
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: K7oQJ7y8XdgnSmGjdAAl5GNUjn4hiYWbxI8lQl80Cpg=
Subject key identifier: CA:B0:0C:E2:BC:2E:39:9C:AF:DC:14:01:E7:82:AB:14:59:26:0B:3E
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 01976EBDE9FF56F1FECF86A8277A9CADB8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 14:00:29 +0000
Manifest this update: Sat 14 Jun 2025 14:00:29 +0000
Manifest next update: Sun 15 Jun 2025 14:00:29 +0000
Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: LJ//97WNAOLNkykim9I+LtkO1/pwIfWNPnGbkH2v+HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e9:ff:56:f1:fe:cf:86:a8:27:7a:9c:ad:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Jun 14 14:00:29 2025 GMT
Not After : Jun 15 14:00:29 2025 GMT
Subject: CN=cab00ce2bc2e399cafdc1401e782ab1459260b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:b6:46:73:9b:24:75:2c:f0:8b:62:88:ff:
ef:b0:22:80:b1:3a:b3:0e:4b:63:6b:a1:13:91:e9:
38:b3:8b:73:99:08:0d:8d:92:23:c6:c9:46:2f:ac:
16:65:62:7d:95:c4:a2:01:e5:7c:7e:82:8b:db:f8:
54:2e:42:8a:e6:2f:dd:21:d9:ec:c8:53:27:11:a0:
89:22:49:19:61:f7:91:4d:5d:75:ad:9e:fd:1c:33:
49:a5:f7:f7:8e:d3:0e:e2:a6:18:18:b5:d8:79:ba:
63:a3:01:b1:02:01:8e:88:0e:36:39:f3:3d:95:35:
ce:b5:d5:39:94:57:8a:b1:56:da:0f:75:e6:a0:20:
bd:4f:95:cd:06:ca:e5:c5:d5:97:a5:82:5e:5f:c4:
b3:0e:1d:0c:0d:b4:bc:cf:27:38:8a:ba:3f:30:74:
fd:80:65:9c:aa:f7:76:55:97:63:f5:be:ce:e9:27:
c1:11:7d:cf:e5:41:7c:b4:f0:2b:ad:6e:4e:5b:f1:
1a:13:af:ba:6f:ad:9d:96:16:21:88:ee:ca:4e:c1:
9c:79:2c:99:6d:cd:9f:89:3a:2e:76:d4:1d:76:ac:
91:c4:07:54:80:10:d9:89:6b:1f:bf:ef:45:b5:44:
85:a1:78:dc:5d:de:51:df:c5:d9:b2:da:28:33:10:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B0:0C:E2:BC:2E:39:9C:AF:DC:14:01:E7:82:AB:14:59:26:0B:3E
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:34:22:5a:83:54:37:09:0d:b7:e6:5d:2e:12:4c:57:06:
c3:c1:67:4f:7e:4b:24:23:1e:6d:aa:d3:8b:24:84:32:f6:0d:
a2:98:f2:16:6d:9b:f5:2f:df:19:9a:be:3a:d0:44:9e:4e:f3:
d2:0c:7c:88:4f:0c:db:43:fe:42:46:4a:13:bc:0e:a6:0a:18:
35:3d:13:8b:6b:b2:82:98:a3:b4:3b:c8:f8:8a:6a:db:2c:a1:
63:28:95:1d:3a:29:ca:9d:ab:c4:0e:a5:86:67:45:48:7f:ca:
88:a7:04:0e:17:88:c2:df:37:6e:d8:d8:c7:c4:00:81:cd:56:
ef:25:c9:86:0e:b4:06:69:c3:2c:5a:16:ec:f0:b7:91:a8:ba:
57:15:0b:09:20:d2:85:65:30:11:40:b0:71:53:78:0f:f2:97:
fe:7e:dc:34:00:96:22:6c:03:39:78:27:f7:c2:50:d8:5f:97:
5c:57:4b:35:dc:16:cf:c8:78:54:ed:7f:8d:6c:f7:b7:b1:bc:
9b:7b:e1:b3:42:44:90:a6:11:18:1c:ba:fc:c5:c7:55:29:93:
83:0a:42:b3:8e:30:64:43:e1:a9:9f:3e:33:7a:1c:d2:9f:20:
3f:8b:26:27:b6:70:b0:d5:30:bd:2e:8e:38:8a:f1:c1:d6:72:
0d:be:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:17 2025 by rpki-client