Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: foA8S1dJA8u2BGH9+OWJNMKCzfIGNMcz2n83+ia3jSU=
Subject key identifier: CC:04:68:34:86:1B:21:5C:9C:34:58:73:99:9A:36:8C:61:03:F1:7C
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 01976CCF86BDE2AD2FCADC1CF73B2A0C1F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0B8A
Signing time: Sat 14 Jun 2025 05:00:29 +0000
Manifest this update: Sat 14 Jun 2025 05:00:29 +0000
Manifest next update: Sun 15 Jun 2025 05:00:29 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: v/0czY4bfXMEVh9FlKcSRkWP5vLTUV1hB+ndJOPf9Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:86:bd:e2:ad:2f:ca:dc:1c:f7:3b:2a:0c:1f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Jun 14 05:00:29 2025 GMT
Not After : Jun 15 05:00:29 2025 GMT
Subject: CN=cc046834861b215c9c345873999a368c6103f17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:7e:c3:5d:63:63:19:90:66:2a:99:09:e5:
ef:da:a8:4c:b0:bd:df:62:71:3e:1b:dd:45:cf:52:
47:44:e4:c4:d8:0e:b0:69:55:3b:1f:5e:06:37:3d:
a5:2d:71:01:90:20:22:b1:f1:a7:e5:fb:3f:ce:b1:
73:e5:53:5e:6a:a3:cb:81:e6:cd:e7:77:df:8e:e1:
42:5e:f4:c7:99:7a:75:3a:48:8b:ca:e8:15:ba:ba:
b1:6e:37:8f:cd:c4:31:f2:5d:97:44:12:08:50:ce:
80:4d:b2:93:ec:aa:3a:3b:2d:f4:9e:09:4e:5f:ae:
84:cc:25:04:5c:69:27:f0:97:29:2a:f8:0d:bc:88:
8a:19:ac:68:7d:e4:64:24:7d:65:fb:c2:10:c5:5c:
3c:e8:d3:37:f1:41:0c:46:0f:c0:18:08:38:e8:c2:
2f:d5:b3:53:ba:49:46:67:ce:c3:7e:13:6f:32:56:
d5:8d:82:9c:d7:09:e7:71:05:71:70:d6:68:8b:06:
70:50:31:f6:38:97:d4:db:e2:34:63:d5:04:2a:0f:
23:12:ef:ad:0b:17:75:34:5c:28:ff:a3:a0:27:0d:
9f:9e:33:7a:af:56:88:78:28:0a:e4:85:eb:24:50:
3e:0b:7d:bd:4d:18:4b:b6:e1:8e:08:4d:a6:88:9a:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:68:34:86:1B:21:5C:9C:34:58:73:99:9A:36:8C:61:03:F1:7C
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:cb:4d:d3:e8:d5:d5:80:a0:e2:47:25:27:71:bd:04:e0:
b1:50:15:15:c3:9c:53:18:e1:33:ed:f5:d0:f9:64:bb:b9:2f:
8b:a3:0f:f8:80:85:7e:ef:1d:a4:d4:21:79:8e:24:c9:c5:45:
a9:42:16:36:65:07:d4:e7:40:ee:57:e1:28:bf:bf:be:a7:69:
5b:9e:0a:90:1f:88:ff:58:1a:07:e0:2c:16:b0:a9:6f:8f:3d:
88:81:5f:e8:7d:e7:c1:d0:72:e1:f4:42:8e:54:5c:e6:8a:3d:
ea:53:ba:84:15:f0:20:22:c9:c5:d8:16:17:7d:a4:70:fc:a7:
80:8e:bf:e4:15:c9:8c:98:e0:63:50:f1:98:ca:8b:e1:85:c5:
3f:c2:26:02:f6:cc:6b:3e:8e:20:a4:7b:94:27:ff:74:3d:3b:
78:4a:f7:a1:29:ae:d0:0f:5f:58:e5:32:cc:69:5c:18:4b:e4:
fe:4c:95:3a:20:85:e3:ca:d4:db:bb:e9:d5:9f:37:ce:40:ee:
50:63:db:f9:9e:67:86:1b:7c:e9:aa:82:52:28:f7:80:1e:13:
df:84:cd:9b:56:9d:b3:95:14:3e:34:1b:92:b7:ad:c7:07:ed:
b8:f8:f7:23:30:6b:a2:61:5b:78:c0:1c:20:74:bc:28:64:3f:
86:17:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:39 2025 by rpki-client