Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: VJJ2W+U41xYjkxDyr2zxzKrq0Ai8edHeJT+8oNIuhPM=
Subject key identifier: 94:B5:29:0A:F6:2F:2D:C7:6E:DF:EF:C7:B8:92:DF:67:96:1B:05:F4
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019873E2CB5F990541C469B7C49372DCF48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0CA9
Signing time: Mon 04 Aug 2025 07:01:39 +0000
Manifest this update: Mon 04 Aug 2025 07:01:39 +0000
Manifest next update: Tue 05 Aug 2025 07:01:39 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: arD0FjkoVDivRCy3v65w4VUzSIkE0yrmU3DY2ngCfzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:cb:5f:99:05:41:c4:69:b7:c4:93:72:dc:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Aug 4 07:01:39 2025 GMT
Not After : Aug 5 07:01:39 2025 GMT
Subject: CN=94b5290af62f2dc76edfefc7b892df67961b05f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:81:dc:80:69:83:ce:81:bc:9f:ed:e9:96:
bd:25:8e:46:d3:cf:89:ab:52:b0:11:c9:26:4c:a8:
0c:08:6d:bb:dc:21:72:04:b7:09:12:c6:55:dd:11:
a1:31:11:30:d5:92:ad:ba:33:81:d5:bf:04:5c:86:
16:05:84:4a:75:88:e6:bb:0c:92:8b:ee:44:91:18:
1f:78:9d:a0:0c:2f:ca:30:25:34:07:89:f7:b3:ae:
6e:81:89:46:82:36:72:0c:21:c8:0f:dd:7b:1e:79:
98:60:dc:a1:77:1e:4a:86:96:c6:2b:8a:ab:11:25:
cc:ec:9a:d3:e2:44:0c:29:d0:b1:05:92:07:b6:38:
be:d8:79:7c:9c:03:77:48:30:ac:27:89:bb:ac:e5:
23:e9:46:89:9c:96:08:b3:96:58:61:c1:b6:b3:ff:
24:6b:e8:db:98:2d:a2:59:8f:2a:21:bc:26:c2:29:
4f:b1:e1:10:0e:d2:99:f1:c3:87:a2:b4:54:d9:e5:
46:e0:38:b2:6d:0d:ea:3a:47:0e:89:f7:fa:f9:ee:
36:e6:16:1e:74:cf:bd:83:86:37:89:c4:06:34:3b:
1b:0a:23:53:53:b9:52:99:97:12:43:9a:47:ab:70:
97:74:68:33:1f:68:9c:11:f3:8a:eb:e5:45:98:74:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:29:0A:F6:2F:2D:C7:6E:DF:EF:C7:B8:92:DF:67:96:1B:05:F4
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:18:c2:8d:46:45:43:93:52:50:21:a5:a7:ff:aa:b5:06:f3:
2e:4f:3d:f1:be:99:e3:3f:0a:a3:e5:12:a6:4c:cc:a0:0e:8c:
66:fe:d4:8c:24:dd:00:83:b6:23:59:67:f5:2f:aa:5d:b4:a5:
52:b8:ae:62:6f:93:22:c5:96:0a:57:60:5a:d7:c5:6a:9f:36:
f1:37:ca:49:c7:54:f3:bd:bc:f5:6d:82:f7:08:53:9d:f3:2b:
fc:02:53:af:5a:da:de:80:12:27:86:d9:a1:bc:ac:54:75:1d:
f9:a0:7a:ac:4e:49:ab:da:8a:87:bf:d0:c1:8c:b0:31:19:f5:
db:52:31:46:11:0d:3b:d8:f4:7d:6a:de:29:e9:73:70:3b:38:
07:ae:30:67:4b:b0:f6:c5:c7:cd:64:e0:ff:ba:93:eb:c6:3c:
70:76:83:31:a5:c3:f9:86:21:6f:56:93:e6:3b:fd:24:26:37:
6d:47:65:82:27:01:4b:d3:af:7b:d4:cf:08:c3:74:bf:3e:51:
19:ab:12:c6:68:3a:71:87:1a:a5:7e:52:20:76:8f:c7:3b:73:
3d:a3:5f:5e:80:b1:e1:35:eb:b4:d3:c9:e3:09:c3:34:20:0a:
9c:50:fd:8c:35:7f:8b:99:a8:cd:3f:57:54:54:82:7e:63:23:
0a:a5:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:57 2025 by rpki-client