Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 5g+fn7+ocfPY4rbECCtyIFdGQuDXFI9yEuUS1xVxcoc=
Subject key identifier: BD:13:CF:71:B4:2E:4B:D4:30:BC:2D:94:31:87:B8:47:A0:C3:18:25
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0197786648CD1D485EFB057ED5E8194AA484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 9A
Signing time: Mon 16 Jun 2025 11:00:58 +0000
Manifest this update: Mon 16 Jun 2025 11:00:58 +0000
Manifest next update: Tue 17 Jun 2025 11:00:58 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: y986QDLm7CcLkgZU03xl6CTXok9qoumQTFg2NgBpk8w=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:48:cd:1d:48:5e:fb:05:7e:d5:e8:19:4a:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Jun 16 11:00:58 2025 GMT
Not After : Jun 17 11:00:58 2025 GMT
Subject: CN=bd13cf71b42e4bd430bc2d943187b847a0c31825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:e0:55:7d:06:0a:a2:20:3e:8e:9e:3d:51:
d0:58:b9:a2:fe:1a:61:31:a4:24:2f:ed:7c:d2:50:
cf:87:84:d4:63:48:34:0a:1e:c2:8b:b5:13:2f:22:
87:28:f7:e1:b9:20:16:fd:a5:cd:26:2a:ab:b7:50:
a7:c7:51:83:38:92:47:d2:48:ff:df:21:7c:7e:75:
9a:42:3e:31:7f:ba:7b:53:fa:fb:fd:1c:da:22:25:
12:ca:10:e0:12:3d:03:7c:12:10:e9:37:1a:9a:07:
28:e0:ae:4c:cf:e4:32:49:fa:34:cb:71:3d:ba:5f:
f3:05:70:86:8d:16:19:44:3d:c7:c0:c2:9a:5d:a6:
de:c3:db:9c:00:75:8f:44:3a:ee:0f:72:10:e2:c0:
8e:84:4e:8c:e5:c7:9c:8f:d3:fe:bb:b6:dd:48:d7:
2e:91:1c:9d:39:a4:78:22:5b:f1:94:12:06:44:62:
67:85:74:16:49:d6:2e:31:a7:28:e2:0b:00:de:b4:
8b:35:62:84:29:42:cf:24:73:7c:ef:56:8a:2f:e3:
c3:6b:c8:3d:a6:16:24:9e:97:01:19:89:6d:81:d6:
7d:9e:7b:d6:da:22:9d:0a:18:8a:a9:af:d9:ee:f0:
63:82:af:15:0a:29:e9:40:00:93:e9:f0:63:3f:d7:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:CF:71:B4:2E:4B:D4:30:BC:2D:94:31:87:B8:47:A0:C3:18:25
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:f2:47:b2:50:ee:44:75:a6:eb:9b:98:4d:d3:ef:b0:63:
39:b6:18:01:f8:ae:ea:d3:ff:ec:a0:0d:6f:48:c4:40:60:80:
41:7f:5b:c4:d5:5e:6b:b9:9b:e1:ee:3e:98:df:b2:80:5a:77:
64:07:95:a0:2b:45:a5:28:c7:01:a0:20:88:8e:93:ae:a4:f1:
29:12:8a:ea:20:7a:6d:c0:49:16:be:c3:df:28:1a:bd:54:a9:
4b:f8:40:ec:f7:b9:94:7c:16:48:a0:da:f2:b1:bb:01:21:4d:
0e:b9:38:0e:81:82:25:6b:b7:f2:d6:71:8f:2b:a8:52:4f:53:
75:96:4c:e7:de:ce:2a:98:1a:7e:e1:c1:4f:cf:ef:98:59:a5:
8e:4e:15:df:08:83:d0:b6:aa:81:02:da:85:b7:a8:b6:45:25:
c0:7e:8f:94:33:b5:35:29:49:5d:2a:21:0a:1d:f0:12:1e:7d:
a8:ee:8e:0a:4c:d7:46:11:aa:e4:93:a9:01:43:c3:3e:51:b6:
a0:f6:28:7f:a7:c6:13:38:2a:59:99:12:38:77:3f:2e:4e:94:
23:96:25:ad:ca:c0:b5:52:8b:f7:b5:fe:bc:63:03:14:7c:d7:
1a:c3:7b:90:f4:37:8f:dd:1d:b1:79:70:84:c2:ff:ec:5f:92:
b6:ec:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:02:52 2025 by rpki-client