Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: LKM2GkPx96CTBm8pU4YO+pT9qqEjDXyP7g3VpOvjhIg=
Subject key identifier: B5:BA:86:D1:CB:8C:B4:DD:38:6F:1D:D3:9E:4D:99:3F:C2:80:23:4A
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01974DE9722FC87C29750B90501F3B05AE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 153C
Signing time: Sun 08 Jun 2025 05:00:34 +0000
Manifest this update: Sun 08 Jun 2025 05:00:34 +0000
Manifest next update: Mon 09 Jun 2025 05:00:34 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: oLoEnZgwNZscUGPMVY1mQfiG+TvWufHFVQJErlzFsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:72:2f:c8:7c:29:75:0b:90:50:1f:3b:05:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Jun 8 05:00:34 2025 GMT
Not After : Jun 9 05:00:34 2025 GMT
Subject: CN=b5ba86d1cb8cb4dd386f1dd39e4d993fc280234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:fd:12:46:9d:a7:10:76:22:b7:41:99:ae:
07:f9:6e:d0:3d:d2:66:00:7b:1e:f7:66:11:60:34:
70:da:6b:fc:a8:5f:07:5d:0f:72:27:c5:91:25:08:
12:61:d2:c9:a6:62:47:df:3d:0f:83:f6:19:e6:8d:
7d:11:01:c1:dd:4a:e7:67:4c:55:fa:81:66:44:69:
28:33:fc:f2:a3:40:9c:c4:8a:30:bb:52:3d:fa:07:
9a:df:50:bb:e3:4b:d5:91:1f:d3:7a:56:bc:83:fe:
84:80:e0:83:fe:1d:ba:d4:a2:4c:b1:a2:5d:55:81:
87:97:31:9f:80:d5:01:3c:8e:90:3a:a6:0d:25:24:
4a:36:96:55:3a:c7:78:ca:52:b7:49:6a:10:7b:65:
14:bc:97:24:37:be:5a:d4:ef:f1:5f:2b:76:7d:81:
cc:9a:48:4e:c3:04:7c:99:89:d2:d0:98:db:a9:cf:
64:36:d8:70:64:05:9c:7a:89:df:c8:0b:00:c2:d4:
7c:20:84:8e:7e:7a:80:96:6b:94:3f:1b:20:4d:06:
d7:97:a9:0d:ef:9f:db:f8:20:3a:6d:b3:cd:3d:1a:
bc:c1:e8:cd:86:e9:de:e8:50:90:98:c7:f3:0a:85:
cd:a5:24:f4:a7:30:c7:85:ef:20:6d:d3:0c:5b:bb:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:86:D1:CB:8C:B4:DD:38:6F:1D:D3:9E:4D:99:3F:C2:80:23:4A
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:75:95:d9:cd:b6:9f:6a:a7:79:34:20:5b:cb:92:04:d8:
de:85:3d:8a:61:df:d0:4d:6a:64:8a:c2:92:4f:3f:a6:6b:cd:
bd:b6:e3:eb:82:45:bd:15:33:e7:c4:b0:78:df:23:ea:9f:80:
fd:76:ae:a1:3f:35:05:9c:0b:13:ae:57:92:1e:d3:bb:3a:41:
4d:af:9c:8a:cc:c1:dd:ca:7a:be:41:58:7b:ba:20:ce:21:9f:
84:78:06:a2:f2:9d:54:d9:61:1c:12:b6:f0:be:26:4f:16:1f:
b5:ec:31:1f:26:09:58:4b:3f:f3:4f:b3:d2:73:f5:d4:9b:36:
26:19:1d:bf:d6:0a:11:55:c6:85:7c:7a:8f:04:73:be:63:0c:
2e:f2:17:91:97:07:d9:1b:8b:7b:4c:0c:e8:f4:db:f5:3e:ee:
da:69:62:5d:b8:77:a4:0a:28:da:ed:aa:73:a7:0c:48:3b:20:
fd:ed:a2:d2:c7:74:9a:52:0f:53:03:3e:e8:12:46:2b:16:20:
d8:3f:8b:1a:97:d0:a0:7c:dd:69:16:82:22:44:4a:f4:b5:4f:
7c:92:68:cd:4f:39:a6:23:45:dc:e5:ad:92:31:53:f4:6e:c3:
f4:4f:81:06:09:17:8e:ba:dc:dc:4b:07:ce:fc:b3:3b:38:fb:
48:51:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:47 2025 by rpki-client