Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: 1d3gQ+PAdvj7ANS8jL5SsLf4GEJdut4lKwF0eSz3Gxs=
Subject key identifier: 97:8E:22:77:9A:01:F4:6D:04:89:20:B6:91:B3:E5:B9:72:8D:5B:00
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 01976DAB8DD49A431685E36B50EA3080C0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 09:00:48 +0000
Manifest this update: Sat 14 Jun 2025 09:00:48 +0000
Manifest next update: Sun 15 Jun 2025 09:00:48 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: U0dGD7OeaIjxqKIHRmhDyipAOFFC2CIhxE+5Pc58vas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:8d:d4:9a:43:16:85:e3:6b:50:ea:30:80:c0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Jun 14 09:00:48 2025 GMT
Not After : Jun 15 09:00:48 2025 GMT
Subject: CN=978e22779a01f46d048920b691b3e5b9728d5b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:95:45:ac:4e:fe:d2:64:6e:f7:b7:41:0c:
6c:59:f9:86:b9:55:7b:00:50:9e:3a:9e:79:e3:2d:
a7:f8:ae:21:98:83:1c:5a:2c:f3:b1:8a:4a:75:1c:
12:00:c5:e7:60:37:b2:04:cf:e8:e8:c5:63:da:1e:
29:c0:6c:bc:87:fb:b5:b4:e0:60:3f:82:cf:b2:9a:
cf:85:23:82:da:07:94:96:44:3d:a2:77:2c:c8:33:
a3:b0:16:bb:b7:92:ab:a3:2d:ab:b1:d0:5c:d9:73:
a8:c5:d3:59:48:bd:19:58:6a:36:68:91:31:2a:62:
93:02:27:7e:29:01:20:3c:56:3b:13:f8:41:4a:0a:
d7:d3:85:f3:85:d8:0c:a8:51:22:49:26:69:03:8c:
a8:4c:2e:36:d8:d9:2d:d5:aa:b7:65:93:9b:91:5c:
02:51:c2:57:36:d1:f4:14:f6:03:3a:c0:34:91:ce:
ec:5c:bc:60:49:dd:92:05:d0:d9:5b:ac:08:6b:16:
a5:15:c7:7a:46:6a:c9:59:88:4c:7e:06:cc:0e:2d:
13:48:ed:1e:7a:37:d4:99:05:15:47:ab:49:1a:80:
57:cd:af:60:a8:4b:ec:3e:39:ff:91:60:c5:c9:d5:
b6:c2:66:bc:8a:2b:00:ba:7c:01:89:bb:8b:83:e1:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:22:77:9A:01:F4:6D:04:89:20:B6:91:B3:E5:B9:72:8D:5B:00
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:22:34:16:38:59:e4:00:7d:d2:4a:a6:bd:e9:b0:25:fc:
bf:8e:ba:ac:1b:dc:29:e4:79:04:c6:9e:67:d9:87:5b:96:2d:
72:e3:f8:2a:d4:84:8f:d7:84:79:5c:7f:03:f3:8b:67:5f:09:
3d:f3:cd:b2:33:6b:e0:0c:df:54:b6:1a:04:d0:2e:4a:79:70:
2e:07:c7:54:df:22:64:7d:39:ad:54:88:e9:75:f3:5d:ae:b6:
fd:6b:a0:b6:3d:e2:ae:af:3c:25:fe:37:e5:a7:44:57:26:d2:
a6:9c:b4:68:a4:cb:79:7e:67:a4:2f:c7:3e:02:8d:51:4b:7d:
be:6e:36:3a:56:08:44:23:5d:92:74:8f:9e:d7:ca:d1:06:c0:
10:18:0b:d8:ab:bf:28:d1:e2:d2:c6:45:b1:4f:1c:a1:a5:b0:
ac:ad:30:77:4a:0b:c3:f9:f2:d1:6c:4f:79:f1:9d:9e:fc:21:
a7:9b:04:17:ee:fe:db:32:17:73:fd:dd:7b:99:df:16:83:0f:
90:28:5c:b8:9e:67:d8:b0:cd:dc:22:01:05:a4:3c:5d:1f:4b:
b6:3c:8e:99:49:4d:13:bc:37:dd:c6:6c:a3:8e:cb:ae:2d:fa:
c9:5e:28:46:12:01:ed:ce:1b:c4:31:ea:54:87:c6:70:70:b1:
01:5c:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:56 2025 by rpki-client