Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: BhHY0LXU5wX8FHwINpoa1NbzdmRh8wDhUUgroHUFDXA=
Subject key identifier: 94:F4:81:43:B0:F0:6A:68:4F:78:29:78:5B:59:39:BA:75:B2:63:CB
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019771F5C0FF533A951EE800D94EBD3B655F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 05:00:20 +0000
Manifest this update: Sun 15 Jun 2025 05:00:20 +0000
Manifest next update: Mon 16 Jun 2025 05:00:20 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: iGC3bk308KRbVtxLDdvIR5u6A2NT9KEbs/nyGGm4Yc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:c0:ff:53:3a:95:1e:e8:00:d9:4e:bd:3b:65:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jun 15 05:00:20 2025 GMT
Not After : Jun 16 05:00:20 2025 GMT
Subject: CN=94f48143b0f06a684f7829785b5939ba75b263cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:0f:a3:8b:a5:65:31:7c:80:dd:96:d0:67:
d8:c4:13:a1:7b:09:e9:35:8d:d3:62:fa:5c:b2:73:
f9:ad:8b:c1:37:2e:01:6d:5f:52:7a:22:12:95:70:
12:b0:a6:8a:33:27:d5:0a:ec:0f:02:2a:2c:44:f5:
64:c2:84:d5:6e:18:70:9a:9d:e8:e0:2b:f4:45:8d:
07:0a:e6:7a:97:ed:4f:72:b5:03:55:2f:6c:29:bd:
21:90:fd:e9:80:59:63:f8:f4:1e:28:e6:6f:11:97:
ce:c4:a3:e5:91:94:37:72:8e:a6:56:db:99:87:18:
0c:f5:83:26:7d:cb:71:27:86:41:98:1c:9a:5b:80:
1d:29:cc:17:6e:7d:69:44:62:ed:70:5e:b2:7f:77:
20:7d:b7:a8:22:71:f7:bd:5d:56:84:69:6c:4f:fc:
3e:8f:52:63:16:ea:95:a3:71:9a:6b:95:93:35:9b:
a4:b1:5b:d7:74:35:d5:fe:e7:72:15:ed:61:c3:ef:
08:65:79:61:d7:c1:c6:18:c9:bc:d2:27:43:44:f1:
54:58:7b:87:af:0d:13:cf:3c:2b:01:73:03:20:5e:
74:94:04:5b:80:11:23:55:07:23:32:16:0c:cf:a3:
d7:be:fe:81:eb:84:7d:ff:f0:4a:6e:6e:c9:0f:eb:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:81:43:B0:F0:6A:68:4F:78:29:78:5B:59:39:BA:75:B2:63:CB
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:bb:2e:3c:61:ed:d4:15:cc:27:1e:8f:d4:00:7b:71:7b:
4b:c0:90:a2:4c:57:ba:44:9a:69:ea:76:d4:c0:60:63:93:42:
c1:50:fd:3f:18:59:df:b5:b5:a8:e1:0e:6e:c8:54:9e:58:e6:
27:ab:b5:20:b3:48:91:80:fb:4e:3d:e7:ca:09:3f:81:28:dd:
30:e3:8e:8a:8c:cf:72:f8:ae:46:75:4d:5a:31:e4:c8:5f:c2:
c5:f5:1f:84:d9:4d:25:b3:73:d3:fe:45:01:1e:20:e1:ee:4e:
90:f0:9d:13:4b:b0:3e:44:2f:e8:cc:96:2b:b0:dc:59:4e:fd:
84:07:d6:0a:6d:e6:a3:bc:c9:c2:f9:5a:63:c7:77:06:7e:80:
67:43:9a:29:36:d2:65:5a:66:aa:d0:ef:6e:b4:2f:98:f5:84:
fe:18:dd:f6:86:5c:1e:e0:74:2a:44:70:3f:84:9f:57:23:7c:
8b:30:06:05:81:2f:b2:51:57:d8:12:24:bb:27:19:55:e6:d2:
be:92:f1:66:12:38:83:89:a5:b5:53:88:ca:b9:88:00:ff:0c:
0d:76:6b:63:c2:59:79:75:bc:51:de:cc:1d:a1:79:b9:45:26:
38:c7:51:e3:17:30:c7:11:8c:af:72:04:b6:74:a4:56:37:3b:
01:1e:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:31:27 2025 by rpki-client