Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: O4SXoS7kcX7MHo7c2cSMlAFE7LidwzgMtrauyp1GDMs=
Subject key identifier: AD:1B:EF:D7:73:63:EF:D2:BA:F2:4B:A4:E7:DA:59:1F:3D:F0:C7:78
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 0197684E02DDF933F1C6928A52755CA38546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 3FQdnoBBIerO4fjH9RjeroGR2wmIdGduL2ixq0lTBu0=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:02:dd:f9:33:f1:c6:92:8a:52:75:5c:a3:85:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=ad1befd77363efd2baf24ba4e7da591f3df0c778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:75:7e:81:47:67:66:ec:1e:0a:18:da:e4:
d5:14:00:82:b4:0a:32:7b:0d:b0:af:9f:f4:87:ee:
97:5a:b9:a0:0b:1c:1a:01:87:3a:c3:c1:5c:55:15:
e1:a9:f2:01:2a:85:28:1e:44:26:53:61:33:e2:24:
66:83:98:14:41:84:16:e2:c0:23:50:a9:1c:8b:d3:
c4:74:fa:eb:5d:a4:c9:a0:66:fe:08:28:6f:a4:3c:
7b:4c:5b:4c:01:43:c3:5f:b4:18:56:ca:38:fc:2f:
52:e3:3e:56:a9:a5:1d:87:20:2d:d0:e2:16:91:c2:
33:75:79:2f:8a:29:b4:17:fc:8b:f5:b0:df:73:e1:
35:c8:0d:8f:e5:74:46:75:41:2e:af:08:23:87:2a:
b8:d8:fc:fb:bb:8a:e8:d2:c4:d6:df:c3:8f:c1:b1:
ff:85:57:a1:b7:65:77:b3:c8:62:2b:50:5c:d7:08:
27:dc:e9:22:6f:a7:e4:76:79:ea:5e:9d:e2:0a:53:
e7:44:9e:d3:28:de:b5:c9:cb:2a:2c:d8:d9:9c:19:
22:8a:db:2f:4d:51:26:a8:96:4b:cd:17:44:53:9a:
b7:3c:47:ae:c5:0a:8d:ba:f8:eb:5c:6a:de:4d:18:
bd:3f:3c:a2:f3:2e:d8:e2:94:6d:00:7f:4f:1c:54:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:EF:D7:73:63:EF:D2:BA:F2:4B:A4:E7:DA:59:1F:3D:F0:C7:78
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e8:15:5c:e7:f3:5a:b5:02:ac:23:56:04:50:5c:54:0d:0e:
aa:11:47:bd:4e:7b:17:5d:53:4f:b2:9a:03:a8:58:dd:8f:d9:
c5:1e:40:46:f2:0f:ef:13:f1:1c:6a:f1:b6:2d:12:5a:15:ba:
8c:db:34:07:0b:08:f2:5b:54:62:8c:bd:c1:32:4e:c4:64:7a:
7b:92:97:e2:1d:c6:d1:0e:58:2f:44:be:68:e6:1d:fb:98:83:
e7:b1:8d:26:c3:24:55:b4:62:aa:89:58:24:2c:0f:25:f6:d5:
6f:4a:a2:62:8c:df:e2:69:0b:b5:25:f1:28:30:f4:af:5f:9e:
77:06:6b:3e:6c:ce:35:a6:26:07:e2:c0:36:71:3e:ce:76:84:
9d:1b:ef:85:fb:49:9c:26:fb:35:58:30:71:f2:29:86:2a:3e:
40:ec:9d:25:48:68:36:36:6f:36:62:48:a8:87:56:f5:50:67:
bc:ca:9b:b6:06:e3:7f:6b:13:66:e0:60:35:d5:c4:fb:b9:82:
6d:94:b3:26:6c:0e:5d:eb:0f:b4:01:aa:72:18:d9:49:4e:66:
eb:c0:8a:46:e9:71:9b:38:fa:23:d2:89:5a:99:3c:29:83:e4:
66:67:88:4b:48:7b:51:c4:77:cf:82:8c:75:19:89:8c:5a:21:
03:e6:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:21 2025 by rpki-client