Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier: ZJPk3/eCLWeDT6/VxDXc9HCG8MbTaDbEbR+H2hRSJT4=
Subject key identifier: 3C:75:FF:E0:17:82:86:F7:AA:E0:78:CF:CE:28:31:F9:B1:04:9E:B1
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 01975346F6E784D78F5315BA7214FAB17447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 06:00:49 +0000
Manifest this update: Mon 09 Jun 2025 06:00:49 +0000
Manifest next update: Tue 10 Jun 2025 06:00:49 +0000
Files and hashes: 1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: DKcYA5Ve/X1fs8fvkz3g6hZqsQzdFqzyvQz/66uHc+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:f6:e7:84:d7:8f:53:15:ba:72:14:fa:b1:74:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Jun 9 06:00:49 2025 GMT
Not After : Jun 10 06:00:49 2025 GMT
Subject: CN=3c75ffe0178286f7aae078cfce2831f9b1049eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:bd:47:fe:f1:07:4f:2c:6d:f5:b2:fa:de:
8b:3a:e7:08:ec:4f:48:18:e6:f6:d4:ee:62:02:fa:
e2:9a:8f:f1:14:40:98:e9:58:e1:c6:69:2f:c9:d9:
fe:03:a8:d4:3c:4e:f0:7a:63:32:68:7b:88:84:39:
44:87:e5:c9:18:5d:d6:13:16:21:87:33:6c:f3:24:
29:7c:ae:9f:48:52:13:2b:d6:45:00:c3:b8:df:43:
e2:61:7b:86:69:01:d6:8b:22:c0:90:04:f7:33:cb:
79:b6:3e:31:8f:b2:7b:6c:d3:25:ee:51:8d:dd:60:
9a:b3:bd:c1:5f:09:d0:ac:26:33:86:c7:e4:dc:2b:
1a:a4:1e:60:16:e5:58:1b:f5:43:9c:83:97:b1:11:
9c:35:df:1d:b2:17:b7:77:5a:6f:cf:be:7a:51:5c:
09:25:eb:81:a6:10:ef:f8:cb:80:2a:74:c8:84:d6:
20:c1:fb:a0:e3:ad:e2:7c:c0:09:c0:24:7e:47:50:
12:8b:ed:5e:d3:c4:82:6f:97:da:9f:72:ea:bb:c6:
00:ad:31:99:ca:0f:eb:ee:ea:b6:dd:f2:b7:5d:07:
14:39:94:73:f8:d5:3f:c7:78:7b:11:6d:ac:b9:88:
f6:24:bf:8f:7e:0e:5f:22:bc:d6:03:e9:9b:7c:e0:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:FF:E0:17:82:86:F7:AA:E0:78:CF:CE:28:31:F9:B1:04:9E:B1
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9c:74:e3:d5:e0:da:4b:2a:d2:4e:ba:18:7f:17:f2:6b:68:
af:c0:ef:8f:49:02:c4:5d:37:bd:99:d8:a2:a2:cd:95:b6:f5:
5b:75:b1:c2:44:30:c4:d1:b4:86:b4:c9:e5:b6:93:67:df:c5:
8d:5a:53:6c:c1:f0:29:99:66:12:7f:25:84:dc:85:e3:30:db:
49:de:eb:e2:79:17:75:4e:ec:e7:5e:82:04:4b:88:ee:f0:1f:
97:6c:09:eb:4c:93:83:4d:db:b8:6f:77:6e:cd:61:0a:ab:1d:
21:57:81:4e:23:a2:cc:e5:13:56:ac:ff:17:86:e5:11:6a:f3:
b0:8f:52:10:36:07:c3:6c:74:28:1d:59:bc:1f:97:f4:22:56:
46:6f:db:f3:67:3f:13:41:86:41:f3:33:7e:d8:69:ad:8a:3c:
0e:b6:94:24:bd:96:4e:ba:0e:5e:cd:88:17:df:d5:e8:bf:1c:
d1:63:40:f2:3f:c0:b0:f9:1e:0e:90:6d:8b:7a:1d:61:f9:4a:
c3:c2:31:03:ce:52:67:b0:c0:1c:d4:1a:c3:c3:30:b8:75:88:
3f:86:05:77:a2:aa:9a:fd:3c:22:7a:f0:f7:d6:a0:ae:96:6f:
23:cc:6b:d2:a1:34:cb:c6:53:89:6b:53:bf:9e:e0:0e:f9:b9:
e4:eb:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:00:51 2025 by rpki-client