Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: 4SWM4+adqxA6lU0D8BqAp6ek5OY72XxK1avYM2KAi3E=
Subject key identifier: 26:4F:38:F4:36:D7:B3:5C:F3:6A:EF:93:BC:47:2F:20:A5:C3:76:9E
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 01977640DEBB05AEDFF6F260E467834F7995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 14C5
Signing time: Mon 16 Jun 2025 01:00:52 +0000
Manifest this update: Mon 16 Jun 2025 01:00:52 +0000
Manifest next update: Tue 17 Jun 2025 01:00:52 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: G1Zbl+F2ntddD3E7wDJOB/PO2b7gQdD4wTCbCP4+pSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:de:bb:05:ae:df:f6:f2:60:e4:67:83:4f:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jun 16 01:00:52 2025 GMT
Not After : Jun 17 01:00:52 2025 GMT
Subject: CN=264f38f436d7b35cf36aef93bc472f20a5c3769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:d7:59:50:d7:b7:26:09:e9:9d:50:85:22:
10:54:26:8e:24:62:29:b8:d3:a3:4b:13:63:75:0a:
49:47:ed:3c:a8:93:be:08:58:4f:d6:a2:47:1e:e0:
16:fc:56:f4:bc:fd:f4:5c:6e:4e:04:e7:6d:71:8e:
18:ba:25:0c:3d:b1:14:b9:1a:77:ba:a6:1b:17:05:
8a:57:67:ad:bc:b8:96:c2:a4:31:9d:83:1b:e0:fa:
43:2d:73:69:18:03:0e:61:46:a0:6f:98:16:d7:9c:
6a:e5:28:21:c7:83:eb:7d:a9:1f:66:ae:9d:19:4e:
fd:2e:14:99:fa:ab:4a:78:81:46:e1:b5:ec:a3:85:
89:1f:fb:e4:c9:80:dd:d8:d3:ca:14:57:31:83:2e:
be:ed:56:60:ea:1d:c8:ec:8a:d4:a8:dd:19:07:48:
e8:5c:7b:dc:d7:45:f4:3c:7a:47:a7:d5:4d:dc:5b:
aa:09:f8:b1:f1:03:62:17:6a:67:11:a7:bf:5b:6f:
54:70:ea:aa:63:b9:90:8f:b9:78:b4:b3:bb:ec:99:
bd:2d:fd:d3:cc:ea:42:54:dd:5b:55:03:17:e8:00:
64:f2:36:10:0a:14:52:fb:a1:07:e7:56:4f:43:f5:
6b:70:a0:f1:ed:2c:a4:1b:3e:24:af:c6:e0:f3:7e:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:38:F4:36:D7:B3:5C:F3:6A:EF:93:BC:47:2F:20:A5:C3:76:9E
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ee:5a:08:62:40:2b:3b:5a:5b:e0:9b:d3:52:51:28:0b:74:
8a:23:3d:70:93:4b:02:c3:85:51:e8:2b:53:0c:7c:46:65:8d:
18:73:cb:c0:25:d0:7a:31:c9:58:16:8f:86:26:95:38:57:2f:
4f:15:df:3b:a9:86:67:99:bc:bf:28:32:9a:8f:bf:a3:b8:bf:
d3:39:4e:6d:e8:5e:0e:28:ee:d9:a7:0d:19:0e:41:0d:53:dd:
f9:a7:10:02:3c:8f:14:07:ba:49:7b:5a:af:7d:cd:ef:46:46:
34:46:3c:9c:3f:69:8d:be:82:76:da:2f:6f:3e:6d:fd:94:10:
81:c9:53:e4:82:20:21:db:dc:83:14:cc:c4:4a:19:8f:de:1d:
29:03:d3:b0:d5:3a:c2:80:61:c0:88:70:e4:c3:29:db:33:cd:
72:09:e7:0c:e5:a4:fd:6b:97:3d:a6:dd:7d:59:c4:87:bc:d2:
16:77:38:2a:33:07:e4:84:75:9b:be:4c:54:a7:2c:6f:b5:db:
02:85:fd:82:eb:fd:c1:bb:48:7a:67:1a:73:d5:74:0d:47:06:
de:15:bd:45:2b:39:3f:3d:62:4a:84:bc:45:1a:e4:ed:42:ef:
64:3f:e5:c2:8a:12:f7:1b:74:2e:fc:6b:ad:dc:3a:12:b5:b3:
22:99:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:40:03 2025 by rpki-client