Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: EXPW/n/EykykEsSjHIQzs+ndbePvJlcmP5mNYVSDeWQ=
Subject key identifier: 6E:BF:4A:B5:46:EE:EE:96:12:61:98:D0:05:3B:AC:D7:46:AB:EB:7F
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 019849D3A757C5EB7E9EB6789C21EA92FEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:01:04 +0000
Manifest this update: Sun 27 Jul 2025 03:01:04 +0000
Manifest next update: Mon 28 Jul 2025 03:01:04 +0000
Files and hashes: 1: CPqSq0ytAxDio98lkjeb_dYwRZ4.roa (hash: DBQ2P8ThG/7CNm8RF8WiO7psAqOGJ9hYf3OIiBNBEtw=)
2: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: w3JI8dJ+8o1QGYq+c6C/KAQun4gs4j6f0O1ZjYctfmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a7:57:c5:eb:7e:9e:b6:78:9c:21:ea:92:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jul 27 03:01:04 2025 GMT
Not After : Jul 28 03:01:04 2025 GMT
Subject: CN=6ebf4ab546eeee96126198d0053bacd746abeb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:aa:a1:d5:2c:de:a3:43:fa:e3:b7:cf:30:
c3:82:6f:8a:85:61:f9:8b:5a:30:0b:d6:e3:f5:53:
49:4b:b9:cc:bf:90:40:ff:93:d7:7a:10:83:49:44:
9a:98:22:15:f5:f6:5e:57:6e:5a:c4:9f:43:9a:26:
fd:60:84:e9:15:cf:bb:39:fa:9a:a5:6a:78:aa:28:
ce:27:2e:56:ba:1b:2e:e6:4f:63:9a:14:48:c8:ba:
de:12:72:56:e0:11:3f:85:8d:d9:35:f5:23:89:a3:
a3:63:7b:4e:b2:8e:9a:e9:18:4e:cc:c7:67:a8:04:
cf:e6:a4:af:96:74:99:cc:ac:b1:ed:2d:51:cc:ba:
5f:8e:bb:d4:1a:e7:ee:74:6e:12:fd:67:d6:dd:60:
6d:50:9d:c2:15:a8:fc:5a:79:23:e8:0d:ed:b9:79:
89:2b:d1:cf:b5:ca:41:3e:78:0f:28:f4:b2:65:31:
1d:9b:ab:67:64:0e:e0:6e:94:ac:fc:d4:74:11:49:
81:92:42:a5:9b:b5:8a:f4:b3:9a:c6:4c:47:2a:34:
fc:d4:2a:0b:12:54:c2:f9:01:c9:5d:7e:fe:b3:d9:
46:8a:8b:ab:b0:da:f4:0f:17:9e:e4:c8:53:e9:fc:
e5:83:f1:ea:13:14:11:87:cc:95:2e:2a:ce:89:97:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:4A:B5:46:EE:EE:96:12:61:98:D0:05:3B:AC:D7:46:AB:EB:7F
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:49:4f:3f:8d:02:49:09:e6:29:7e:f5:73:37:59:98:5e:
a2:8e:fb:d1:af:5e:60:1e:c4:1d:88:90:c0:0d:3f:45:fb:54:
3c:26:60:e4:5f:9a:98:71:e9:9c:bd:91:e4:21:69:99:af:1c:
8a:02:7d:e0:00:c4:c7:bf:6c:76:e8:93:9f:46:f7:15:5d:b9:
43:a5:f6:a1:a4:33:4e:02:e8:eb:04:a9:e4:2d:e7:9b:95:a3:
c9:f7:c7:be:d1:1c:0f:66:ab:fa:1e:f1:a4:b3:ab:dd:bd:0b:
95:a5:0e:ef:1a:0b:73:c8:1b:8f:dc:c7:99:f5:bf:12:fd:11:
81:fe:d4:36:00:db:71:4b:cb:5e:9b:ff:88:52:dc:75:6d:41:
83:6c:74:2e:03:dc:88:52:2c:a9:88:83:2b:8d:77:74:0d:54:
98:0a:90:22:46:24:9d:95:17:c8:a5:de:da:ad:c6:fb:b3:4d:
31:56:6b:71:30:ee:a7:18:dc:1c:2a:1e:91:d2:50:31:06:21:
8c:d5:20:00:33:f6:e6:52:58:ef:b5:b1:c3:51:c7:56:bf:00:
0c:28:b2:96:ea:7b:8b:ce:db:42:7f:9a:97:a7:98:9b:75:da:
67:b6:81:4a:08:de:b2:bb:2c:b3:97:42:00:49:69:10:2e:42:
6b:ad:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:33 2025 by rpki-client