Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: mRaIwuDs86gyjjhteMj2REJAHK1k8rSCzwgUIFHSStE=
Subject key identifier: B0:D3:88:78:03:3A:79:AE:71:B0:3F:35:E0:97:CE:A4:83:24:06:36
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 01974A43BE045D911E9ACA9CEF89B4839C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0849
Signing time: Sat 07 Jun 2025 12:00:42 +0000
Manifest this update: Sat 07 Jun 2025 12:00:42 +0000
Manifest next update: Sun 08 Jun 2025 12:00:42 +0000
Files and hashes: 1: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (hash: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=)
2: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: ui86b5xBUx8tGD4b2GapW3gD7x2voFkOPUCVdbaEb6Q=)
4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:be:04:5d:91:1e:9a:ca:9c:ef:89:b4:83:9c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jun 7 12:00:42 2025 GMT
Not After : Jun 8 12:00:42 2025 GMT
Subject: CN=b0d38878033a79ae71b03f35e097cea483240636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:27:cd:d8:6f:fc:9e:76:ea:24:b5:ab:ea:
39:39:8c:61:c3:d5:98:ca:f4:04:53:58:9f:47:fb:
81:ee:b1:cd:d4:76:c4:f6:a9:f4:13:f2:35:1e:09:
5a:7f:be:f0:82:67:12:e0:1b:b0:52:13:a3:e0:83:
10:ea:c6:49:66:84:41:eb:1c:8f:8a:24:41:82:34:
28:0d:4e:2f:86:1a:27:bb:20:17:d1:19:3a:80:90:
b1:51:c6:92:cc:ff:d9:ed:40:29:a6:3f:13:99:02:
6c:26:42:72:e2:e6:7f:f6:1f:14:b4:50:27:c2:2e:
44:6e:98:55:0f:7a:8c:b7:45:28:de:bb:00:eb:e5:
e8:49:6d:7e:3e:7e:11:0d:7d:9c:a3:bf:0a:28:14:
fb:5f:e3:2c:04:37:d7:a9:41:bc:82:2e:fa:19:3b:
0c:ec:bf:08:e5:f3:56:37:72:73:07:fd:1c:23:2f:
99:5b:aa:d1:49:da:00:50:ba:f0:c3:b8:b7:dc:ab:
dc:7c:23:c0:41:1e:85:b2:38:4d:7d:16:08:b3:91:
c0:73:8a:8c:a1:53:5e:31:e1:37:a6:96:a6:f7:8a:
ca:29:22:e7:dd:46:00:ea:02:38:ec:eb:84:cb:59:
4c:d0:fc:21:20:0b:10:fe:04:ed:a7:e7:79:d7:7b:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:88:78:03:3A:79:AE:71:B0:3F:35:E0:97:CE:A4:83:24:06:36
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:ac:e6:02:7f:dd:3e:16:ab:f5:28:e8:ba:6c:2d:cf:d1:
0b:97:2c:d7:36:4f:1c:e0:3d:29:96:12:ef:9e:2b:2e:43:41:
0c:2b:11:b8:0c:80:ff:cf:46:cb:c9:60:58:c2:8a:02:24:2d:
c4:df:9a:3c:77:6c:97:d3:5d:c4:4a:7b:57:d8:e3:c7:e5:06:
5a:69:7b:63:b2:18:7e:a0:20:5f:a6:af:9e:51:96:cb:89:8f:
0b:14:3d:d5:34:b6:28:9e:f0:01:b7:12:cc:87:63:05:e1:1d:
b2:62:45:b9:45:9a:a4:34:33:d4:c8:e3:80:9e:88:5b:67:46:
1c:9d:3c:d4:7d:c5:99:94:db:fa:a1:45:fe:d5:80:a3:e4:bd:
1c:28:c3:a6:18:aa:ce:cc:94:6f:25:fc:48:22:87:eb:43:28:
1e:20:8b:11:2b:69:43:55:95:d2:04:c0:4c:65:61:a9:88:86:
1d:20:02:39:a9:0e:2b:b9:70:47:14:d2:15:f6:8d:b6:41:62:
dc:50:ba:c9:b9:b4:1f:09:81:32:e1:9f:4e:a7:06:bf:a4:22:
f9:f1:d7:90:23:41:44:c2:0c:54:61:78:ea:de:f5:51:ff:3b:
56:c4:10:ff:89:a8:91:e6:ca:03:a0:d2:1e:c6:eb:09:4c:7e:
a1:c9:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:25 2025 by rpki-client