Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: +NvIKPjzEm5q+iDLOi5Ba2to4KwmDQveSswpXg6S2p0=
Subject key identifier: 8C:AE:43:A9:D2:22:B9:83:58:E8:97:AA:9F:33:64:3D:28:EC:15:E6
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 019772D207A48FFD810B2359761DB9069513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 09:00:56 +0000
Manifest this update: Sun 15 Jun 2025 09:00:56 +0000
Manifest next update: Mon 16 Jun 2025 09:00:56 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: RDvpk83wtZEoO8om1juS6AIFY85osZGoXxw4OL58vo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d2:07:a4:8f:fd:81:0b:23:59:76:1d:b9:06:95:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Jun 15 09:00:56 2025 GMT
Not After : Jun 16 09:00:56 2025 GMT
Subject: CN=8cae43a9d222b98358e897aa9f33643d28ec15e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:34:97:af:59:1a:ed:e3:d8:27:19:33:00:
06:ae:5e:63:90:24:85:2f:0f:e3:2f:51:da:92:7d:
1b:03:ef:4b:c7:98:e1:c6:f0:59:1e:a5:55:cf:5c:
56:6f:ed:cf:53:15:0d:c1:c5:49:c9:54:40:55:dd:
c7:75:fa:25:09:cb:cc:8d:ef:70:90:4f:a6:02:3f:
4e:d8:be:6b:bc:a1:02:95:4d:42:65:27:c9:0c:29:
84:5a:fd:cf:6d:9e:9b:6b:11:45:87:79:ad:c3:b6:
4a:41:2a:fd:b9:18:6f:33:2b:83:0c:ba:02:71:8f:
66:81:2f:b0:33:57:75:8d:c5:03:f2:a9:1e:fd:35:
ae:40:19:8f:a4:23:ca:fd:bf:eb:44:23:f8:66:c9:
dc:ae:8b:82:76:b6:8d:15:4c:84:7c:42:bb:26:f3:
9a:41:72:31:1f:de:57:5b:6d:22:0f:64:37:1a:2d:
d7:8e:3d:8c:ab:a8:67:54:99:0b:00:80:d2:b1:10:
16:6b:cb:f8:31:57:79:5f:7e:60:9b:1d:81:cf:be:
2c:b3:aa:fb:67:92:b9:8f:74:26:c9:d3:f9:00:3e:
ce:38:76:5f:bf:6d:43:ac:71:bc:15:1d:17:9f:1b:
17:e3:2d:4c:e0:e9:9b:d1:92:bf:cb:df:e8:6d:7b:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:43:A9:D2:22:B9:83:58:E8:97:AA:9F:33:64:3D:28:EC:15:E6
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c7:8e:b3:3a:a4:a9:d4:5a:25:1b:ae:50:d2:f3:65:55:9b:
5b:f4:d3:c8:75:22:8d:d8:51:78:38:ca:c2:75:da:a7:4a:7b:
4d:24:c2:88:02:e0:4d:b9:d8:53:02:8f:38:ae:fb:29:67:95:
29:96:89:88:9b:7f:d9:7d:cf:9e:66:9c:16:ce:33:c2:fc:d9:
de:87:da:1c:ac:d5:13:3e:1c:29:c7:17:42:2d:be:a8:d1:dd:
e6:ea:7a:54:71:f2:88:1f:d1:cb:5e:0c:4f:86:f1:a2:92:3b:
45:91:e2:c5:9f:1e:e3:ba:70:c4:2d:cf:be:5a:68:a3:00:30:
ab:1f:6f:8a:2e:6b:cc:85:00:bc:9c:2f:e9:a2:95:e0:84:69:
14:c2:8b:2e:75:7d:16:81:1c:e4:da:5a:3c:38:95:2c:2d:16:
ba:fe:c2:7a:df:23:9a:7d:f3:2b:ab:08:91:49:48:2b:ca:85:
79:ec:11:31:85:51:e7:0d:97:ae:22:b2:1b:64:25:59:01:39:
a3:45:2d:8c:28:9b:b0:9e:b6:b1:dd:14:4d:a5:b8:b2:d3:ad:
ea:ad:bb:7e:cc:8e:fc:7f:af:89:f6:93:2b:81:72:74:18:48:
bb:cf:37:21:65:61:be:fb:47:a4:dd:4a:75:29:17:fb:40:b4:
aa:a1:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:14 2025 by rpki-client