Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: jvocKlafCRMc5c/iYMeQt6mCQALccws+4Zw8E5mn7Xo=
Subject key identifier: 9D:8F:13:1A:43:D5:57:EF:15:5D:A1:BB:C4:C6:DC:BC:3E:6B:25:23
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 01976BF43DE97D9D291820E6359291313347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 0297
Signing time: Sat 14 Jun 2025 01:00:58 +0000
Manifest this update: Sat 14 Jun 2025 01:00:58 +0000
Manifest next update: Sun 15 Jun 2025 01:00:58 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: MetiXrhgnDXuoh+pkYn/jT/AT3Y6iS+1ch1jhqfcIEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:3d:e9:7d:9d:29:18:20:e6:35:92:91:31:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Jun 14 01:00:58 2025 GMT
Not After : Jun 15 01:00:58 2025 GMT
Subject: CN=9d8f131a43d557ef155da1bbc4c6dcbc3e6b2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:f8:cd:24:94:5d:62:c2:af:b5:52:79:9d:
1e:79:a3:58:71:2c:68:f8:aa:02:04:39:23:b5:2a:
ac:5b:e9:8a:11:13:c8:83:51:19:66:47:77:df:0c:
a9:2e:95:3b:5e:ad:a2:e0:ad:85:cc:05:c2:e5:c7:
8e:53:26:59:38:eb:4b:55:33:fa:ea:b4:bc:db:db:
ad:11:6b:8f:98:69:4b:da:5c:1a:e7:41:bc:80:01:
20:1d:25:fd:d9:76:0b:1b:c2:fc:b3:f6:7b:f1:4d:
c0:28:34:ba:10:d3:11:f2:8d:d9:96:8f:6b:cd:b5:
2b:93:51:ef:61:e4:e3:19:6d:d7:b6:f6:fe:16:b4:
71:9d:59:5b:14:cf:d7:ce:58:ef:0e:90:aa:04:ce:
cd:33:41:dc:ba:15:1b:34:7a:67:24:c5:dd:6c:bd:
b8:8c:58:2a:f8:5d:63:ee:03:6a:00:d8:55:4b:5b:
ca:ab:3c:4a:8c:7e:05:81:d7:f6:b9:bc:c2:52:18:
76:8f:23:ab:7b:b6:7e:9f:ad:33:67:aa:aa:21:7e:
8b:d9:a1:6c:ec:8f:2c:b7:1b:6e:93:79:ed:e1:9d:
b3:01:2e:be:61:67:79:52:d3:55:57:72:90:1a:8c:
38:a4:a2:a1:d0:c6:ec:08:68:c6:ab:a1:cb:73:6f:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:13:1A:43:D5:57:EF:15:5D:A1:BB:C4:C6:DC:BC:3E:6B:25:23
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b5:1e:11:f9:99:14:ad:e7:14:18:41:73:6b:dd:6b:c4:50:
7d:9f:6d:6f:01:70:49:f7:79:dc:64:12:9a:61:7c:be:ae:1b:
82:15:44:40:4b:c0:c6:f5:a3:60:f5:7f:72:3f:14:d4:05:c4:
f6:33:1a:19:af:af:63:7a:e1:41:17:49:e9:5a:2b:c4:92:ae:
14:4e:53:e3:1b:01:3e:1c:c9:cd:8c:52:a2:b8:b5:fe:c8:8a:
f5:67:18:e3:99:17:d6:69:78:49:51:81:bc:dc:7a:ca:8b:14:
a3:c2:3e:bd:21:8a:86:3f:23:f8:3b:9b:cc:15:23:55:ae:33:
9c:35:2c:48:fd:f6:53:b1:7c:4c:6e:84:50:01:1e:87:5c:53:
14:cf:52:94:cf:02:7a:15:26:70:cf:23:05:b2:51:ca:ff:2c:
4b:ec:87:36:d6:99:2b:37:c9:91:5e:06:32:cb:6d:d3:7d:ef:
4e:90:18:a7:93:d2:37:6d:66:2c:21:3d:b5:9c:92:fe:d9:0b:
d7:69:8e:57:35:14:b8:25:9b:0d:52:19:3c:97:ff:22:c3:e8:
4f:ec:96:9a:68:32:b8:6e:e3:19:05:4d:bd:bb:b0:03:d7:3c:
2a:fb:9b:34:8d:18:44:22:1d:e3:1b:bb:76:2d:f3:a9:f7:9c:
b2:c1:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:13:49 2025 by rpki-client