Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: MsXSSLrR3wzhT1P3b9IWb/zYgjQxekIg4qSYT9XiI8g=
Subject key identifier: D7:01:22:14:73:B0:41:C0:14:1E:35:43:A9:0D:27:EE:02:88:8C:E5
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 01977FB1B5B6750F5CC11630D15834E01CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 01BB
Signing time: Tue 17 Jun 2025 21:00:42 +0000
Manifest this update: Tue 17 Jun 2025 21:00:42 +0000
Manifest next update: Wed 18 Jun 2025 21:00:42 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: Cm4m+fF/91f0BM7cu6aUS6ysqxMaD4m2B1LpCFofQ3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:b5:b6:75:0f:5c:c1:16:30:d1:58:34:e0:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jun 17 21:00:42 2025 GMT
Not After : Jun 18 21:00:42 2025 GMT
Subject: CN=d701221473b041c0141e3543a90d27ee02888ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:56:66:9a:15:35:af:06:9b:6f:e0:61:63:
5d:8f:c5:27:0c:74:66:34:6e:e7:ab:af:1c:35:fa:
40:63:5b:c8:1e:ab:96:b8:eb:63:1b:ad:81:c2:17:
b1:82:c8:90:f4:c7:dd:33:bd:ab:e8:07:23:c3:3b:
39:90:a4:36:28:4b:7f:b8:8c:12:76:32:06:e9:d4:
3c:e2:f0:87:7e:67:5b:f9:81:81:65:8d:5b:b4:5c:
9f:2f:61:c9:17:41:d8:8c:1d:b6:b8:be:36:0e:cf:
4c:0a:3d:b0:14:98:62:2c:17:94:79:f4:28:ec:a0:
70:00:63:bb:75:11:7b:1f:7f:64:53:1c:b4:53:ee:
31:7f:f2:1a:d5:b0:9e:cb:17:99:f9:27:98:ce:bb:
0b:13:08:fd:3b:cc:19:4c:45:95:05:ea:61:fc:f0:
b8:3e:32:ca:0a:30:8c:94:20:2b:d8:bb:dc:68:75:
00:e9:10:17:1a:5a:06:0e:92:3a:8c:7e:8b:03:54:
3e:38:98:6e:e9:35:57:af:59:45:e5:86:ce:f5:15:
a2:3d:a4:3c:8d:0b:68:12:8b:a8:1c:8f:38:ed:59:
12:e8:b8:26:bd:b9:dd:8d:ba:0f:3e:80:61:74:e9:
57:50:db:a8:a9:da:80:70:c1:12:c6:52:73:ec:d4:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:22:14:73:B0:41:C0:14:1E:35:43:A9:0D:27:EE:02:88:8C:E5
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:48:4c:ca:6c:14:4c:2d:1a:a4:a9:64:ce:72:c5:ed:74:
57:f1:a2:d6:4e:28:8d:a4:54:e8:3c:de:24:92:e8:69:0c:a8:
ef:10:4f:56:f5:50:e9:6c:b0:ef:9c:8f:f8:56:7f:64:c3:34:
0c:2b:40:22:68:80:7c:80:32:7d:34:df:35:66:59:85:ef:dc:
a5:b0:56:e7:63:cb:6f:ee:4d:d6:46:09:5a:8f:fd:a7:2d:ee:
0b:85:4c:d6:56:53:0e:95:9e:3a:79:b5:47:b7:bf:33:f7:1d:
f1:43:73:92:3f:fb:8f:50:05:2c:b4:32:b5:56:2f:29:be:cc:
20:d2:33:12:93:14:60:66:b0:46:c6:aa:46:2f:8a:2a:c9:37:
8b:65:49:e6:d8:23:96:12:51:ad:5c:4b:99:fa:6b:73:c0:42:
3c:9b:90:7c:e5:01:e8:a6:2c:c6:f1:98:e4:b3:19:a8:f3:80:
9b:c5:5f:1b:45:3b:dd:69:3e:8e:07:e3:9c:b9:27:04:c8:3f:
fd:aa:93:b5:34:37:03:f8:33:fb:52:e5:14:e8:8a:5d:3d:a2:
30:77:5d:4b:75:2c:91:30:8a:5f:4c:7e:09:5d:1e:7d:3c:c7:
c3:74:37:dc:4a:c0:25:88:c4:ca:0d:31:3b:21:03:35:c5:9f:
0a:f2:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:27:46 2025 by rpki-client