Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: aoXQPXgi8hb32TM82TGyf9tFg9Xbb7Enkv4MB9livcE=
Subject key identifier: F4:CF:3E:9A:F5:0B:41:E4:46:07:4E:82:89:E9:AC:6C:00:66:D3:37
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0197684E446765401C0082CC67101BCC7705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 43
Signing time: Fri 13 Jun 2025 08:00:49 +0000
Manifest this update: Fri 13 Jun 2025 08:00:49 +0000
Manifest next update: Sat 14 Jun 2025 08:00:49 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: /3QjBmjBsglt1/oxxelNJgg39FUryo5AQlqJ6Z1coTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:44:67:65:40:1c:00:82:cc:67:10:1b:cc:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jun 13 08:00:49 2025 GMT
Not After : Jun 14 08:00:49 2025 GMT
Subject: CN=f4cf3e9af50b41e446074e8289e9ac6c0066d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1d:f9:3c:68:38:95:e9:ed:40:da:21:ea:41:
32:57:2c:62:33:56:b3:82:7d:1d:80:b7:51:82:43:
8c:21:1e:12:94:17:aa:ff:44:76:b2:34:67:94:ac:
b9:c7:bb:de:5e:1f:aa:b2:64:04:05:6b:8b:ed:24:
4f:9b:41:53:f3:c2:8c:4a:85:d8:22:f7:a3:13:79:
72:0c:65:bc:67:37:2f:7e:4f:4e:89:67:b5:fe:d2:
e8:4e:5c:cb:ea:13:00:33:f4:57:2f:38:11:c2:91:
fd:02:c8:0f:59:f2:ea:0a:e3:d1:f5:44:25:d9:ea:
1c:53:56:42:1d:06:07:eb:a1:d7:c3:d4:22:8b:27:
6e:62:d8:a0:0a:08:b4:5d:b0:33:22:03:ac:27:46:
25:f9:4c:1c:52:d9:c4:61:1a:52:75:cc:70:6e:43:
6d:87:8f:26:df:ee:c5:c5:e5:eb:fc:00:56:98:50:
8c:da:0f:f2:45:78:3e:fe:43:b5:0b:e5:10:ee:0b:
57:e7:8d:2f:5f:97:68:b2:b0:4b:c1:17:30:fa:2b:
7c:fb:5f:ce:7d:0e:e3:98:5f:36:ee:67:39:44:cc:
13:16:6d:98:8d:08:0f:3a:13:b9:18:dc:9d:82:f1:
f7:81:86:fb:c1:af:80:3e:52:f8:aa:85:03:ea:58:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:3E:9A:F5:0B:41:E4:46:07:4E:82:89:E9:AC:6C:00:66:D3:37
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:78:32:0a:2a:9c:0f:22:b6:8f:a8:b6:1a:00:56:1d:1b:
5f:7e:62:db:2e:75:2c:04:1b:d2:f9:84:8a:6f:a8:4a:d6:1a:
22:78:16:3d:2f:5b:d8:59:63:4f:4a:91:a4:37:bb:5a:f7:d0:
d4:57:ff:c3:54:85:e1:d7:3f:55:97:44:e5:bc:89:bd:30:38:
8d:07:a7:e1:66:e8:fb:3a:85:71:b8:cc:9d:19:b7:89:a2:36:
d8:1e:55:ad:5b:e8:01:64:15:ee:06:9f:6d:69:2a:2d:0f:72:
5c:16:d0:52:3f:cf:cd:dc:aa:56:26:92:31:6c:3e:ba:47:49:
23:0f:80:42:45:ca:3e:09:fb:34:55:c5:ce:99:40:8a:db:6d:
1e:8a:f9:28:ac:98:9a:05:bf:98:a9:c0:34:a8:96:04:59:77:
45:e4:2d:b7:30:3c:21:08:55:77:2e:9d:44:08:ed:e5:36:34:
1f:76:8f:e1:ec:95:32:f0:d8:e9:ff:be:97:be:a0:5a:06:7c:
8b:f5:39:e2:57:be:d0:ad:01:c5:d2:83:04:2b:aa:fa:7a:ce:
9d:2a:13:da:38:71:84:89:f6:f9:19:c4:cf:fe:fa:01:2b:83:
17:e5:1c:00:c7:6f:ac:87:87:2a:36:ff:45:15:ff:bb:7b:6c:
a5:a2:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:31 2025 by rpki-client