Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: eAQ4XsHJDvGvFPDBRzgkjMSyh+CQqDVhcJlvm67RevA=
Subject key identifier: 35:E6:15:C8:B5:79:3B:B3:A1:5C:39:C9:BA:CF:53:E5:D4:2B:5A:E5
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 01976DABB2F4832FE8C8ABB66C0B3257B484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0A81
Signing time: Sat 14 Jun 2025 09:00:58 +0000
Manifest this update: Sat 14 Jun 2025 09:00:58 +0000
Manifest next update: Sun 15 Jun 2025 09:00:58 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: 5U6OIi/sF3YLKe8iOGj0iT8A7/ubC3OzVLu5mz/Ym5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b2:f4:83:2f:e8:c8:ab:b6:6c:0b:32:57:b4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Jun 14 09:00:58 2025 GMT
Not After : Jun 15 09:00:58 2025 GMT
Subject: CN=35e615c8b5793bb3a15c39c9bacf53e5d42b5ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:8b:d6:c2:10:6b:43:5d:e8:a0:44:3f:7c:
d7:e7:5a:0e:25:0b:da:17:2a:bb:d3:3f:ec:9f:fb:
ee:e8:a1:89:eb:a1:ea:cb:2e:5c:19:23:60:25:bf:
af:7f:ae:09:ce:37:6b:11:7d:cb:13:97:dd:2e:15:
da:83:5b:df:33:bb:35:6a:ca:76:29:84:85:c8:43:
d7:8f:02:69:6f:e2:0c:23:9e:cd:ae:fb:9a:03:f8:
5e:28:90:2b:68:0a:f0:71:81:98:31:a6:64:f3:c4:
6f:db:29:b0:0d:07:6f:db:ca:bd:46:cc:9c:a9:cb:
3e:07:30:37:14:07:24:85:ba:16:a9:c6:3d:85:9e:
e1:29:01:99:87:e0:14:0d:7f:4b:4c:a6:27:90:49:
e1:38:34:b5:1b:49:ef:88:58:9f:ba:97:4c:67:d0:
3a:fd:09:21:b5:76:ad:ca:4e:ef:69:7c:c7:66:75:
e5:f7:e0:c7:0e:44:34:c2:36:83:8c:c2:2e:9a:a4:
c3:09:a6:1c:04:5d:19:4d:a4:82:35:7c:d8:18:98:
59:92:36:36:96:af:b9:72:13:5f:af:00:fd:53:79:
e4:74:bf:02:92:64:15:cd:f3:4e:ce:6c:e7:d6:5c:
f9:7c:e3:8a:f0:71:a4:64:86:58:3d:73:6b:8c:db:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:15:C8:B5:79:3B:B3:A1:5C:39:C9:BA:CF:53:E5:D4:2B:5A:E5
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ce:d6:12:f4:ba:ae:d0:b9:ae:73:9e:02:df:18:68:9d:65:
7b:b5:54:42:9c:ba:06:b5:1b:c9:e1:74:78:2e:a5:5b:58:4b:
73:e5:96:23:1b:db:c6:43:33:ce:f1:67:08:42:69:4a:7d:3e:
84:72:6e:48:7f:cf:e6:fd:e4:b3:b7:e0:19:9f:95:ab:ae:58:
19:d6:07:1f:29:cd:0b:08:44:21:8a:39:c8:27:e3:d4:41:53:
39:f3:a4:0a:4b:57:e5:42:fe:e4:13:46:17:66:89:30:89:d7:
c7:ab:4e:15:2e:8a:e9:e8:7e:bd:45:f5:b0:3e:16:09:f1:2e:
01:aa:21:c2:d6:e9:e8:3b:82:0c:a2:92:ff:61:2a:66:3f:4b:
8e:ba:14:37:f1:5a:1d:96:12:56:77:c1:72:b1:a1:1b:e6:2f:
d1:08:63:7f:87:76:04:71:1c:22:89:80:51:12:07:21:d0:b8:
23:1c:7c:18:30:d7:96:67:29:37:44:20:7a:13:ae:48:56:6d:
bc:e3:69:08:20:11:f1:8a:42:08:9c:88:20:d8:74:a0:09:df:
fc:df:ac:32:14:27:f7:d1:2a:7b:82:d3:9e:fe:9c:32:a6:00:
35:e3:61:31:5f:78:ed:70:2e:c8:71:16:ba:01:c3:e2:1e:25:
35:01:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:19 2025 by rpki-client