Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: 8tCWZ7TKrvX9fhgKtdsYcCdmOcAxov/C9IjZmoy6j8M=
Subject key identifier: 9C:AD:C5:42:29:F0:67:EF:8D:AF:CB:67:52:F4:67:57:29:05:B5:A1
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 01976960CF7063E01E1B036B14365FA4043C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 102F
Signing time: Fri 13 Jun 2025 13:00:41 +0000
Manifest this update: Fri 13 Jun 2025 13:00:41 +0000
Manifest next update: Sat 14 Jun 2025 13:00:41 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: KpKXHJR8A55X2RuwX7NnzDw1uhiNjhLv1ACeZUX2LYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:cf:70:63:e0:1e:1b:03:6b:14:36:5f:a4:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jun 13 13:00:41 2025 GMT
Not After : Jun 14 13:00:41 2025 GMT
Subject: CN=9cadc54229f067ef8dafcb6752f467572905b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:7e:51:18:5c:a3:5f:9b:39:8e:14:01:79:
3e:12:32:d6:e3:d5:e1:a3:c5:26:af:20:b8:7f:4e:
eb:5a:03:9f:91:3d:3e:22:52:cc:c7:1d:33:2b:67:
60:7b:79:81:3c:5c:17:00:95:a4:38:7c:8a:c9:09:
a5:a5:77:14:02:85:1e:c1:28:08:b8:eb:0e:dd:f5:
4d:0c:5b:8f:6b:2f:da:16:9a:d0:6d:ff:2d:a4:1e:
9c:92:1c:a3:be:49:49:16:8d:9f:01:5f:15:d5:29:
13:37:10:b4:23:44:32:c8:fe:13:26:58:f3:5c:5d:
a5:85:1e:cf:fd:cf:22:1d:c4:76:d8:71:d7:db:9d:
e8:4a:71:a6:b1:be:6c:37:25:76:83:49:0c:f8:f3:
4f:ed:10:f5:05:75:ff:f6:0e:cb:b3:a0:e5:1e:44:
7e:c9:1b:de:f0:a2:e6:e2:80:b6:f8:40:c4:05:c5:
2c:2f:5b:05:a0:5b:68:e4:2e:65:55:47:c4:c5:3a:
65:ab:19:9e:cb:f4:b5:56:75:35:26:ec:58:43:9f:
31:9e:ec:0c:1d:8c:4f:29:30:34:91:ff:f0:99:d3:
b3:a2:40:82:72:e6:7e:8b:d3:e6:35:57:fa:41:e0:
7f:bb:cb:49:5c:60:a9:08:ea:6c:a0:e6:76:17:0c:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:C5:42:29:F0:67:EF:8D:AF:CB:67:52:F4:67:57:29:05:B5:A1
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:79:71:da:4d:36:f1:e7:22:de:dd:90:a0:e1:7b:a4:78:b4:
2e:b4:c8:7d:b7:f3:25:4c:8d:5d:a6:6f:72:cd:a2:70:b9:4f:
50:ab:3b:5b:5a:06:16:e4:44:21:b0:f7:49:96:da:c9:b9:58:
11:e9:9c:92:a4:a7:65:20:1b:d4:e5:33:48:55:9a:e0:25:3f:
c7:1a:d6:6b:99:3e:a3:0a:24:4e:8a:ce:42:e5:3e:03:37:2e:
03:f6:ef:35:78:6a:5c:ab:0c:d9:68:85:d2:90:a8:cb:1d:5b:
76:cb:6b:57:92:e3:d8:7c:61:db:e0:d5:4f:ca:9c:e5:69:78:
1e:22:52:76:54:f8:d9:fe:6d:25:4b:58:91:b4:eb:16:e4:0d:
9d:32:5f:76:5a:2c:70:91:20:98:7e:58:2d:f3:9e:9e:eb:25:
23:d0:3c:bf:be:a0:ac:03:14:b5:05:ae:66:cb:c3:fc:0f:99:
82:5a:8e:23:f5:68:bd:84:26:d9:ce:6c:86:25:bb:0f:dc:a6:
fe:b3:bc:00:25:6f:dc:63:27:58:ea:95:1e:71:62:a3:5e:14:
f5:63:a5:4d:fc:02:99:30:3f:23:74:2e:ad:5c:ff:e2:9a:3a:
fa:3d:77:84:c7:1c:4f:5c:f2:6d:1b:40:57:f3:df:f3:6e:31:
6d:3e:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:06 2025 by rpki-client