Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: zuzWl7R1d4bx1E+scVULf3MzCrwiiy+zvVZd6RQeySE=
Subject key identifier: 22:F5:CE:BD:99:31:53:83:70:44:55:D5:A2:12:57:C4:5A:C6:A9:B8
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 01974CD6AE7DCA3B9A9DC3DB07A380813E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0A70
Signing time: Sun 08 Jun 2025 00:00:27 +0000
Manifest this update: Sun 08 Jun 2025 00:00:27 +0000
Manifest next update: Mon 09 Jun 2025 00:00:27 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: 9P06/UCb1NuPmNobMRto4iLekOWCw40eWhKB9Q+C3Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:ae:7d:ca:3b:9a:9d:c3:db:07:a3:80:81:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Jun 8 00:00:27 2025 GMT
Not After : Jun 9 00:00:27 2025 GMT
Subject: CN=22f5cebd99315383704455d5a21257c45ac6a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:53:1e:02:98:bb:38:ca:b7:1d:57:7d:1f:
5a:03:e3:87:85:ad:35:69:f5:3f:3c:2a:2e:83:d1:
25:e4:22:3a:31:15:a4:f9:0c:63:ae:71:62:2a:57:
7d:67:73:99:2c:75:e7:e8:97:f5:cf:5b:c5:88:d0:
75:4b:03:65:a3:67:8d:cc:3f:b8:a2:cb:3f:f5:d2:
c5:ad:cf:4b:cd:8b:fa:2c:a8:c9:87:cd:bb:2e:47:
f9:d2:88:81:86:be:81:4f:bf:1d:c5:13:1e:81:f1:
a2:dc:b5:26:6e:4c:ab:bb:a4:79:9f:22:5a:1f:6e:
e7:f6:54:15:53:db:20:fd:0c:2d:01:22:c2:e4:de:
9d:0b:2f:32:0e:e2:9a:84:01:9b:06:51:f1:38:cd:
a9:10:c1:c7:88:cc:ef:50:83:78:2f:da:bf:18:37:
1d:29:22:4b:16:cc:02:62:66:2f:f0:0a:5b:0f:2e:
62:18:41:80:ea:12:01:56:0a:47:96:bd:b3:16:80:
86:48:9d:1d:57:9a:7f:d7:fa:ad:c1:ea:81:ff:a6:
19:05:e4:5d:b0:27:7c:7c:c1:9d:62:2d:10:f8:fb:
c9:26:7f:97:5f:a8:91:fc:53:6e:94:fb:36:9e:4f:
c4:11:6e:2a:c9:6a:38:d6:b4:70:d3:71:4a:0c:15:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:CE:BD:99:31:53:83:70:44:55:D5:A2:12:57:C4:5A:C6:A9:B8
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:c6:94:77:9b:d0:73:eb:92:5f:90:a3:3e:e2:d5:4e:c7:
d6:84:e0:e3:bc:34:cd:60:59:aa:74:dc:3e:ec:48:c3:88:6e:
01:c4:f6:03:7a:f9:24:df:57:c6:f4:1f:27:1b:83:2c:f7:2e:
32:c5:40:6d:b0:84:34:9c:03:c0:f5:5f:1c:65:14:81:7b:27:
eb:18:09:f8:f2:65:80:33:74:02:86:a6:fe:1d:30:90:0f:95:
53:2f:3c:f4:10:36:f6:a6:64:fe:ff:ea:c2:54:12:07:b5:4d:
ad:58:eb:ea:0e:4f:95:f7:77:83:d3:de:86:6c:9d:19:8c:db:
2a:ca:73:66:ec:ad:5b:d8:0a:24:dc:f3:7b:fb:6a:3a:d8:7f:
4d:3b:e6:0d:f2:11:20:5e:ad:5e:c7:5e:90:61:54:60:98:f6:
5a:5a:50:f3:50:d3:4c:9c:37:10:f3:bc:70:5f:3d:f4:a7:1a:
50:f9:b0:91:1b:05:3b:b7:f3:03:17:62:0c:88:bc:57:8a:f3:
27:ab:47:30:f0:82:e3:b4:f9:57:66:d0:43:40:8b:ce:34:e0:
2f:41:84:96:23:bd:d9:fb:6c:6b:4a:22:49:4f:dd:ee:77:45:
43:8c:f2:45:0d:57:63:9e:d1:c4:75:9f:31:75:32:17:82:c8:
d1:28:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:52 2025 by rpki-client