Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: X4wKCiLV35SMs76q4adlE8cOfwi9cFh16c96cuJnJAU=
Subject key identifier: AB:3B:9B:E4:23:48:51:AC:02:B5:E5:16:C4:2B:6B:B6:AE:FA:D7:B0
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019771BF68454D88BEC5FF535388C394D52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 04:00:58 +0000
Manifest this update: Sun 15 Jun 2025 04:00:58 +0000
Manifest next update: Mon 16 Jun 2025 04:00:58 +0000
Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: zfQUamjdrbZ3poleEYFvyltnK1ZZVSFNjzIljKrb1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:68:45:4d:88:be:c5:ff:53:53:88:c3:94:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jun 15 04:00:58 2025 GMT
Not After : Jun 16 04:00:58 2025 GMT
Subject: CN=ab3b9be4234851ac02b5e516c42b6bb6aefad7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:69:3d:9d:b4:fc:a7:f1:1d:ef:e8:c2:30:
ef:83:2f:03:a5:93:6f:c0:b2:45:88:53:9d:43:06:
dc:f0:47:8f:5d:ea:8e:23:ef:da:33:f0:f7:f3:9e:
bc:c9:4d:ff:53:b2:75:25:cb:da:99:b0:2e:b1:9d:
a0:a5:5a:77:d6:07:94:5a:79:0a:93:b7:62:1d:aa:
7b:db:51:e8:9c:c5:4b:c5:92:d2:70:e9:81:29:75:
ea:b2:c1:c8:92:d9:da:29:90:5a:f6:86:ff:71:af:
8c:fb:05:72:75:c4:4e:cf:c6:f0:e9:b6:43:a1:39:
1e:c1:4c:06:0a:05:72:af:64:cf:5b:8a:70:65:19:
44:41:9d:7e:4f:02:aa:64:02:68:49:ee:12:8b:f4:
b3:50:a5:93:5d:0f:c4:37:2b:72:e0:20:ea:19:a2:
02:68:f8:64:69:12:7f:4b:5b:d1:ad:7e:26:b2:4a:
60:91:be:8d:d6:70:b8:0b:c3:d2:fc:3a:24:25:84:
81:b2:f6:8b:cf:bc:b6:1b:90:68:74:ca:4d:f2:da:
96:4e:be:3c:4e:97:e6:52:7a:80:92:c0:35:b5:21:
1e:40:de:5a:5c:6b:74:94:c5:61:1c:b0:08:cf:b7:
61:d2:6d:3d:69:dc:92:01:c1:8e:14:55:62:6f:0c:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:9B:E4:23:48:51:AC:02:B5:E5:16:C4:2B:6B:B6:AE:FA:D7:B0
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:d0:1b:cd:6b:21:be:74:75:77:15:9d:ad:ee:b0:06:2e:
e9:ac:08:e2:31:72:c8:a5:c6:46:d8:3e:0b:f3:0a:6b:d7:5a:
0d:aa:91:1b:8e:53:53:ed:59:79:87:3a:ac:b4:5a:b9:a7:ca:
e7:6e:ab:8a:cc:5b:16:5e:da:71:b6:58:6c:a3:a1:8f:ee:fa:
5f:fc:7f:d6:25:14:a0:08:11:6a:91:5e:e5:f3:f4:63:5a:3c:
4d:ce:7c:d3:74:cd:05:b4:5b:03:ad:ea:6c:fe:bb:0c:0c:62:
b8:5b:c7:e7:34:ef:5d:18:df:83:6d:87:1a:f0:96:12:27:20:
19:ce:87:d8:b3:90:10:d1:21:f4:71:45:00:c0:dd:ab:e8:cb:
01:0a:89:3c:02:cd:19:ca:36:48:8d:7c:d7:cb:67:2b:0d:26:
87:3c:eb:83:42:06:8e:73:09:0b:3d:fe:87:20:81:fc:67:1a:
09:1e:eb:16:d1:99:47:c7:40:c2:24:68:12:b6:65:fb:f5:ed:
18:e2:e9:44:da:2b:bc:6a:f7:04:b3:ec:d3:ed:dc:b7:62:f7:
91:85:fd:76:39:90:ce:13:80:a5:ef:4c:0a:09:10:b8:f3:6f:
59:d7:a3:3f:3d:7a:1c:83:67:d0:4b:4e:02:8d:8f:cd:a9:8c:
99:3c:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:37 2025 by rpki-client