Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: JL06jJlNy9OqtNpPhEqtx5Oou8ogifXt5GdQmZfk33M=
Subject key identifier: F2:1F:8E:8E:3E:83:8A:A8:41:6E:49:10:14:B8:3D:A4:18:FD:18:81
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 01976C2B3B1E3BF716EF1C07E26AE3B5C39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0C1D
Signing time: Sat 14 Jun 2025 02:01:01 +0000
Manifest this update: Sat 14 Jun 2025 02:01:01 +0000
Manifest next update: Sun 15 Jun 2025 02:01:01 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: 2XkVhBSbIZwom0bv+w31WdZSTZBvCTNhPiuh3vMVlIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3b:1e:3b:f7:16:ef:1c:07:e2:6a:e3:b5:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jun 14 02:01:01 2025 GMT
Not After : Jun 15 02:01:01 2025 GMT
Subject: CN=f21f8e8e3e838aa8416e491014b83da418fd1881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:48:8a:0e:8a:52:d5:ad:ed:70:5e:bf:04:
1a:e3:63:92:77:c5:00:24:63:1a:ea:a3:d4:fc:2b:
ec:21:f8:15:3c:0c:5f:56:14:f8:2e:26:84:e7:dc:
ac:72:52:b5:3d:b8:a8:e5:36:cd:27:60:21:e3:d9:
b6:1e:4a:49:b5:8d:a8:09:47:06:69:d3:38:12:d0:
f2:8c:1e:86:fd:15:34:9e:b9:23:5a:22:a2:5d:9c:
93:68:11:00:76:9a:27:f7:e3:a8:1b:4e:6f:c0:a0:
68:dc:18:cd:0a:1e:20:a8:51:0e:d7:53:cb:a4:a4:
a2:d3:a3:0e:15:37:d4:37:c6:65:b5:2e:30:6c:22:
90:a9:a1:e9:80:d3:a5:7a:f0:32:81:c4:ee:64:82:
83:51:e1:25:72:86:e5:79:24:55:12:8b:97:b5:2c:
f0:e0:b8:dc:6e:92:f8:e4:56:3d:e0:65:b2:0c:92:
65:02:33:16:86:64:82:3b:27:10:e3:59:fb:d4:1c:
cb:e9:66:6a:d2:f6:14:d8:c8:66:2d:80:ea:17:4f:
bd:40:ab:79:29:78:5f:b0:66:b2:fd:50:29:e1:cd:
95:66:32:b2:69:f7:f8:96:32:f8:7f:81:1f:23:9d:
fd:40:e3:c1:e2:97:6c:39:17:cd:24:a9:2f:64:eb:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:8E:8E:3E:83:8A:A8:41:6E:49:10:14:B8:3D:A4:18:FD:18:81
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9b:05:98:eb:a9:39:d3:87:ce:40:ae:49:f6:19:54:c1:f4:
0e:92:80:23:6e:bd:47:3d:b5:c8:c2:46:29:6e:54:51:03:36:
9a:0d:bc:d5:41:b3:4d:b5:89:f7:ab:de:97:8d:0b:4c:52:c7:
cc:db:e0:4c:1d:9c:c5:06:c7:84:14:51:c2:dd:d1:ca:4e:54:
d3:53:c9:90:08:63:f5:7a:e4:1c:3b:2d:c4:06:4d:00:82:a4:
46:8d:9b:e0:37:34:9f:56:9f:8b:4c:d0:90:8d:bd:ef:0c:50:
8c:db:25:bf:2e:99:55:f3:68:8c:5d:86:fb:0a:75:24:5e:2c:
70:fd:a2:58:78:99:8d:3c:b7:1c:e2:f8:81:71:36:4c:96:6e:
eb:24:b3:08:3b:2a:55:e7:b6:39:6d:08:56:1d:5c:49:09:25:
fb:85:1b:a2:0c:3c:1c:33:23:67:50:35:dc:d5:2b:b7:ce:21:
23:6e:d8:80:f4:f0:09:52:58:cb:ff:87:ac:05:a6:39:43:77:
73:b7:8d:d5:bc:d6:d2:63:1d:f2:1c:58:6f:85:fe:24:8e:84:
8d:de:7b:a0:4a:47:db:e4:ef:7e:42:d4:4f:29:d4:c0:e6:d8:
fb:10:15:1c:e1:b8:35:0f:d2:43:3a:41:22:48:81:e9:c6:25:
f0:04:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:24 2025 by rpki-client