Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: AVgmske9Npjsawh2zYGOUvs6VpzpASuJ3cvc42wsUj8=
Subject key identifier: D0:7B:FE:36:83:77:E1:0B:5A:96:3D:FE:80:84:B3:79:A6:FB:91:80
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 01978B7F5742A600778ECB0E7E2B636C879B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 055A
Signing time: Fri 20 Jun 2025 04:01:07 +0000
Manifest this update: Fri 20 Jun 2025 04:01:07 +0000
Manifest next update: Sat 21 Jun 2025 04:01:07 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: lKctRx1GSdEudSXIhzRCTTn8N+USdt37TZhpgEPIX4o=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:7f:57:42:a6:00:77:8e:cb:0e:7e:2b:63:6c:87:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Jun 20 04:01:07 2025 GMT
Not After : Jun 21 04:01:07 2025 GMT
Subject: CN=d07bfe368377e10b5a963dfe8084b379a6fb9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:2a:02:29:87:ec:68:80:76:98:b4:49:c4:
c1:2d:df:44:1c:df:ce:ef:4d:84:52:96:0a:54:f8:
f5:71:29:71:26:32:6a:5a:97:60:2d:a6:6f:dc:8f:
2f:d4:b3:d5:f4:7c:d9:05:f9:a5:52:1d:fb:73:ce:
be:1c:ec:d3:cb:19:b0:74:ef:1c:c9:8c:e4:07:0a:
2c:95:b8:44:11:cf:3f:f2:60:84:ac:26:08:2d:23:
f5:0f:61:13:35:2c:d1:0e:cf:f4:6b:12:08:32:72:
66:89:fa:6a:7e:4e:6b:45:38:1b:11:13:43:8c:cd:
d7:d7:ea:07:37:cc:0d:e9:6f:16:2b:91:c6:97:0a:
e5:38:e6:1f:62:c9:f1:6c:49:cb:e8:98:58:fe:23:
8f:43:0e:e3:63:0f:4c:37:6d:52:0d:fb:3e:bb:f6:
e9:52:8f:09:bc:91:18:7e:68:7b:86:a5:c1:98:44:
dc:62:8f:36:0b:3a:b4:41:94:a6:31:bf:50:6e:a6:
7a:df:93:6a:04:8a:8f:8d:79:4d:38:db:2e:fc:b0:
ce:28:7a:ac:35:ef:0c:96:ef:7b:de:cc:f5:b4:77:
9c:b7:31:94:2a:a0:6b:ce:f9:e9:54:5c:53:13:ac:
e3:95:17:2b:37:36:e0:d1:b5:3d:9b:26:6a:97:f7:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:FE:36:83:77:E1:0B:5A:96:3D:FE:80:84:B3:79:A6:FB:91:80
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:aa:2e:56:12:0a:64:18:41:d2:6f:ff:19:02:5c:c4:74:5d:
cc:00:c0:cd:e1:a8:99:af:07:a5:de:e1:54:a7:a5:a0:5d:57:
52:09:f3:ae:ce:46:85:51:39:eb:e3:82:49:8f:ca:a3:b2:54:
fd:c9:1d:6c:76:d6:e1:71:ba:47:a2:e1:ac:4c:3a:0d:1a:76:
2b:6c:27:0a:10:86:cb:63:14:af:c9:a8:d8:b7:bb:6a:77:cd:
c3:da:d9:40:c4:fc:2d:da:01:58:ff:d8:51:31:e4:6a:01:86:
a2:48:63:f6:88:78:66:82:01:da:d5:21:7f:8b:e5:8f:8b:d8:
90:21:15:c3:ec:40:e4:66:a3:09:39:8b:83:de:3d:4b:91:a5:
5b:2a:3b:82:35:a8:f7:30:4f:70:34:ea:45:de:73:59:77:54:
3a:33:ab:3f:77:42:a9:52:26:b9:2c:b9:d4:10:99:f9:a3:06:
a9:fd:45:6a:85:be:77:50:af:1f:46:e2:aa:0c:21:80:d9:63:
b7:ef:25:91:5c:d6:2f:20:65:fd:b6:4d:d4:92:6d:30:28:dd:
ef:ad:d1:87:7c:c0:0b:cd:3a:62:8f:9a:45:ab:14:18:8b:29:
a4:1c:ea:a9:c3:25:5b:cf:7b:9b:76:fa:00:28:38:0b:bd:0d:
c8:d2:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:46:04 2025 by rpki-client