Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: kC4rjHgPGOqFKKjVOkX9Dlpwh8qi4euVECfzOlk522M=
Subject key identifier: 32:C6:7E:F2:C8:FF:AA:61:4D:00:28:EA:B6:F0:2C:99:31:49:5E:71
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 01976F9A0EB0ADD654C77DC8B4A76918D83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 18:00:56 +0000
Manifest this update: Sat 14 Jun 2025 18:00:56 +0000
Manifest next update: Sun 15 Jun 2025 18:00:56 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: KJPzrT+sW7WAqXkRTB8odR+9zc8jVVuiIzZswDDct7w=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:0e:b0:ad:d6:54:c7:7d:c8:b4:a7:69:18:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jun 14 18:00:56 2025 GMT
Not After : Jun 15 18:00:56 2025 GMT
Subject: CN=32c67ef2c8ffaa614d0028eab6f02c9931495e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:bc:e1:d5:14:38:33:a1:d0:ea:6a:e4:34:
2b:16:30:42:85:0f:1b:4a:5b:1e:78:f9:6a:6e:64:
ec:40:9d:a8:f0:49:ac:6f:ca:9f:ed:cf:92:a5:75:
9f:9f:ac:df:0b:ca:d2:b5:a1:46:5a:b4:05:bc:05:
05:5c:24:a2:5f:c5:2e:1c:04:c2:39:af:14:23:32:
40:4e:64:50:b0:d3:58:80:48:ca:19:0e:6a:32:16:
98:c9:86:90:2c:d5:95:01:5f:2b:55:a0:80:30:9e:
e2:72:92:8f:a5:dc:0f:6c:13:69:78:69:de:17:df:
55:6b:a1:0a:a0:5c:c0:e8:a0:e1:49:76:0d:c5:b4:
0a:d4:71:02:d8:bc:35:e4:8a:db:27:88:cf:a2:71:
ec:f7:9e:c8:dc:c2:57:3c:b5:92:16:3c:49:61:df:
27:01:33:d3:35:87:fa:58:6c:d0:a5:fd:79:19:3d:
d0:0d:5e:c6:2d:ec:91:21:50:2a:17:b1:28:63:47:
46:6c:b5:98:b8:c4:ee:7c:c4:d3:b7:bd:db:d0:b8:
8c:e8:1d:1b:72:9c:14:c7:f1:75:e6:36:51:95:c1:
a6:8f:e6:14:26:ad:ff:c5:77:a6:2c:55:bf:03:c8:
5f:c9:cc:1e:e0:83:29:71:c2:96:80:90:e8:29:78:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:7E:F2:C8:FF:AA:61:4D:00:28:EA:B6:F0:2C:99:31:49:5E:71
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:ea:a0:d9:5a:2e:7d:1f:19:70:24:a0:15:c9:29:92:0d:
95:6c:bb:a6:0a:e1:57:40:b6:b0:06:57:b0:4d:d8:e6:1d:23:
fa:f4:d9:f7:b0:a3:91:ef:a4:a6:42:08:fc:73:69:1c:91:e8:
c5:a5:5e:53:bb:ed:bc:19:28:7b:63:77:b5:79:45:bf:bf:69:
2e:81:ee:30:b6:01:12:b8:4c:c4:b5:34:18:90:c6:56:cb:b3:
57:e6:66:b5:3b:ba:fc:c0:b7:e5:c3:6f:e8:f7:b0:ab:b4:62:
cc:f3:6c:67:88:6e:92:45:0e:0c:80:59:d6:ca:d9:5b:7a:c2:
e1:29:20:d5:cf:b6:a3:1d:26:48:3b:cf:56:0a:8e:be:fe:4d:
a1:5a:00:0f:cd:7b:e6:c7:37:0f:2c:de:c3:0d:f2:c5:fb:96:
9d:17:a6:a9:ae:74:15:ee:b3:39:af:f7:dd:1c:d2:58:0a:a7:
d1:93:c6:d0:4a:2f:75:ac:ff:be:f7:05:11:4b:cf:e7:be:b8:
7f:02:54:e1:d6:bf:ff:67:5e:a5:02:ab:88:24:42:57:a5:70:
42:9b:53:ef:fb:54:9c:ae:24:a8:f8:ed:e8:75:78:7e:9e:63:
bb:6c:ad:3c:25:62:7f:68:85:44:3b:af:c7:63:c8:ad:5c:d3:
2a:c7:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:36 2025 by rpki-client