:4c:42:8b:
8e:ca:54:8c:f5:a8:77:64:c1:1d:65:bc:ab:ee:88:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:30:83:0A:08:82:86:BB:A9:81:28:05:56:C8:7F:34:4A:35:CD:3F
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:35:66:ff:5f:42:60:e2:d4:ba:9f:0e:07:aa:1c:39:68:
5e:6f:36:8f:57:f9:26:76:42:0c:07:30:bc:ee:9b:50:e3:98:
75:63:e2:9f:ff:ca:a3:53:4e:b6:bb:e5:bc:fe:9f:54:f7:20:
0e:a8:82:69:08:78:6f:81:ef:4a:db:ac:cf:db:88:a2:e7:d0:
9a:78:ec:d4:58:b0:f5:7d:6b:9a:85:bf:bc:89:0d:c6:b7:2a:
83:3f:55:89:92:d1:89:77:48:71:15:ad:37:69:ab:4e:0a:be:
ee:4c:1e:12:18:c0:ab:36:0f:e1:ad:23:e2:d1:a4:6e:e3:77:
7a:d5:55:fc:c5:3f:11:18:a6:b2:0a:1a:35:da:24:d9:3a:3f:
ec:06:b8:f0:33:1c:1c:73:18:35:53:f9:0f:6b:fe:c4:36:c1:
d0:1e:01:87:01:f6:86:d7:c6:35:79:69:86:10:8f:5b:03:b8:
b9:74:3d:e7:7f:b1:8e:b6:51:f2:da:9c:bb:8e:02:26:27:e3:
90:be:d2:34:ed:79:bd:d1:c4:04:73:65:dd:01:17:64:59:1c:
c1:09:1c:2a:19:f5:68:d4:9a:b0:15:b1:7e:6c:34:74:69:eb:
a1:02:7d:9f:7a:86:bc:d3:cf:36:6b:bd:12:2e:ee:18:b8:c6:
b2:e1:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:36 2025 by rpki-client