Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: iELIlgZjIVq7t85xlhqmm01P8gW0LzeY3zcidQdLM8k=
Subject key identifier: E0:0C:AF:56:ED:FB:0E:F7:C8:3F:B6:21:2A:5C:F6:0C:1F:09:26:C0
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019780FB597705D123A3DCC08C19B09C2EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 08B5
Signing time: Wed 18 Jun 2025 03:00:45 +0000
Manifest this update: Wed 18 Jun 2025 03:00:45 +0000
Manifest next update: Thu 19 Jun 2025 03:00:45 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: +nqJSD5TthLJRzYklGOyfzAxNG9RVXJantc3YpXl1j0=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:59:77:05:d1:23:a3:dc:c0:8c:19:b0:9c:2e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jun 18 03:00:45 2025 GMT
Not After : Jun 19 03:00:45 2025 GMT
Subject: CN=e00caf56edfb0ef7c83fb6212a5cf60c1f0926c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:f5:33:9e:0d:a0:44:e1:4d:02:a6:55:14:
60:59:48:a4:fe:4d:3e:2a:68:c4:4f:9f:02:1d:0e:
f9:92:5a:eb:be:03:b1:c0:1f:3b:f3:79:c4:01:d1:
57:f6:24:f2:63:10:c7:bd:17:d3:71:9c:ab:8b:64:
57:f4:7b:69:e6:5d:2e:8d:94:e1:d3:5d:de:32:87:
37:27:37:33:02:b0:47:2e:5a:7e:4d:b7:b3:d7:9c:
f8:3d:58:bb:00:0a:dd:c1:7b:be:13:65:e1:6d:1c:
05:49:bb:ff:25:d4:e1:ba:d7:7e:c2:5c:bc:6c:9b:
23:a1:b3:ca:82:76:d8:8a:85:65:f3:51:4d:9b:74:
03:86:d9:db:74:c4:44:e1:d9:c2:31:d4:64:f1:bd:
d4:0b:b7:c1:da:33:12:71:1f:1b:11:9a:7c:78:a9:
15:99:43:9a:99:28:7f:dc:e0:87:67:61:ba:07:09:
d8:e5:a4:06:9d:b2:60:bf:2f:e5:99:2b:00:80:ad:
b0:3e:8e:96:78:6c:1e:0e:0c:54:3e:f0:06:15:07:
31:10:23:6c:b9:5d:9f:22:b0:75:3f:d7:2d:63:00:
e9:53:c9:93:48:46:7a:6f:47:96:be:e8:1b:7f:b6:
65:f4:2c:31:47:5a:65:2f:26:e3:49:68:10:ff:d4:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:AF:56:ED:FB:0E:F7:C8:3F:B6:21:2A:5C:F6:0C:1F:09:26:C0
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:38:c6:82:68:b4:77:fb:d1:b3:98:de:be:19:76:e1:29:2c:
3d:8c:c2:59:1b:b6:e0:b6:7a:d7:f1:f4:a4:24:ff:83:4b:a9:
48:b5:c4:b2:35:19:29:46:6e:f3:4e:f5:07:91:9e:a6:9c:33:
b2:0b:3b:1f:7e:dd:de:51:8f:35:5b:d2:ec:0b:56:c3:ee:1a:
87:a2:23:e6:7e:86:0e:cd:27:bc:95:c1:07:dc:32:e3:ed:98:
36:ca:42:23:fa:ee:81:6a:1f:b3:8b:3c:cf:3f:a4:da:4f:01:
4b:30:00:2f:af:49:cd:ca:48:cb:ad:66:ac:01:f0:49:8d:24:
0c:28:17:23:80:66:4a:4f:ca:a4:21:5f:ea:46:80:61:c9:d4:
a8:3b:9d:fa:3b:28:ce:4c:a4:67:44:1a:f9:96:8a:8e:74:52:
ce:18:fc:38:aa:d5:f3:d7:76:b4:6f:6a:5a:4c:b8:01:31:aa:
fd:46:8f:a5:69:c8:37:a0:b0:aa:e4:68:88:1a:89:37:66:d3:
30:f3:b7:d2:54:15:4f:a3:bf:00:be:e1:e0:68:30:01:9f:63:
78:ce:81:35:fe:ec:21:ad:17:c9:6b:2c:3a:18:9b:78:21:ff:
67:d3:df:c7:b9:ce:2d:16:c2:ec:88:77:6b:0b:04:aa:a8:b7:
da:82:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:00:33 2025 by rpki-client