Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: Jd1rfkj3fYaA1rA98qdRzXjyZDOSglHr2AHjkN/qN6U=
Subject key identifier: D9:F2:CF:7F:1D:10:3D:85:99:AB:9F:E5:88:30:9A:A0:06:BB:EF:CD
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 01977151063F96F25DD0580BF70D8FD23143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0841
Signing time: Sun 15 Jun 2025 02:00:24 +0000
Manifest this update: Sun 15 Jun 2025 02:00:24 +0000
Manifest next update: Mon 16 Jun 2025 02:00:24 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: PWzlYkPeTx2JxSq5dC4pwvsHpkZcCKvCqPoCogNUCSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:06:3f:96:f2:5d:d0:58:0b:f7:0d:8f:d2:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Jun 15 02:00:24 2025 GMT
Not After : Jun 16 02:00:24 2025 GMT
Subject: CN=d9f2cf7f1d103d8599ab9fe588309aa006bbefcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:6e:29:49:ea:39:15:04:66:a2:d7:05:c2:
47:a0:83:55:1c:43:78:a8:2d:e8:f7:53:f7:18:60:
79:b0:72:f4:60:07:92:12:ab:86:8d:92:4e:91:01:
32:2b:c8:6d:d0:8a:82:21:54:b9:fa:f9:b9:c3:5a:
8c:92:0e:29:79:c5:69:80:60:9f:bc:02:28:6f:e0:
96:f9:c7:3d:c4:d2:ed:b7:a1:6e:20:6b:00:76:91:
1f:37:54:cf:66:44:44:72:bf:47:31:6d:e4:f9:61:
12:51:ed:72:5d:b2:02:3c:91:36:a0:87:63:e8:8b:
f0:d6:8d:18:29:3b:1f:bb:9d:88:20:f3:c7:15:66:
cf:fb:84:ea:22:4e:b1:1b:4b:b6:c0:49:97:9d:b9:
d7:80:42:6a:3a:87:01:cb:a3:73:da:d8:93:d5:ac:
45:1e:7b:4d:2a:70:64:7c:3f:86:07:40:d9:2f:5c:
23:0c:51:e2:69:e5:e8:9e:2b:5b:f8:e1:f1:97:2e:
6d:db:f9:eb:1c:fd:31:dd:45:1d:3a:27:90:84:da:
0e:72:59:b7:bc:f2:75:1e:98:00:72:d6:ea:c0:7a:
e6:98:e6:ad:12:08:a9:46:7a:ce:5c:3e:9c:4e:94:
12:5c:c7:f1:63:a7:6a:8f:bc:7b:86:f3:83:28:84:
a2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:CF:7F:1D:10:3D:85:99:AB:9F:E5:88:30:9A:A0:06:BB:EF:CD
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cb:8e:f8:7e:73:ea:a4:5e:ac:21:7e:94:e4:eb:db:fe:da:
23:0e:14:9e:0e:1b:d6:47:e2:d4:f4:1f:d4:f6:52:d7:c1:94:
b9:8b:e1:ef:87:bc:6a:9c:70:93:d0:d6:61:e1:87:74:75:00:
9c:1e:e2:e1:51:a2:6a:0f:4a:fa:0b:35:43:c6:e7:de:b5:22:
7b:da:08:53:07:c9:f0:31:36:a8:70:23:c3:89:05:98:83:e1:
5f:37:1d:5b:00:30:7a:dc:77:a1:48:11:e0:69:9f:45:f7:da:
67:df:13:75:44:bd:c8:93:7c:c5:d5:ef:3b:03:6c:cb:35:42:
39:35:8d:09:82:6e:ab:40:34:5e:d3:57:a5:2a:e7:a9:4c:99:
13:d6:49:3a:1a:db:56:bd:f7:bb:ea:d3:35:76:4b:7b:8c:e1:
8b:aa:53:2c:4a:48:22:59:10:15:53:04:29:2b:f1:81:4d:4f:
d9:60:4a:8d:39:3a:6e:56:8a:a0:d6:dd:47:d1:49:ef:a4:f7:
84:c0:7f:73:31:91:4e:22:f2:84:2b:29:19:a9:06:64:6f:9d:
62:64:6c:48:fa:94:5d:bc:4e:4c:08:cd:07:7c:de:ad:65:f3:
56:9c:4b:5c:1e:a3:56:8e:9c:f6:52:34:1b:5c:46:62:48:f6:
c8:64:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:04:06 2025 by rpki-client