Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: qwc/ENsExELpwrMR6l8b0QO4LsM2aeHDThAFfAYM+y4=
Subject key identifier: 43:5B:81:3C:CE:2C:CA:AD:33:DC:47:FA:84:B8:6B:15:F7:72:E5:4E
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01976960CF8BA6C225E7ABA90F7F07A06323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0BC0
Signing time: Fri 13 Jun 2025 13:00:41 +0000
Manifest this update: Fri 13 Jun 2025 13:00:41 +0000
Manifest next update: Sat 14 Jun 2025 13:00:41 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: nhTufPvtw/40kguJlL1cc+DSBfxKKEmFgbzaBYUxErk=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:cf:8b:a6:c2:25:e7:ab:a9:0f:7f:07:a0:63:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jun 13 13:00:41 2025 GMT
Not After : Jun 14 13:00:41 2025 GMT
Subject: CN=435b813cce2ccaad33dc47fa84b86b15f772e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:76:05:85:53:04:42:61:52:da:98:e6:e3:
c6:82:23:32:92:4d:88:cc:53:34:ad:73:22:fa:3f:
24:31:e0:f0:f2:60:e9:9e:13:99:83:b3:ab:17:49:
b6:21:13:f2:cb:b3:48:45:87:3e:7d:d7:3c:6f:14:
ae:44:4c:f1:7a:2f:81:8a:ba:e7:64:17:94:75:8a:
7b:68:96:c2:92:82:65:c0:5b:23:27:2b:e6:b8:23:
28:23:1d:10:19:6d:40:15:1d:02:28:fd:3f:f0:29:
60:fd:a3:9e:fa:63:1a:20:05:59:8e:2c:9d:38:d5:
f3:73:cf:f4:16:67:97:6a:44:15:a9:b0:3b:4e:64:
4e:fc:4c:20:ee:1f:d7:f6:98:5b:81:0f:21:32:35:
c5:81:93:29:dc:f1:a1:91:84:24:19:60:9b:ec:56:
7a:2c:37:b1:f3:d8:dc:b6:5a:41:ab:ad:72:7c:1a:
4c:0e:1e:f7:22:25:76:98:4c:fe:b3:88:ba:34:fb:
d3:c0:2e:af:27:a6:f6:b9:e4:32:1c:2e:4d:3f:50:
cc:c7:eb:40:9a:1f:3e:c4:2a:a8:e3:5f:c6:3f:69:
f9:6f:42:1d:98:0a:55:5f:74:2f:a0:4a:35:80:cf:
67:ed:b5:2f:23:c2:b4:3e:18:15:77:22:2b:c4:86:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:81:3C:CE:2C:CA:AD:33:DC:47:FA:84:B8:6B:15:F7:72:E5:4E
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:bd:04:f9:74:e5:b6:b2:3f:d2:ce:72:b4:44:c9:6c:32:
93:26:d1:b8:e2:76:20:f7:4c:35:dd:97:4b:27:ef:37:6f:c6:
bc:d4:2e:76:a9:c7:54:50:99:2c:4a:65:8a:1c:89:88:7d:39:
02:2f:89:5c:bb:12:19:55:7e:eb:1a:07:08:28:8e:95:43:33:
de:4a:1d:fd:7c:0a:07:f8:14:48:73:17:6a:c6:56:66:9d:be:
de:ae:b5:10:09:33:73:08:44:76:46:d3:3d:f9:e1:fb:61:38:
98:5a:35:ba:61:ce:04:41:6e:1c:3b:b9:26:cb:68:11:a7:06:
fd:b3:48:8f:62:e2:03:2d:6d:67:3c:bd:45:a2:ba:9e:a7:13:
7a:11:ee:84:50:c5:82:e0:a1:56:e5:82:1b:37:f5:bb:f8:32:
28:26:be:e6:6d:7c:a6:44:18:46:50:46:72:e5:4e:f5:91:88:
07:7d:e9:79:9b:16:ba:0e:07:a3:30:f8:7a:30:a6:66:80:9e:
b5:14:e4:a3:df:c7:de:8b:7f:4c:a7:ff:ae:b5:36:2d:19:a1:
65:36:0a:4f:8a:2f:8d:cd:59:46:9d:c2:f8:7c:1b:20:09:26:
d8:84:ff:9d:e9:90:2d:90:c7:d3:03:1f:05:86:7e:77:79:cd:
9e:7d:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:39 2025 by rpki-client