Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: S2ItMIvuwkGdnDioIL6yqbrcoVt6MkDM9MR3xwZB5xk=
Subject key identifier: F5:5E:D1:9D:47:37:F0:1A:1A:20:96:FF:D1:79:D2:4F:EF:83:78:7B
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01977A544A0BD71ADC30BAB8A8472519AC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1553
Signing time: Mon 16 Jun 2025 20:00:33 +0000
Manifest this update: Mon 16 Jun 2025 20:00:33 +0000
Manifest next update: Tue 17 Jun 2025 20:00:33 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: tv7HI33BSPVF6hAdTkWWBxk/ov9n9lQ/W7XjFOsgkpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:4a:0b:d7:1a:dc:30:ba:b8:a8:47:25:19:ac:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jun 16 20:00:33 2025 GMT
Not After : Jun 17 20:00:33 2025 GMT
Subject: CN=f55ed19d4737f01a1a2096ffd179d24fef83787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:74:ba:f2:09:83:98:fd:8c:78:36:83:cf:
cf:d3:64:4d:e2:5d:24:52:59:02:90:ce:01:df:7c:
24:88:04:79:bb:65:47:8e:6b:93:c4:3c:f2:fd:64:
19:e0:be:64:00:7e:4c:e7:87:2d:1e:41:f6:87:d0:
60:f3:d4:fd:cf:45:5c:8d:5f:34:85:a2:bc:49:ad:
ca:aa:04:7f:60:6c:bb:28:4f:ec:25:b2:07:fd:a7:
3d:e1:40:83:65:8d:a1:48:e3:8f:c8:d8:cd:8e:57:
72:7b:da:fa:d4:68:af:b1:df:4d:f2:ac:62:99:1c:
73:06:7f:b6:58:39:38:e4:0c:8e:12:a9:c3:e4:05:
43:26:60:e9:6e:c6:7a:0f:15:5e:12:df:e6:ed:1f:
0f:f0:22:aa:bb:97:2b:20:61:5b:1f:65:6f:43:19:
c8:21:f2:6e:6e:8e:31:84:bc:22:ee:75:95:bb:c5:
12:80:c8:8c:a6:b2:a5:46:94:09:90:ed:c5:bb:34:
0c:21:c7:8d:ee:cb:dd:07:ce:bf:46:80:32:48:32:
25:35:5f:68:03:3f:30:6f:bb:1c:ae:82:0c:81:57:
34:fc:1d:dc:65:c5:8c:5c:38:27:c2:eb:2a:d2:7c:
37:b5:fc:a3:5f:3e:3a:fa:0d:84:15:f4:44:24:62:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:D1:9D:47:37:F0:1A:1A:20:96:FF:D1:79:D2:4F:EF:83:78:7B
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ad:db:8e:4b:eb:ad:af:5d:90:a6:8f:de:d1:f1:df:f3:f6:
fc:62:3d:90:de:d8:bd:d2:df:ab:71:e0:5e:ff:18:c6:50:20:
24:77:b8:ae:7a:04:c1:1b:07:c3:80:71:48:72:bd:3a:f6:14:
2c:1d:4d:88:eb:7f:26:f1:e3:47:ca:e7:cc:62:f1:4e:2e:db:
5a:6a:c9:90:28:ea:72:7b:3d:dd:df:6b:ed:92:d7:bd:41:5b:
d8:47:95:91:7a:05:4c:42:ef:4a:e1:ce:4c:f2:52:64:3d:1e:
f5:f1:9d:72:67:94:3b:25:46:4f:73:62:2a:c8:60:33:11:28:
35:d9:ca:e8:fc:34:f1:70:04:d0:08:13:68:e0:b2:2b:70:43:
f3:75:9d:f9:3a:11:75:19:57:a6:ef:a3:59:25:24:3d:6c:1b:
ab:6e:1b:ce:9f:5b:90:26:b5:60:db:cb:3e:61:f5:05:cc:ca:
fb:7f:d8:ab:47:d6:9c:87:88:bc:ec:e4:ce:cc:55:6b:f5:dd:
86:20:e4:6d:c5:fd:cc:dd:1f:15:7d:82:1c:59:47:f4:58:62:
79:ec:67:d4:ae:92:21:4d:c7:88:c8:cf:5c:0c:db:d0:2d:b4:
61:be:a5:33:30:86:28:c0:4e:65:8a:80:14:e4:dc:46:73:59:
27:d3:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:23:29 2025 by rpki-client