Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: N24jWuoVrt8uaWij5P3fTdVP6Usm2vnpHaFiimxVS9U=
Subject key identifier: 41:C6:4D:67:65:D4:35:52:7C:09:1D:92:92:6D:BE:12:C9:7D:42:92
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 01977AC2D383E8792A2DED706817E9F4DAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 09AB
Signing time: Mon 16 Jun 2025 22:01:17 +0000
Manifest this update: Mon 16 Jun 2025 22:01:17 +0000
Manifest next update: Tue 17 Jun 2025 22:01:17 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: 6ySOFz+GoLRy9kzg+maOn5ojyoqq+Ds1Gd8caCkVeJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:d3:83:e8:79:2a:2d:ed:70:68:17:e9:f4:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Jun 16 22:01:17 2025 GMT
Not After : Jun 17 22:01:17 2025 GMT
Subject: CN=41c64d6765d435527c091d92926dbe12c97d4292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:15:55:58:07:2c:e9:dc:8f:51:a9:27:4d:
59:ac:6a:ec:6d:f0:a2:c2:65:ea:3b:da:4f:1d:eb:
e7:bd:a3:f7:c5:6e:2a:c2:69:b6:37:ef:d5:08:83:
79:79:80:76:6e:e3:7d:bd:b7:95:c3:36:d0:95:fc:
7e:85:fd:e2:44:14:51:33:31:05:ff:12:64:ae:5c:
a7:dd:6b:21:e5:93:db:18:4a:26:cd:9d:43:95:a8:
5d:94:8f:e5:78:ea:74:8f:45:90:d2:b6:19:c9:89:
e7:19:cd:7c:4f:ea:39:c0:34:cd:f8:bd:1d:e0:71:
46:9b:8b:bc:cf:5c:6f:fc:9c:e8:05:a8:62:41:0f:
0a:73:a1:8f:df:f1:5e:ff:5e:d5:b2:26:a8:47:1b:
91:75:41:0a:2c:da:6c:a5:2d:d7:46:eb:52:93:13:
ba:5b:ce:e8:07:b0:59:72:27:3f:99:84:d5:ad:4a:
27:67:98:68:5b:b5:29:be:29:6f:1e:3a:d8:66:80:
31:ce:57:d4:14:3c:c8:35:4d:8f:03:9b:15:a4:b9:
a5:1d:2f:ac:94:9c:d6:4e:f1:74:85:87:b9:04:2e:
fe:5e:0f:af:1d:d2:ce:b7:4e:3d:4a:e4:27:ac:9f:
52:e3:22:2a:75:2c:8b:0e:86:41:39:aa:7a:03:02:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:4D:67:65:D4:35:52:7C:09:1D:92:92:6D:BE:12:C9:7D:42:92
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0e:2e:2c:6a:2e:63:f6:19:1f:f6:11:19:46:8f:40:10:07:
0b:52:41:1b:db:9f:ff:4b:b2:9e:af:de:d5:c2:98:8f:63:cc:
9f:1c:5c:ff:08:81:41:73:cd:b2:85:bc:ac:83:f7:65:15:a2:
79:9a:34:54:84:d9:ef:05:36:c5:69:15:42:50:12:6a:a9:45:
13:ca:93:aa:d1:67:ad:1a:db:8d:92:f4:8e:8a:b0:8e:15:70:
86:17:e9:65:d2:6b:e0:90:f6:7d:41:ae:58:c1:6c:91:2f:3a:
77:8e:40:03:92:01:64:40:97:bf:a5:2c:2a:09:29:81:a6:2f:
d5:71:05:90:b4:d3:c2:a8:56:57:96:45:d4:86:7b:6d:7b:7c:
0b:30:bf:b3:ad:3f:09:84:3f:d5:28:2a:2f:af:b6:aa:66:c9:
13:b5:39:7f:35:af:e8:07:0d:bb:e1:4e:66:63:6e:89:63:49:
23:d5:81:4f:64:e5:52:ae:45:4a:44:68:b5:e6:e0:0e:c3:6c:
c2:87:7b:d8:1d:c1:b5:87:ff:fe:51:3c:3c:6f:dc:ed:62:df:
8c:7e:0d:14:c7:cf:df:0f:62:20:a2:00:ae:db:c3:0b:a8:6d:
ce:bd:d9:56:ba:6e:6d:81:30:be:cb:62:2f:0e:da:94:68:b3:
01:71:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:21:16 2025 by rpki-client