Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: 5Huplzlsv8TVJ7su97vETx3hZy9FkDBa6mG+qqcvoKc=
Subject key identifier: 9F:9E:C8:9F:15:0D:41:21:F9:C1:86:F9:84:84:90:C1:12:21:C7:6D
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019750B3988936453271C8CB000793F1DDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0621
Signing time: Sun 08 Jun 2025 18:00:36 +0000
Manifest this update: Sun 08 Jun 2025 18:00:36 +0000
Manifest next update: Mon 09 Jun 2025 18:00:36 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: lkRJ7MKGDNhfNySEC6VglNlKU9v0NlREHHFro0gWLlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:98:89:36:45:32:71:c8:cb:00:07:93:f1:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Jun 8 18:00:36 2025 GMT
Not After : Jun 9 18:00:36 2025 GMT
Subject: CN=9f9ec89f150d4121f9c186f9848490c11221c76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:d3:6a:95:95:31:15:ee:d1:11:04:fe:34:
9d:a2:ad:29:3e:b6:1c:c4:2a:39:80:89:5b:7d:b8:
87:29:cf:6d:b6:c6:90:ce:a0:9c:e3:0b:7e:a6:23:
98:ba:b3:ea:da:ab:bb:51:75:46:cd:22:9f:3f:16:
69:a5:39:3a:19:6f:84:cc:39:96:e3:2c:1d:41:c8:
bd:03:f0:49:35:9b:40:ce:1a:a5:94:99:c6:0a:89:
f3:fe:e7:a3:3b:20:a6:04:59:6c:bc:07:bf:4a:a5:
39:fc:a1:99:4c:08:a9:a2:78:1e:54:b9:b4:83:d0:
9a:32:ae:ac:da:2e:3f:81:cc:03:39:f6:b6:93:dc:
0d:3d:88:3e:91:71:31:03:00:b1:f3:e1:7c:5c:a5:
f9:8d:87:e7:bf:df:65:45:ed:a2:b5:59:0b:73:69:
6b:7c:45:0d:11:16:87:cf:bf:73:dc:c6:e6:c7:bc:
d5:0a:52:9c:a1:8a:b2:14:6a:0b:dc:d3:58:c6:46:
91:44:4d:2f:3c:bf:78:60:d5:d9:82:ff:ba:1a:3f:
62:3e:c9:b0:c1:27:2d:90:1c:3c:25:98:ef:1d:18:
b3:3a:5e:3d:42:06:c6:22:a9:3a:1e:1c:de:81:9f:
a0:70:72:92:ea:4f:0c:ff:48:c4:5e:a2:0f:44:07:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:C8:9F:15:0D:41:21:F9:C1:86:F9:84:84:90:C1:12:21:C7:6D
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:e9:e6:3e:ca:11:2c:33:c1:bf:15:de:b0:31:98:01:59:
7d:e9:3d:b1:33:29:6c:55:99:37:91:d5:76:2f:54:e9:5e:69:
14:c8:6c:d3:0b:a7:3c:f3:fd:0b:8c:42:52:e4:55:be:56:7f:
61:f4:19:9d:3d:26:6a:a1:e5:01:7c:76:10:11:86:79:db:4f:
73:5f:89:5a:53:fe:7e:17:76:45:e4:0f:07:72:19:40:1d:7c:
15:dc:43:da:9a:4c:68:4a:b4:5b:e6:24:67:b6:04:f5:d4:42:
38:02:9d:04:88:96:9d:ea:de:be:fd:e1:0d:90:a8:49:50:3b:
29:40:8e:89:df:0e:3b:8e:be:d6:6c:a3:f0:83:7f:8b:e7:0e:
14:31:a4:d3:ce:be:6e:39:95:03:d3:a6:bd:e3:28:7e:3f:49:
2a:4a:e3:eb:5e:d1:1f:5a:24:8e:18:b9:5c:6f:00:d2:59:be:
0a:33:1a:12:b5:7d:45:50:27:3e:a9:40:c9:a9:87:ca:fa:15:
fb:0a:0c:07:5b:6f:b7:6c:af:12:e0:28:3c:a8:fd:ef:a0:f7:
fe:95:65:aa:f8:af:fe:2e:f9:60:c9:9d:4c:40:61:08:ac:ec:
35:17:3d:aa:10:ea:14:ac:cc:b1:8a:9d:2c:52:86:07:88:aa:
72:b8:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:48 2025 by rpki-client