Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: XXcuMIWYSIZxZyPqcjKCGGDhZqDz/gY97JuZwxLzCXU=
Subject key identifier: 37:69:66:BA:32:D0:B6:40:A6:A1:CB:76:FF:F3:C8:49:3F:D5:40:19
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 01976CCFB9126026214472A19E7B23AA29C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 1485
Signing time: Sat 14 Jun 2025 05:00:41 +0000
Manifest this update: Sat 14 Jun 2025 05:00:41 +0000
Manifest next update: Sun 15 Jun 2025 05:00:41 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: ywj4Ng9uqIq1BK4lK5L7BLYAymknvgGIFdY5ZT2Skn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:b9:12:60:26:21:44:72:a1:9e:7b:23:aa:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jun 14 05:00:41 2025 GMT
Not After : Jun 15 05:00:41 2025 GMT
Subject: CN=376966ba32d0b640a6a1cb76fff3c8493fd54019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:1c:ba:eb:26:23:f8:5c:7d:00:67:a1:23:
61:58:58:51:7e:79:85:6d:c8:86:a2:8e:90:f0:df:
f7:ef:a1:04:f1:fe:24:d0:e0:58:bc:48:71:81:d0:
00:68:57:d5:bb:40:c8:a1:d7:84:c0:8e:55:18:7d:
76:56:34:46:74:8c:34:0f:52:54:5c:8c:28:cc:8f:
97:cc:f3:d7:9b:31:86:8f:7e:bd:47:6d:3e:33:a3:
9c:0a:70:91:6b:44:dc:e6:cd:a0:21:e7:4d:66:bc:
61:0b:9b:45:46:42:73:58:be:43:82:a1:ff:08:fc:
d6:da:af:bd:18:77:72:e5:34:0b:31:f8:7b:a8:d2:
80:50:d5:0e:a7:c0:c7:26:b1:70:6e:95:9b:b6:2e:
3d:2d:64:66:cc:a9:42:1c:ef:b7:4a:e4:27:02:20:
ab:c5:3a:62:a4:47:3b:a1:bd:af:88:ad:85:97:7d:
1a:7a:82:f3:a0:44:44:f3:dc:01:7c:de:0a:ee:01:
3d:f3:eb:6d:0b:b2:53:53:d2:1a:06:97:07:e5:60:
a8:11:c7:85:db:ba:d9:6a:25:1c:2b:a9:a2:b4:78:
f8:18:b7:d4:66:af:dc:b7:f1:7c:2a:9a:cf:8c:af:
34:be:3a:5a:4a:5d:72:7f:04:ac:63:aa:cd:29:f6:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:66:BA:32:D0:B6:40:A6:A1:CB:76:FF:F3:C8:49:3F:D5:40:19
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cd:2a:33:a0:14:f2:8d:13:02:26:de:39:62:d8:51:58:23:
44:ec:7d:12:af:06:75:88:58:49:00:45:2e:91:d6:c4:26:a9:
62:45:df:b4:79:70:83:c1:ff:85:34:18:94:33:96:b5:0a:0d:
38:c2:eb:8f:b5:eb:95:d2:49:d2:4c:09:22:e8:a0:d1:53:ed:
93:78:52:b9:1b:49:89:8b:57:73:9d:67:ac:5a:b6:98:fc:5e:
4d:73:e7:6a:a1:d0:79:d9:d9:c2:a3:d2:e6:cb:65:1c:a5:8d:
1c:45:b1:5c:43:c3:54:91:d7:ff:82:f5:d4:a4:2f:a0:bf:44:
23:e8:46:13:34:13:13:3f:1b:42:eb:aa:d3:7c:8e:54:8c:fb:
97:ae:9b:4c:e2:68:8d:bf:ee:f4:6a:a6:8a:ab:d5:a3:d0:31:
e5:87:cd:a4:16:21:da:bb:73:52:e7:1a:0f:ad:cf:5b:4f:35:
c1:b9:f5:1e:14:c4:04:91:ad:d3:35:87:46:85:c7:88:c9:cf:
72:51:fe:9c:1f:7f:11:a7:77:40:db:40:a9:53:4b:43:31:08:
fc:16:4b:64:8b:3e:5c:93:ec:00:ba:5e:0e:22:e0:55:1d:ae:
db:6a:2a:fd:f7:9b:55:0c:69:34:92:8f:9d:55:e3:19:17:97:
a1:a9:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:52:21 2025 by rpki-client