Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: tjfBzRf/2B34Fisghsze6ebnDpPZVt4+luI/tLoczbc=
Subject key identifier: 86:4F:BF:FD:CA:84:85:60:DA:52:77:BA:CD:3D:EA:4D:9D:6E:A6:D6
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 019784D828DE840E01FBB71777E88BBD1152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 12DD
Signing time: Wed 18 Jun 2025 21:00:48 +0000
Manifest this update: Wed 18 Jun 2025 21:00:48 +0000
Manifest next update: Thu 19 Jun 2025 21:00:48 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: SppNhWPTAUyXJVXjAHZNJMdwN/NstEmLPOp9q6gV+VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d8:28:de:84:0e:01:fb:b7:17:77:e8:8b:bd:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Jun 18 21:00:48 2025 GMT
Not After : Jun 19 21:00:48 2025 GMT
Subject: CN=864fbffdca848560da5277bacd3dea4d9d6ea6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:75:3e:7d:84:9c:2c:ff:d2:56:df:90:a0:
68:6e:15:c2:78:0e:41:3b:b9:89:c1:68:23:44:cb:
8c:e5:97:f3:f4:6d:e1:5c:f1:9a:30:b8:2f:0a:b4:
8e:cd:de:32:69:a5:0d:08:7e:7f:9b:ec:7b:f6:34:
ff:91:33:40:83:a9:07:71:a1:c6:37:69:0b:f8:20:
1a:30:bb:50:09:5c:46:38:c9:b2:cd:39:e0:05:6f:
a8:60:e3:66:3d:ce:1b:e1:fe:c1:b8:60:93:80:24:
44:1b:eb:70:d2:a3:df:cf:d8:ec:f0:0a:58:fb:49:
90:91:23:56:49:1b:61:78:fe:46:06:41:a6:73:99:
71:a4:f8:51:28:e4:e0:9f:10:9f:49:1b:b2:24:10:
99:32:30:4f:df:16:06:45:83:54:8c:62:01:f7:3e:
4f:8f:98:b9:f6:4e:0d:86:af:fd:ed:6f:d6:3d:7f:
5c:f3:4e:a7:61:2a:3b:48:ca:74:aa:90:8b:88:91:
36:da:23:9c:52:65:81:40:fc:b2:29:2f:7b:e6:03:
0e:e9:7a:16:f4:4a:df:e9:14:a4:8d:f3:cc:a6:ed:
b7:e0:54:12:37:a8:57:68:81:2d:7f:ef:01:9c:81:
c9:92:85:da:b9:fb:da:40:16:ad:fb:b8:1e:b1:db:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:BF:FD:CA:84:85:60:DA:52:77:BA:CD:3D:EA:4D:9D:6E:A6:D6
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f1:cf:88:05:ed:ae:9e:6d:bd:af:4e:6e:f6:99:6e:20:23:
af:5f:9c:23:6b:d4:41:44:bf:db:ae:d0:9e:26:16:bc:79:c0:
6f:0d:05:7a:22:94:dd:8a:c6:54:70:c5:46:1b:e9:ce:46:dd:
c9:47:4f:14:26:2e:0c:b5:79:84:75:25:16:76:6f:c3:ef:48:
77:f1:d6:e2:b4:0f:8a:5a:ee:b9:ee:8c:d9:a8:0a:d6:c4:c8:
8d:4a:5c:c0:f2:42:e5:75:de:03:c0:c9:40:19:f2:5e:a8:a0:
4e:46:cc:99:96:12:64:63:e6:ff:c7:40:71:5c:e8:1b:c3:cc:
8c:4d:63:a2:3f:00:bb:a6:8d:d3:3e:21:c9:1a:2b:e1:25:a4:
6f:61:86:c5:81:30:70:21:96:41:88:42:93:82:06:7a:a8:44:
ae:31:55:29:dd:bc:f5:7e:38:2b:7a:a0:f8:4d:ba:ca:33:72:
14:72:a2:92:09:79:ca:66:e5:08:75:38:1e:4c:8e:9f:3d:bb:
a8:bf:82:9d:cc:52:33:86:77:21:99:ec:7d:c6:a6:49:8f:8d:
c3:ef:d7:d1:a8:6e:ca:57:e2:84:ca:a5:bd:78:de:5b:be:e1:
06:51:a6:fe:8b:13:f9:86:8b:2b:d0:1e:08:e3:f7:a6:37:40:
d3:35:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:36:16 2025 by rpki-client