Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: sPQY62k1mzebekKjF95ebj5IkH+bjL88W7uK/Iqm/VE=
Subject key identifier: 1D:69:12:CB:EA:9F:C8:10:8B:1C:4D:6F:F2:17:52:43:FF:1E:27:DF
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01977007581ED47D05205A3AFD8F5489071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 03A3
Signing time: Sat 14 Jun 2025 20:00:18 +0000
Manifest this update: Sat 14 Jun 2025 20:00:18 +0000
Manifest next update: Sun 15 Jun 2025 20:00:18 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: tDyX/05FixK7HNPyU3mGjscl0DhQattYfM7QAFvhG/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:58:1e:d4:7d:05:20:5a:3a:fd:8f:54:89:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jun 14 20:00:18 2025 GMT
Not After : Jun 15 20:00:18 2025 GMT
Subject: CN=1d6912cbea9fc8108b1c4d6ff2175243ff1e27df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:8f:6d:12:b1:fd:73:f4:d2:13:27:78:dd:
de:96:ba:45:89:2e:2c:61:48:ec:b1:bd:f2:a9:8e:
8e:1b:ba:9b:22:48:1a:a2:cc:51:90:60:7e:fe:1f:
22:0b:c3:57:8d:ac:a3:f1:41:6d:50:fa:3c:65:cc:
ae:7e:57:b1:3e:3b:4a:c1:99:56:08:02:81:72:93:
92:52:8f:b4:c4:b3:15:8e:9d:e7:ad:09:2d:f4:49:
ee:25:47:0c:d9:8e:15:19:b2:d8:3f:de:02:b2:4e:
33:ef:0d:19:84:2e:ab:d4:6d:4a:ea:fd:b7:b4:7f:
fc:d3:ce:50:49:f0:0a:57:91:c4:d5:9a:8c:f7:ba:
62:8e:ce:87:ba:e4:7f:24:d8:95:74:12:27:03:a5:
b4:f4:d4:3b:ae:42:72:74:5d:85:1d:46:25:14:9e:
60:80:ae:d7:47:d1:87:0c:a2:42:1c:13:4d:32:e5:
9d:48:8d:a5:7e:ed:83:ce:54:37:4a:9d:dd:46:a5:
3a:0f:48:ee:97:a8:4c:b4:31:26:4d:7c:ac:5b:5f:
09:81:f5:67:23:95:c1:9e:a5:91:0b:60:e0:b8:64:
d2:00:27:9e:6c:06:a7:b6:18:55:30:e0:d1:67:f4:
77:c5:72:06:92:44:e1:14:21:34:d6:a6:50:46:16:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:69:12:CB:EA:9F:C8:10:8B:1C:4D:6F:F2:17:52:43:FF:1E:27:DF
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:f8:db:13:51:39:2a:c1:c5:8b:bf:a6:46:84:23:19:69:
05:d5:79:25:27:eb:fe:5c:7e:7c:73:97:cb:bf:c6:0d:12:4d:
f9:5e:17:f0:c4:a2:c0:2d:58:62:7e:7d:31:6d:bb:9e:e5:fc:
a8:a5:11:09:fb:eb:9b:fa:cc:90:50:d7:75:8e:f1:e0:94:cd:
40:90:4e:83:43:9b:5c:76:10:51:76:d4:5c:8c:67:04:46:0c:
03:ed:4e:79:7c:c3:48:61:5a:11:7f:e3:90:b7:73:54:a1:10:
74:47:17:af:f3:82:30:d4:99:94:8e:ed:47:7a:28:92:6e:c1:
99:e2:e0:ef:ab:be:4b:35:b9:44:ce:02:41:6c:0e:00:f2:80:
d2:de:cc:a4:41:fe:bc:69:c6:e6:0c:33:7a:ef:06:18:10:a0:
78:bd:90:c2:4e:c5:f0:99:6f:af:d6:e5:93:5b:45:5b:eb:b8:
64:f3:ed:e1:99:7b:5e:53:ce:5f:1f:f8:6e:3b:70:19:ea:fb:
52:98:d1:dd:33:d6:c2:4c:5a:9c:cb:28:3f:72:6c:5d:05:0f:
da:e7:2f:89:78:61:0f:21:04:84:42:f1:41:0c:a1:da:a9:30:
aa:f5:23:df:6c:fa:71:88:4f:dc:0f:de:54:5c:78:2c:3e:fb:
b8:5a:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:15 2025 by rpki-client