Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier: 2m0gvPdSW0M8saDRvPBFdwLQ/C3MWSCC7Vs4UeA1cXM=
Subject key identifier: C8:46:7C:6E:62:35:30:D2:CC:D9:7E:3C:1C:4F:83:66:42:80:DB:87
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 0197469DEF62AC377154F82DB5DA22D79EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number: 0FD9
Signing time: Fri 06 Jun 2025 19:00:44 +0000
Manifest this update: Fri 06 Jun 2025 19:00:44 +0000
Manifest next update: Sat 07 Jun 2025 19:00:44 +0000
Files and hashes: 1: 7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa (hash: vGKhwTsZ6bUD5wem1afZhHCNpuoU8y3whIP7i2K9fc8=)
2: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: KXwGZlF1qdW6PCwwy7oEg7mTlp0AXjyDeJFlsF+JcTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ef:62:ac:37:71:54:f8:2d:b5:da:22:d7:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Jun 6 19:00:44 2025 GMT
Not After : Jun 7 19:00:44 2025 GMT
Subject: CN=c8467c6e623530d2ccd97e3c1c4f83664280db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:03:73:3b:6e:c8:05:37:a2:54:d4:8a:0a:
c0:ac:ee:e4:9b:35:44:9f:1d:65:e5:ba:ec:e5:d0:
5c:df:9d:ff:5d:bd:07:2b:87:33:df:e5:12:79:be:
e2:6d:6d:af:52:54:cc:e1:ed:45:d8:cc:b3:99:2f:
b2:9d:5a:fd:77:58:f9:97:2d:45:ce:cc:7f:bc:31:
d4:82:bd:b7:c2:10:63:06:15:a5:e1:01:30:11:46:
b9:e4:2c:dd:74:2c:e9:37:0c:23:f6:f5:5f:6b:f9:
78:40:a6:1a:c8:01:35:d6:9f:32:52:06:06:c3:cd:
01:a7:76:40:f7:02:d4:43:9f:56:2c:26:9d:71:3a:
6c:bb:da:66:1a:c7:6f:58:89:ca:0a:9b:53:96:6d:
45:0b:bb:78:11:a7:0b:2f:f7:e9:e9:f5:b2:7c:9b:
a4:c8:97:8b:fc:8c:11:ef:f5:32:b6:7c:66:67:17:
06:e2:32:6a:6e:7f:0c:e2:4e:3d:8c:12:db:02:92:
49:61:2e:7b:e4:cb:71:a8:92:8d:67:28:e7:16:9b:
1d:96:7b:04:e2:11:0a:69:9a:10:51:6a:60:d0:05:
0f:5f:35:c2:ac:c9:7e:7e:25:19:b5:b3:2f:c5:73:
31:b4:77:d5:2a:5c:2c:6f:eb:79:1c:3e:21:fb:0a:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:7C:6E:62:35:30:D2:CC:D9:7E:3C:1C:4F:83:66:42:80:DB:87
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:ba:7f:85:2f:90:bb:b9:da:87:2b:d3:8f:9a:e1:a8:a6:
f4:17:81:60:7e:49:84:af:f1:4a:ae:67:21:92:ac:d8:77:b1:
ae:8b:5a:29:97:e6:06:fb:b1:50:05:51:17:6b:c9:d4:d6:93:
7b:db:d6:7f:69:85:93:5e:b8:7a:b6:ac:af:e5:08:49:84:a5:
d0:ca:39:d7:b9:c7:a2:18:92:69:c7:a1:ab:ec:61:4b:d3:74:
19:95:5f:53:14:77:c1:15:3f:b3:73:98:27:e0:a8:9d:03:01:
76:ae:eb:e2:28:c7:09:ed:42:7d:50:ae:2f:c9:35:d0:59:c8:
df:eb:b7:24:2e:ce:7a:47:3f:d5:e2:e3:67:9d:c2:32:01:fb:
f3:30:49:75:f3:fa:ac:9c:fe:e3:5a:b5:4a:94:e1:59:2f:96:
17:80:6f:40:d6:7d:52:be:68:91:af:55:3f:f3:93:0e:ef:04:
ad:33:68:7d:b3:95:29:ef:92:01:4d:57:74:dd:1c:44:f5:9a:
2a:8b:b5:90:26:50:87:69:09:c9:2f:1d:fb:93:75:c4:c4:1f:
a8:71:6d:74:34:c4:35:b8:7c:a0:3c:2a:81:2a:44:19:54:61:
71:a3:c7:ba:79:1f:4d:ac:02:6b:23:97:0e:60:a9:ce:25:5a:
73:03:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:05 2025 by rpki-client