Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: uKM1+eity+GybgID/qVMnJj/pdfwPlTub6D5zA0bEvc=
Subject key identifier: E4:F4:FC:26:C8:E9:1C:E5:BE:43:EC:79:E9:C7:01:52:EF:BD:36:11
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 01975DCB03E30F7E4D9FF516CC400994552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 07:01:15 +0000
Manifest this update: Wed 11 Jun 2025 07:01:15 +0000
Manifest next update: Thu 12 Jun 2025 07:01:15 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: z6KQUX6w6TSxKakITrW2ol25rQ003fan4hn9ljGkOzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:03:e3:0f:7e:4d:9f:f5:16:cc:40:09:94:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jun 11 07:01:15 2025 GMT
Not After : Jun 12 07:01:15 2025 GMT
Subject: CN=e4f4fc26c8e91ce5be43ec79e9c70152efbd3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:e8:ad:32:84:7c:bc:40:90:b0:b3:62:5a:
ba:d5:4e:3b:9e:88:ed:81:fc:88:3d:d0:c4:be:c7:
ca:6b:ac:f7:39:2a:1c:d0:e2:92:89:12:f2:e3:1d:
a0:1f:a6:0f:9e:d2:24:2a:6a:28:0b:57:c7:ef:87:
6d:2d:02:74:70:8e:f0:7d:c8:53:27:c6:03:9d:47:
42:b7:36:f3:37:ee:24:84:b0:50:ca:1b:ef:af:a5:
a1:be:f5:5f:7b:de:b4:d5:77:8e:1f:c4:4f:11:31:
4f:b9:72:06:08:13:3d:4d:fc:1e:07:82:b1:34:60:
c7:1f:ae:b7:60:16:5d:9c:b4:da:93:a9:41:4c:98:
3b:6d:41:1c:2d:01:5c:c9:a3:1d:a8:b5:3d:ef:16:
19:b6:50:f4:9e:09:48:47:c2:63:90:1f:36:69:c3:
ca:0f:f5:c0:bb:24:ee:ef:55:0c:66:b8:b3:41:e1:
0a:95:b0:ad:6f:0e:0b:64:26:09:85:cd:78:5c:ab:
65:d5:e0:f0:e1:22:03:5f:d6:9c:a6:29:bb:e8:94:
26:3e:21:2c:05:27:da:35:f7:14:c2:c9:d6:da:a6:
a0:9a:50:14:8d:9d:c1:c8:c0:99:66:0d:ad:d2:50:
55:9e:5e:10:0c:fb:a9:b7:df:d4:67:81:17:5e:c9:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F4:FC:26:C8:E9:1C:E5:BE:43:EC:79:E9:C7:01:52:EF:BD:36:11
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:61:f8:5c:71:6a:0b:0f:8b:5d:33:ba:77:81:7d:e0:74:a9:
6c:c8:53:ce:f7:a6:8f:fb:b3:ca:ed:c9:24:14:c8:61:5a:79:
fc:f3:c4:84:50:29:d1:46:5b:bd:83:29:5a:d4:b8:ce:2e:e8:
46:88:9c:c5:10:ee:6f:ff:79:f5:bd:a3:33:93:80:41:97:34:
37:f4:06:93:51:8e:1e:b6:36:f8:71:4c:ed:11:7f:1b:2d:79:
11:e5:10:72:8d:9c:1a:83:db:13:55:a2:22:6e:b7:f5:4d:b7:
69:ea:83:6b:56:d2:91:f0:9a:92:1f:e4:ff:60:d2:e7:55:9d:
aa:67:04:c0:7a:95:21:df:95:e4:e5:80:86:98:1f:ac:58:0c:
6f:f9:7f:16:59:f1:64:28:57:9f:a0:15:23:8d:8a:3b:d3:0e:
a1:ad:35:63:e8:f5:86:b8:fb:87:6f:3a:90:bf:ac:d0:b5:48:
70:aa:a3:2c:24:6d:42:f0:48:22:03:b1:b8:2b:3f:c0:b3:c5:
86:bf:8f:8d:db:4b:ba:33:8f:3a:f9:b3:c2:94:36:6b:d3:71:
09:fb:f9:90:ec:28:00:da:ef:b1:ab:e9:3e:6a:fc:12:d9:c9:
80:e8:71:ee:a5:44:b9:cd:57:38:d2:df:ab:73:8c:9b:2c:a6:
fc:bc:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:39:41 2025 by rpki-client