Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: wN3dWJQ7xPWxlj5khbnliu1A5BF0/IYqO4Lisr0d6CU=
Subject key identifier: 50:3A:1F:13:76:06:82:27:12:37:DD:5E:54:31:54:97:AE:9B:F5:67
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01974DB2A97237D76B8E2F1B77B76A658478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 158F
Signing time: Sun 08 Jun 2025 04:00:43 +0000
Manifest this update: Sun 08 Jun 2025 04:00:43 +0000
Manifest next update: Mon 09 Jun 2025 04:00:43 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: 3V0Q5X/+Yyfr7FF1bAVuMk1J/SMY3zbZGqbOLsn7DTo=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a9:72:37:d7:6b:8e:2f:1b:77:b7:6a:65:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jun 8 04:00:43 2025 GMT
Not After : Jun 9 04:00:43 2025 GMT
Subject: CN=503a1f13760682271237dd5e54315497ae9bf567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:9f:c7:10:ad:cd:9a:30:cb:38:fe:7c:56:
ed:f4:e9:a4:6a:7e:7b:04:b5:cb:4a:98:ba:5e:8b:
3e:87:4e:32:49:1e:65:8a:51:f7:23:f4:eb:c9:66:
1d:d2:b0:1c:94:fc:5e:7f:66:f4:e7:1a:3d:a3:72:
c3:d5:32:77:63:2b:61:d6:e2:cb:0f:e7:9b:90:90:
55:8d:1b:d3:46:e8:42:b4:0a:a2:a1:ed:ba:fe:75:
6c:d2:7b:28:dc:28:ce:13:cb:e4:8a:0e:b2:35:eb:
e4:a9:d9:8e:83:da:40:d1:37:7a:b3:02:6c:03:d3:
4a:bb:c1:0c:a6:b0:56:93:58:a6:85:94:2f:cd:11:
5c:2c:43:18:a7:9a:06:f5:ca:3b:b6:3a:2a:47:81:
ef:fe:b1:59:13:9f:ee:c0:9c:be:bb:5a:52:0e:56:
c8:48:f4:d4:68:0d:68:e4:31:7b:70:1d:20:c1:d7:
d5:51:bb:77:d7:99:d0:01:6d:86:44:90:9f:a3:f3:
29:42:41:83:8a:a8:30:54:a3:9f:1c:4c:6c:57:b4:
b8:1c:43:9b:94:97:c2:a4:e4:a1:22:27:7b:49:cc:
cd:ca:f3:af:4b:0d:31:45:cf:2b:fe:9c:2f:76:c0:
6b:2f:63:34:a2:c8:f7:a1:c7:24:dd:01:48:1a:5c:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:1F:13:76:06:82:27:12:37:DD:5E:54:31:54:97:AE:9B:F5:67
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:57:ee:72:02:21:19:f4:e5:04:49:97:1f:0b:f7:de:f5:
06:f8:aa:2e:21:05:c4:2d:b9:6e:56:ac:dd:2d:d8:91:56:7a:
8c:55:c0:1f:ae:47:22:1c:0e:e5:fc:cf:2e:fe:6a:2c:47:ba:
ac:07:bd:2c:2b:e3:6e:07:c9:5d:ba:9b:ce:7d:0d:7c:5c:16:
6d:df:59:38:af:2a:6c:15:49:0d:ad:7c:0d:9b:2d:90:75:8f:
ba:7d:b9:5a:80:fd:35:7f:73:50:7a:49:f8:3d:76:5c:bf:35:
13:1c:59:8e:97:be:72:2e:a5:21:db:70:a3:cc:8b:15:6a:b1:
ad:89:f5:8d:c8:f4:d8:00:e1:d4:f5:e5:66:1a:37:82:42:57:
cb:8e:37:bf:82:a0:48:26:1e:e3:80:6a:89:67:d1:f9:88:02:
6b:cb:54:6a:94:9f:2e:7c:30:e8:99:9f:53:d5:79:eb:56:ec:
e6:15:6b:a6:8f:9b:ed:e0:2d:78:9b:4c:c5:21:be:c4:5f:1f:
e8:17:ca:d8:07:34:98:16:cd:d6:ac:4a:4b:fd:97:25:d4:dc:
c7:28:c7:b5:a7:8d:3d:c8:67:42:30:a9:74:6e:03:6e:79:3a:
c2:f7:27:67:ef:59:c1:3a:1b:40:8d:4c:c8:db:32:95:28:4d:
d5:ab:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:29 2025 by rpki-client