Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: vmD7OtvtT4sHjNCHMU5WLVcmYZYxoyUUeZOtEaVglgo=
Subject key identifier: 84:80:A3:17:63:07:2A:E9:BB:28:7C:6F:A4:CC:9E:A9:7C:C0:05:B3
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 01977E67FABE72B988580B77F780815EB561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 111E
Signing time: Tue 17 Jun 2025 15:00:32 +0000
Manifest this update: Tue 17 Jun 2025 15:00:32 +0000
Manifest next update: Wed 18 Jun 2025 15:00:32 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: byzC+8tts6NTAL7ofJRIRrsXRpbZUgCsEZQiyZwQtNg=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:67:fa:be:72:b9:88:58:0b:77:f7:80:81:5e:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jun 17 15:00:32 2025 GMT
Not After : Jun 18 15:00:32 2025 GMT
Subject: CN=8480a31763072ae9bb287c6fa4cc9ea97cc005b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:da:a4:5a:72:54:e4:89:f6:26:ea:64:c5:
b5:fb:3b:91:4f:1e:49:35:08:c2:c6:88:76:76:04:
55:a8:50:e5:49:b6:7e:cf:e5:85:20:58:7f:e4:ba:
3e:14:b8:cb:d9:37:40:d8:58:a3:4d:2d:e3:95:cc:
f4:4a:19:f6:e7:7f:60:f5:c3:17:3d:6f:6a:48:50:
34:d8:05:f6:54:a6:17:2c:bb:bf:0d:61:fa:91:bc:
43:2d:cb:2e:d2:91:84:21:0d:79:ea:09:8c:7e:44:
0f:1a:69:55:21:91:a4:e4:07:b9:b2:02:bf:1e:d6:
82:4f:93:40:22:50:7c:f9:d9:07:5c:3d:9f:00:8b:
29:fc:83:25:92:67:e5:36:83:49:0e:4c:cd:fd:24:
59:fb:f2:cf:64:2c:93:fa:64:29:55:1c:3e:d0:4c:
18:90:78:63:60:48:dd:e0:15:5f:a4:fb:d1:3f:3c:
91:c0:36:4f:b1:11:26:12:aa:c1:87:ab:e3:c4:0b:
73:82:ac:38:bc:5a:ef:6a:c9:39:be:a2:cc:c8:33:
c9:77:f4:80:9a:21:5e:df:be:14:6c:3a:a4:6f:22:
2b:22:5c:3a:83:bf:90:fd:51:61:8f:23:7d:1d:7e:
97:a9:9e:99:c3:6a:53:d8:04:f1:51:a2:17:61:07:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:A3:17:63:07:2A:E9:BB:28:7C:6F:A4:CC:9E:A9:7C:C0:05:B3
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c8:49:33:0c:0d:a1:81:97:c5:8f:ba:da:de:10:2a:15:9f:
17:c8:e9:0d:40:21:8b:2a:9a:e2:f8:27:58:35:3b:29:74:3c:
b7:e4:4e:e4:5c:ba:ba:65:38:2c:0d:3c:55:b8:a4:35:9d:2a:
4f:95:60:a4:13:36:89:f1:04:6e:2d:5e:e0:c0:d2:47:a9:6a:
55:40:af:82:53:e5:b1:be:0a:4f:59:cf:a1:1b:85:70:66:e7:
c9:57:07:31:d4:a2:27:fe:6a:93:67:cc:ae:68:d4:7e:58:64:
4d:80:59:cd:93:27:d4:c6:6a:9f:31:06:cc:94:87:c6:85:c8:
38:45:6a:68:36:d9:8b:ca:ed:b9:81:f6:3f:0d:4c:63:b1:5d:
2b:04:16:58:6b:74:95:2c:8b:29:c0:51:60:37:8e:62:a0:9f:
91:34:c5:79:cf:33:08:1d:e5:48:44:aa:7e:1c:ca:9d:b3:32:
a6:80:cf:1d:6d:04:fd:2a:36:b0:56:49:d5:45:5b:13:76:bd:
de:42:0a:fa:b8:2d:cd:e6:b1:0a:f7:cb:45:7e:25:e6:00:79:
15:80:2f:c4:89:17:fe:77:60:ea:9c:7b:97:a7:95:c5:99:48:
a1:9c:b7:a1:7f:59:b8:fb:70:37:92:57:46:3b:ee:04:b6:93:
a1:5d:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:12:50 2025 by rpki-client