Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: NTGr2qvodgtx/292fpynxicbdyCP1tIGZXz+9vsvpfA=
Subject key identifier: 69:C6:91:E1:15:78:79:35:93:0E:62:36:72:E8:50:3B:BE:5F:13:02
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01976DAB9C072CA1D017C394C6580C84F2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 14DD
Signing time: Sat 14 Jun 2025 09:00:52 +0000
Manifest this update: Sat 14 Jun 2025 09:00:52 +0000
Manifest next update: Sun 15 Jun 2025 09:00:52 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: Z45pBycdL2Av2KLfF6kahAnPmUa8hpvgwRLHxKl7weI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:9c:07:2c:a1:d0:17:c3:94:c6:58:0c:84:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jun 14 09:00:52 2025 GMT
Not After : Jun 15 09:00:52 2025 GMT
Subject: CN=69c691e115787935930e623672e8503bbe5f1302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:0f:b8:dc:cc:e4:3c:a7:be:0a:3e:6c:c3:
5e:63:a3:6d:40:26:73:f1:c3:43:d9:b9:57:ed:0f:
59:f0:63:28:07:ed:92:f9:63:53:6b:8e:b1:5b:0a:
1f:77:41:dc:8b:2b:be:e1:0b:1a:f5:b6:b9:6a:26:
55:44:68:d1:ac:c0:ef:be:30:3f:26:35:91:2d:dc:
58:1e:df:e3:2e:ad:a9:70:04:cd:5d:69:80:fb:45:
49:07:25:dd:da:51:79:8d:04:5b:e5:2f:ec:20:ed:
ed:76:9a:78:2b:cf:01:2a:5e:39:1c:dd:61:b5:ea:
f4:6a:8c:02:ef:13:1a:a0:ee:c4:b5:33:85:16:b8:
16:71:f9:60:02:d9:d7:e0:10:5d:84:fb:30:dd:84:
9e:b3:8c:96:18:9e:68:e9:73:90:ab:75:3a:b0:b3:
5b:0b:33:85:4a:27:98:ef:fc:93:eb:2e:e2:38:97:
7f:0a:ae:d8:f9:88:e2:44:b6:06:e8:b3:34:38:b7:
95:40:cc:57:3b:62:9f:71:28:a5:21:18:3b:94:e3:
4f:a0:28:98:23:a6:1c:1b:9e:b6:98:2f:cf:7f:ee:
a8:b7:e6:19:94:0b:7f:fe:36:da:8f:3d:86:bc:57:
60:8a:f5:c7:0a:05:5c:df:ea:14:36:1d:52:21:50:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:91:E1:15:78:79:35:93:0E:62:36:72:E8:50:3B:BE:5F:13:02
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:fc:00:a9:40:7c:9d:ef:bf:17:dd:18:24:fc:b8:6e:4f:
cf:a9:3b:d4:c1:2e:3f:55:d7:92:a5:f1:90:1e:a9:0a:a2:60:
9d:72:1d:39:7e:36:5e:bd:f5:cf:49:9d:b0:f1:be:f6:73:74:
b8:53:5a:6b:45:05:da:5a:a9:b8:96:03:19:b9:be:9d:cc:f4:
9d:ec:c0:16:48:21:84:38:7f:5a:3e:0a:cd:a0:7e:3d:8a:1a:
14:67:91:86:11:52:0f:d2:80:cc:bd:bf:2a:bb:2d:37:83:e2:
c2:1e:fa:85:ee:8c:3b:bb:1f:7a:9e:e9:f6:13:89:43:cf:99:
9b:5a:20:0e:3d:2d:66:10:6f:68:34:cf:40:27:87:35:2e:cc:
fd:91:93:98:a0:e1:88:38:f4:b5:0f:c2:83:24:a3:85:35:84:
dc:d2:60:37:34:2d:b9:5d:0e:da:05:30:37:ee:b8:cb:8c:2b:
74:50:d3:00:d0:9c:45:f8:37:38:23:e0:1e:83:bf:a8:a7:d4:
c3:5d:df:2d:bc:40:1f:24:71:75:37:44:f6:5a:5a:6a:1c:ac:
a7:fc:b7:87:20:79:91:3f:76:d3:7a:ba:d0:4d:6f:46:0c:5b:
65:e8:f8:67:de:34:ed:32:8c:5a:9e:88:e9:28:76:3e:60:e7:
b5:dd:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:20 2025 by rpki-client