Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: xP11A8cZmXftnyujolsbUVkQJe8reQzAMYZKQyh/aFY=
Subject key identifier: AF:61:DA:25:EE:74:8B:7F:02:36:C3:B2:E7:FF:97:26:17:8A:03:73
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019768BBAD9C04BF3FB7BD30B7D2AEDC3338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 0754
Signing time: Fri 13 Jun 2025 10:00:19 +0000
Manifest this update: Fri 13 Jun 2025 10:00:19 +0000
Manifest next update: Sat 14 Jun 2025 10:00:19 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: cRzcbgUiK0UoWztcUI6s4A2+ImECSbuwaChJkZrN8lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ad:9c:04:bf:3f:b7:bd:30:b7:d2:ae:dc:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Jun 13 10:00:19 2025 GMT
Not After : Jun 14 10:00:19 2025 GMT
Subject: CN=af61da25ee748b7f0236c3b2e7ff9726178a0373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:cf:01:fa:bb:cd:cb:f7:a5:c4:66:6e:81:
1c:82:97:8c:d8:57:58:57:7f:98:80:66:5d:2b:42:
11:26:4c:ca:88:c4:46:ea:e1:c1:ee:30:4e:0d:b0:
42:cb:3a:1c:a0:2e:6a:89:28:ad:23:c2:15:5d:b6:
a1:23:d0:9c:8a:af:ed:25:7f:21:95:1f:05:ea:a2:
d4:36:30:4a:97:68:22:0a:ab:d3:6c:fb:8d:3f:2d:
ee:8b:81:bc:e6:a8:9f:01:a4:5b:6a:7a:b8:13:f9:
29:d9:bf:08:db:bd:e8:fb:3f:10:89:8f:3f:90:22:
a5:9f:7a:ce:96:70:ee:4a:d6:a5:0d:5c:a7:88:57:
41:94:9d:91:e9:18:5d:c8:7e:09:f5:a3:a2:c7:39:
a0:16:64:5a:8f:e0:09:d9:46:ff:24:9c:04:a7:bc:
c8:de:57:2c:90:2e:b8:cd:dc:ba:08:6a:c0:91:75:
56:d3:a7:11:f4:8c:4a:c4:4f:ea:16:10:bf:71:1b:
d5:fd:bd:55:49:bb:ac:22:86:e9:50:eb:81:22:f8:
fa:3d:11:48:40:5d:d5:7f:60:03:4b:c0:f9:92:b4:
4a:bd:d2:e0:c8:f6:0f:dc:d3:64:1e:d4:52:58:17:
9e:10:fd:1f:6c:04:de:91:a9:3a:e7:d5:99:03:6b:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:DA:25:EE:74:8B:7F:02:36:C3:B2:E7:FF:97:26:17:8A:03:73
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c3:bb:4a:b3:96:bf:36:fc:cf:8f:86:c0:4a:a4:3c:0d:7b:
64:0d:15:a0:73:9c:33:4f:54:29:4b:0c:ef:ae:a9:9f:35:58:
dd:9b:f1:aa:73:7e:8d:76:97:1b:85:6b:a4:9e:7c:6b:24:e9:
d6:29:0f:49:66:14:90:33:72:43:0e:59:95:2c:41:97:0d:38:
83:a3:be:c2:e5:28:32:40:14:98:8d:96:fe:93:45:b9:1b:2a:
55:79:4c:cf:e5:a7:e8:d2:a9:5d:1c:ed:bc:05:cf:e7:47:a6:
e8:37:b8:5a:de:d4:5e:af:f7:da:2d:8e:69:00:b2:87:d8:5d:
7a:d1:b9:70:34:90:27:05:f9:ee:5e:c2:0c:c8:74:8b:3d:a8:
c1:f1:99:b0:a4:2b:5a:10:02:6d:10:4e:cf:06:0a:66:d5:f0:
ab:ed:24:fa:a6:95:b8:a9:42:87:54:f9:2a:1c:a2:e2:80:e3:
25:90:ac:cf:35:2f:21:76:af:eb:07:e4:d3:66:56:41:44:c4:
ed:cc:7b:e3:10:95:b4:eb:6a:3a:39:67:49:72:88:a9:ea:1a:
a6:2b:d3:91:1a:34:d1:41:14:70:6b:db:c1:34:ea:aa:8d:e3:
d4:a5:22:2f:df:a2:eb:be:59:68:04:41:b0:43:54:5e:f7:d8:
aa:57:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:52:44 2025 by rpki-client