Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: IaN3A5nMNGPgkCOmdNQ0O1GiZ6IeR/Q6yol45CimZ5w=
Subject key identifier: F4:BB:6B:63:07:9C:89:D6:F3:EF:F0:55:50:9B:C9:D8:72:80:B6:B4
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 01976F9A55530DA310CD8DD3B586892AF8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 18:01:14 +0000
Manifest this update: Sat 14 Jun 2025 18:01:14 +0000
Manifest next update: Sun 15 Jun 2025 18:01:14 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: zlJHZeQIumMbd4vfmznjyKkFzO+g1nIc63lLxfymsb4=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:55:53:0d:a3:10:cd:8d:d3:b5:86:89:2a:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Jun 14 18:01:14 2025 GMT
Not After : Jun 15 18:01:14 2025 GMT
Subject: CN=f4bb6b63079c89d6f3eff055509bc9d87280b6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:2f:d6:d5:fe:00:02:d6:f4:e4:8c:b4:27:
32:ec:58:85:a8:1a:84:6e:cc:82:53:ea:b2:35:ba:
63:32:5b:da:73:d8:01:83:bc:09:58:d0:2a:69:ec:
e4:0c:c8:dd:a8:b4:bd:3e:8f:57:bb:4f:5a:b2:d0:
99:70:12:34:a2:69:70:6b:47:af:cd:72:1a:a0:a9:
5b:0b:a9:05:a2:1c:75:03:33:39:b6:1d:17:8a:ae:
f4:cd:d1:b0:1c:87:5c:33:50:84:a7:4f:2f:c6:f8:
8b:16:80:63:42:8c:d6:e6:ea:83:38:29:6b:34:f9:
c8:a9:89:10:6f:d1:c8:64:b4:d1:ff:75:d3:94:a7:
e5:5c:d2:ed:72:3a:10:b2:e4:2c:9e:cd:93:1a:2f:
c3:d6:c4:59:da:18:bc:c2:32:cb:b2:28:41:e1:5e:
d2:3f:17:11:08:48:90:20:68:cf:9b:5e:4e:2d:5e:
54:72:32:ec:b0:43:ea:fb:d4:19:43:bd:e8:b0:b5:
c5:a1:93:90:06:93:a1:a0:c0:44:e6:4c:b0:35:d6:
78:64:4a:40:fa:9e:0c:f6:49:b1:3c:7e:88:25:ee:
7d:d1:c6:c7:76:8a:08:5d:f3:26:c7:cb:16:7f:1b:
dc:64:9f:60:d6:13:57:38:df:3b:0a:2a:71:3a:7b:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:6B:63:07:9C:89:D6:F3:EF:F0:55:50:9B:C9:D8:72:80:B6:B4
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:31:e5:77:cb:e1:f2:95:d9:1a:39:65:5d:ec:7c:a9:11:
1c:78:a8:4b:88:6b:d7:a3:40:5a:24:c8:72:c1:99:ca:ba:07:
de:0b:e3:e6:9c:fb:e8:65:4d:9a:40:8b:2a:f0:63:57:ad:b8:
d8:bd:36:f8:4a:3b:d8:7a:fa:f6:e1:30:26:8f:66:f5:74:94:
46:0d:49:46:55:d8:53:67:53:db:3e:d4:f8:ad:6c:33:d2:07:
c7:5b:70:99:b3:29:73:ad:43:ff:11:91:49:0f:cf:6f:38:b6:
54:d3:fb:4c:9f:27:a9:b2:61:72:e6:df:24:65:bc:28:8d:3f:
91:f0:57:d9:ec:48:b5:89:0d:1f:f5:84:83:3e:ef:95:37:19:
72:ed:2c:37:87:b0:ab:3d:58:48:ef:11:7e:ca:c5:a6:2f:98:
5a:4d:40:4d:b7:64:25:7b:4d:42:1c:0a:7e:b6:a5:7e:ab:04:
58:3f:b9:63:9c:f8:23:8f:4a:06:1d:9e:5b:9a:33:46:20:66:
a0:f6:d9:58:da:7d:02:e2:2e:c5:6a:7e:54:6d:49:a9:06:fb:
00:0e:27:08:50:87:18:6f:0e:86:a1:4f:cf:aa:a2:12:27:61:
12:3a:9b:e6:eb:b1:c6:5c:21:41:e1:c3:87:88:9b:ad:06:3f:
a1:fd:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:36 2025 by rpki-client