Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json)
Hash identifier: dMRk8yBLdjgl+WhYmMUR08gjghoy5DsS6aYzQntJjL4=
Subject key identifier: 10:2B:FF:0B:6E:B4:D3:51:CA:11:BD:67:F2:7B:72:18:80:6D:13:95
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 019785B3EC5C79572BEC98B756FBCEDF4B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
Manifest number: 0BA3
Signing time: Thu 19 Jun 2025 01:00:50 +0000
Manifest this update: Thu 19 Jun 2025 01:00:50 +0000
Manifest next update: Fri 20 Jun 2025 01:00:50 +0000
Files and hashes: 1: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: D/mJjeqV40kGax+EWAu0+o8+ubWG5iXoheyYH7ZeP6g=)
2: twzQnUgBAT35ET2oNZWOjjEoBE4.roa (hash: HIWNIMTAhxf1Wnub1ymBGmdU28kJ6snFsV9+PWAEB7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b3:ec:5c:79:57:2b:ec:98:b7:56:fb:ce:df:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Jun 19 01:00:50 2025 GMT
Not After : Jun 20 01:00:50 2025 GMT
Subject: CN=102bff0b6eb4d351ca11bd67f27b7218806d1395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:1d:f6:27:47:0f:8d:66:f5:46:2d:47:8b:
ec:f5:d2:d8:b4:07:ab:4b:6d:23:15:bc:fa:21:f2:
a3:55:49:63:71:e7:73:19:f4:ec:ba:1c:f4:ae:18:
ae:c0:9e:95:80:7e:3c:83:d2:e5:6d:f9:01:97:fd:
00:07:cc:77:76:4b:8e:ba:d1:d6:59:35:7c:31:9e:
d2:f7:92:df:61:74:4d:46:16:d3:53:39:2b:f7:b2:
d9:ac:9d:cf:ba:06:4a:ba:49:16:c7:78:d4:be:c2:
3e:da:2a:5b:d4:c6:f7:a1:a4:cf:2e:0d:4b:3f:40:
2f:13:f0:fe:55:43:b7:5c:ad:e6:1b:a7:c3:82:35:
3c:20:38:b8:fb:be:f0:e8:49:bb:d3:92:26:5c:e8:
00:a3:15:20:25:8c:fc:46:4f:a7:8d:25:c7:74:63:
87:0d:cc:72:7a:5f:4b:8b:8e:81:c6:0c:ef:91:95:
a4:f6:7b:53:ee:30:d1:c9:d6:2a:3e:e3:08:c0:cf:
80:ac:e3:dd:24:f3:bc:6a:4d:ff:3b:93:bd:04:65:
b6:bd:5e:da:3e:bb:9f:af:dd:8f:79:a9:89:62:02:
ce:2e:5f:8b:bb:12:1d:4b:6d:02:61:e6:a5:7a:09:
64:4e:da:55:04:d9:86:71:ce:34:a2:cd:c0:2b:4f:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:FF:0B:6E:B4:D3:51:CA:11:BD:67:F2:7B:72:18:80:6D:13:95
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e7:c1:05:2b:38:30:38:dc:39:3e:f8:b0:80:81:16:d7:b3:
3e:d5:2c:f0:cd:9c:16:2d:d1:6e:15:cf:2b:fb:86:20:02:9b:
53:cf:22:6c:e2:22:1d:c2:3f:7d:7a:68:39:e8:d8:19:f9:01:
71:97:e4:58:b4:17:65:84:b9:cd:86:83:1c:8a:bd:70:ab:fc:
55:73:36:db:e8:28:dd:e3:8a:f4:fa:c0:e5:f4:21:78:be:c0:
a1:7b:68:ad:72:63:58:65:23:5a:10:64:21:88:25:5b:9a:f8:
f3:7b:58:8a:08:ee:43:3f:20:45:f1:8a:1e:4a:d2:af:2d:c1:
7b:7c:cb:36:cd:de:0c:7f:8c:3d:7b:79:50:cf:26:66:cf:d2:
ed:f9:ed:64:28:1a:81:c0:d5:ee:22:82:5a:38:78:b6:95:8b:
97:96:ab:06:dc:27:30:9f:94:a5:53:5c:ec:78:56:a2:5a:32:
91:dc:7f:b6:59:69:ed:64:6f:f7:bb:8b:2e:74:e7:35:69:f6:
3f:69:99:c6:81:66:a0:c5:9a:1d:b1:8f:25:a9:7d:c7:22:ec:
78:46:3b:bf:bc:af:66:9c:50:db:6c:8b:ff:c0:0b:b4:82:6b:
6e:f0:f1:5e:bb:e1:95:01:ac:3e:c2:c0:48:da:e0:ad:0d:06:
ee:4c:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:01:36 2025 by rpki-client