Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: wSiH29xqXn+w8PcgMxklLdHoFcOGc5KTIgMKpN+15tQ=
Subject key identifier: 3A:45:61:26:D2:EF:79:0C:49:24:7A:3C:25:D0:B9:D6:02:99:B7:49
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 01976A0624E0F93BB92E24C53034370B46C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 11AF
Signing time: Fri 13 Jun 2025 16:01:16 +0000
Manifest this update: Fri 13 Jun 2025 16:01:16 +0000
Manifest next update: Sat 14 Jun 2025 16:01:16 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: PhczcMhMLFQm4ERjBay6fJUi6uhFXhN3yx9cPAgYiOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:24:e0:f9:3b:b9:2e:24:c5:30:34:37:0b:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jun 13 16:01:16 2025 GMT
Not After : Jun 14 16:01:16 2025 GMT
Subject: CN=3a456126d2ef790c49247a3c25d0b9d60299b749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:94:e7:e0:6d:66:61:d6:89:69:c0:b2:25:
89:0c:90:86:f1:fd:4c:92:96:54:ff:fe:c3:a1:25:
47:22:fb:dd:5d:d3:60:06:77:11:12:74:c2:81:d9:
58:e1:29:0d:5d:a6:e4:a9:ed:86:09:0f:57:8e:22:
74:6a:b2:4c:7e:8c:45:50:62:25:6e:1c:b4:f1:9d:
2c:a9:d5:9a:ca:24:d5:88:9e:5a:aa:b6:18:0a:00:
d5:19:a1:23:02:92:93:03:2d:e0:f9:f7:c3:9c:d0:
86:ad:a9:39:17:b0:86:c2:e0:1f:b2:30:8c:9d:8c:
49:e0:ba:88:af:cb:ba:85:26:8e:42:04:dd:f4:20:
6e:d3:c1:48:90:c0:03:a1:16:cb:e0:89:ff:f4:e3:
00:33:1e:d4:01:78:45:11:47:ca:8d:ac:1b:e9:bb:
8c:d1:9f:6f:0e:ab:3c:58:16:2a:5e:0e:3f:05:0d:
41:fd:aa:59:9a:6f:e1:5c:1f:0f:58:1a:b2:a6:d2:
4e:a7:be:2b:92:0b:b8:9c:be:4e:14:6c:6f:2f:c4:
5f:f3:e2:af:87:8a:e4:c6:ba:ec:fc:e4:a2:f1:4b:
30:fd:1d:4b:a3:b1:27:98:59:88:cf:7d:eb:ff:e5:
45:a8:a5:ff:7b:32:2f:50:17:98:41:ae:f1:bb:73:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:61:26:D2:EF:79:0C:49:24:7A:3C:25:D0:B9:D6:02:99:B7:49
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:d3:77:2a:80:a3:d0:ac:4f:ca:8a:65:f7:55:30:f0:cb:
f4:14:38:35:a2:3f:7b:7c:22:ff:b7:61:8b:08:e9:56:4e:b8:
df:81:61:71:01:f7:08:90:2c:06:f5:4e:ac:5b:58:8a:76:3d:
8a:07:e1:ae:01:c2:5a:51:fa:66:e2:99:f5:d8:d8:76:5c:ab:
47:03:de:a6:96:e6:90:f2:39:6c:67:bf:bc:86:33:97:b8:95:
6e:62:dc:da:16:2c:c0:eb:35:75:f5:99:e8:17:5f:c1:7e:dd:
74:46:9d:45:73:84:37:cc:cd:3f:c3:a8:f8:90:01:4f:84:89:
aa:0b:b9:57:a8:48:11:ec:a4:02:90:c5:6c:8f:2e:23:9a:ff:
0d:50:d5:31:75:f3:a8:cb:79:dc:b6:eb:95:9f:d2:63:fb:22:
0b:39:79:39:e5:ee:6e:b1:d7:6d:23:b3:bc:cf:51:87:5b:19:
dc:6c:85:b4:6f:4f:d6:9f:b5:a5:a8:89:8d:4a:15:6a:4b:f6:
bd:3b:7e:f9:d1:bf:53:83:6d:57:c4:85:fe:e0:2b:aa:48:43:
02:48:9b:a3:1b:aa:36:3e:f6:16:f3:ec:ea:cf:63:d6:9e:de:
d8:91:69:e6:4d:93:ee:9e:bd:8b:41:15:e4:4d:0b:5c:64:60:
c4:cc:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:51 2025 by rpki-client