Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: YeWB8czHu5z+k+9fKvfrOmLuWBHQn4oNZYgNmAbaym0=
Subject key identifier: 89:4C:C4:F8:42:B4:5C:15:E1:B6:C2:13:73:C8:20:1B:4B:D5:5B:C8
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019773AD87F4899DD63A3CE08F8A1533BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0E52
Signing time: Sun 15 Jun 2025 13:00:41 +0000
Manifest this update: Sun 15 Jun 2025 13:00:41 +0000
Manifest next update: Mon 16 Jun 2025 13:00:41 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 7MJNBi66StNJmKwx2BHp3Y9oHQ8ONtGhcs/+YvTaaxE=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:87:f4:89:9d:d6:3a:3c:e0:8f:8a:15:33:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 15 13:00:41 2025 GMT
Not After : Jun 16 13:00:41 2025 GMT
Subject: CN=894cc4f842b45c15e1b6c21373c8201b4bd55bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:44:e5:1b:32:f9:ae:a3:0f:c6:07:da:e1:
0b:2d:25:c8:7d:70:e7:89:eb:74:bd:cc:d8:2b:8c:
35:32:e4:4e:40:1f:47:25:2b:a3:85:aa:3f:2c:1d:
13:35:81:7b:01:9d:da:f7:1d:b8:98:cb:68:4a:5b:
ba:77:48:2e:df:97:3d:fc:e0:f9:37:94:4d:52:61:
ef:9f:ed:55:4c:2d:94:1d:ac:5c:08:47:c7:3d:8f:
2e:34:0b:21:84:84:9a:cb:f7:b0:cb:10:08:84:e3:
f5:0a:ff:ed:fe:52:dc:df:96:d9:85:33:4e:b9:37:
6c:28:bc:1d:f2:1c:eb:4c:2d:a3:82:98:48:67:00:
84:ef:cb:06:c5:56:33:a1:93:a8:4a:fe:2a:1b:79:
af:1d:9f:7c:09:bd:a8:de:2e:70:c4:46:95:05:85:
56:4d:86:8a:35:8c:b4:68:a1:55:36:63:b8:26:cd:
c3:f6:4d:fd:9d:65:61:4b:1b:5e:fe:11:e3:88:47:
e7:37:c5:68:3f:6d:b9:bb:29:d5:0c:0e:09:c9:7b:
48:18:6e:d6:59:f8:43:af:1c:1e:82:9d:cb:52:45:
b4:2c:f7:3a:9c:f2:79:13:4f:67:56:0a:c6:97:79:
72:1e:62:a5:f8:b4:0f:dc:c4:e2:0d:94:1c:19:b3:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:C4:F8:42:B4:5C:15:E1:B6:C2:13:73:C8:20:1B:4B:D5:5B:C8
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:75:b6:aa:82:09:70:25:8b:7b:61:9c:c3:88:fa:ba:a9:
b3:cf:c2:ae:c9:2d:ad:96:01:e3:fc:ef:fc:99:38:b6:a8:0e:
ac:82:2a:72:a6:20:db:24:e8:8d:6b:22:6d:e5:53:a8:5f:b2:
8f:ab:26:a2:71:c5:16:55:72:32:e8:6f:23:5d:ef:fd:44:e2:
82:1b:cc:d5:e6:0b:4e:2b:e2:a1:df:a3:52:bb:1d:c3:79:ae:
56:78:58:66:57:19:06:a6:2f:2f:39:05:61:bb:f4:e8:30:e5:
d4:2b:84:4b:33:a6:b9:5f:50:78:89:ef:9c:fe:a4:ab:b8:e5:
b5:cc:0b:48:05:9e:79:60:f8:0a:b0:ff:43:51:69:f7:80:f2:
08:43:be:ba:8f:88:6b:8d:41:db:8f:3c:76:b1:fc:21:43:c1:
07:ef:ee:02:d1:30:e5:8d:b2:22:b9:58:cb:62:1b:85:18:b6:
b5:45:44:79:d0:9d:8f:80:24:35:cd:ce:9c:bc:d8:ed:26:de:
54:94:f7:ac:29:cf:e7:90:63:aa:05:23:f5:65:80:aa:ac:71:
ed:e1:69:2b:6e:b6:ab:e9:8c:95:b0:5b:7f:89:c0:20:40:12:
5f:65:30:73:9d:5b:80:45:e4:d5:3d:5d:1d:67:95:65:37:ce:
fe:64:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:19 2025 by rpki-client