Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: SwqaSQelJOntVdEKQGk3G05Dz/4m0ZUQ/lSB99/We/o=
Subject key identifier: 5F:91:E8:95:43:EE:10:81:9E:63:7B:B7:50:81:BF:3E:6C:DA:A5:0B
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01974779BC942D30F3C3D7B7519694060932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 12FC
Signing time: Fri 06 Jun 2025 23:00:49 +0000
Manifest this update: Fri 06 Jun 2025 23:00:49 +0000
Manifest next update: Sat 07 Jun 2025 23:00:49 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: kXUzpRUBpXgJdnydZyFKtwyjX354o5i+qtsdxGW53io=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:bc:94:2d:30:f3:c3:d7:b7:51:96:94:06:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jun 6 23:00:49 2025 GMT
Not After : Jun 7 23:00:49 2025 GMT
Subject: CN=5f91e89543ee10819e637bb75081bf3e6cdaa50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:67:a3:41:10:75:6f:04:c1:61:e5:59:92:
ab:9a:78:9c:52:b2:2d:da:03:8c:44:b3:99:67:8b:
f7:48:a1:51:45:d0:35:60:ce:d3:97:ce:aa:65:6b:
57:3f:fb:c0:89:ff:26:d4:28:7b:f0:fb:43:7b:71:
08:4a:29:ce:da:9a:90:42:ca:33:8f:fc:0c:0a:f1:
19:20:de:1f:e3:48:f7:5a:e7:b3:2f:ea:09:b4:d1:
64:92:84:33:1c:d8:0c:8c:98:31:32:35:dd:c0:2f:
bd:b8:aa:0c:18:31:3e:41:61:bf:4f:6e:87:85:cc:
9a:f1:b4:c3:ab:ca:3c:a2:23:1f:0b:a8:d6:d3:bf:
f3:d6:e2:c6:3d:01:ab:6a:ea:da:f9:17:d4:31:64:
58:c7:b7:b1:d2:08:97:91:c4:78:53:13:74:5a:eb:
8b:89:48:d1:9d:03:8b:47:d5:69:4a:6a:71:da:65:
5b:82:5f:0a:c3:f9:c2:e0:d6:46:ad:99:b1:fc:c7:
23:cc:02:b2:fa:3e:a0:92:6c:e5:df:53:2c:f1:13:
32:0e:c0:f8:47:66:9d:55:39:38:e7:90:7e:88:f0:
0a:c8:c7:c4:d1:f9:da:c6:03:82:af:ac:fb:17:32:
d3:b0:95:1b:8f:b6:cd:cb:db:80:5c:ae:97:01:aa:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:E8:95:43:EE:10:81:9E:63:7B:B7:50:81:BF:3E:6C:DA:A5:0B
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2c:4d:b3:1b:51:6f:da:1a:b2:ff:10:63:45:33:9a:96:ec:
ef:5c:bc:b5:26:07:a8:45:53:c0:cc:a5:0b:49:dc:b3:38:73:
79:77:ff:78:9f:80:30:45:6e:1e:00:45:63:27:c3:df:0e:84:
b7:e5:04:6c:e8:d6:1c:e2:ed:1d:70:4d:e4:19:ea:1b:c8:5d:
7c:9a:cd:ae:1f:d6:fb:3d:5a:da:e7:d5:40:d9:c4:79:71:62:
04:0f:c1:2f:91:dc:d2:8f:fd:97:6a:75:73:df:4d:83:8a:2f:
a7:8b:1a:41:18:47:a5:74:f7:c2:41:3c:b0:b2:88:16:68:a5:
ec:21:00:e8:16:7b:01:a6:6a:1a:14:73:7a:84:91:93:16:36:
e8:a6:06:85:14:c0:16:9f:1f:6a:37:46:fd:df:94:93:c7:22:
64:28:58:26:b6:e3:45:08:63:d7:af:ce:00:cc:23:4e:94:c9:
4d:ce:be:f2:7b:7e:a1:5e:55:d2:44:df:fc:2e:70:5a:ad:2a:
ff:9a:fc:f2:ee:71:4e:6e:4e:15:2a:a3:d1:43:06:cb:7d:e5:
db:0a:64:98:e7:7b:c1:b6:08:0a:57:1d:48:f3:43:5d:8c:fe:
05:c8:4d:9b:b0:6b:38:59:a1:ab:a3:dc:6d:8d:ee:96:65:e6:
2f:ac:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:31:20 2025 by rpki-client