Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: ZP56MVN53bHB4A9zPBraV7qtTIpUoxWnWD51snMVc7k=
Subject key identifier: BC:BC:D1:14:3A:26:8B:8B:71:62:96:DD:03:7D:30:C8:F0:2A:58:B3
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 01974A7AC4F54057C1C56FD2E499ADED803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 0568
Signing time: Sat 07 Jun 2025 13:00:49 +0000
Manifest this update: Sat 07 Jun 2025 13:00:49 +0000
Manifest next update: Sun 08 Jun 2025 13:00:49 +0000
Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: djqAZ+lc5wyde9tBDSo5N5Pq25x4hs1G1m4SR/bC8/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c4:f5:40:57:c1:c5:6f:d2:e4:99:ad:ed:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Jun 7 13:00:49 2025 GMT
Not After : Jun 8 13:00:49 2025 GMT
Subject: CN=bcbcd1143a268b8b716296dd037d30c8f02a58b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:96:84:61:c4:bf:01:aa:40:c1:39:4b:9d:
1c:c0:09:20:8f:04:62:dd:5e:73:7c:09:b9:c2:b7:
44:60:02:89:fb:60:6c:64:8a:5e:ab:bb:94:85:9e:
4d:73:9f:95:da:c2:1c:59:5e:7c:fe:60:3c:5e:5e:
85:b2:24:46:9e:2d:ab:54:f5:2b:52:3e:db:7e:c6:
d1:e3:f3:d7:7d:ac:f9:68:bf:48:6d:64:b8:6b:be:
d9:f2:cd:55:10:ae:c6:2f:c8:6f:17:d1:06:e3:b8:
05:49:e8:95:f4:f0:53:25:4e:fd:e1:a6:52:79:9d:
b5:12:d5:ff:9b:11:59:0d:5b:d0:d0:ce:f5:96:2f:
af:a6:52:d7:88:b2:66:f8:dc:0e:69:e4:23:80:64:
a0:a2:cb:3f:a3:55:cf:54:e2:9b:ca:40:79:19:45:
83:44:b8:48:28:2e:35:ce:fb:2e:d1:0f:86:1c:0f:
43:0f:39:91:94:f3:08:76:55:26:01:4d:7d:1a:28:
f8:f4:27:eb:b0:bb:79:af:67:db:7a:ce:b1:6e:53:
e4:f5:7b:0c:03:44:19:31:f7:8c:f4:b1:c0:26:d4:
5e:09:4e:6d:79:db:8c:df:7e:81:1d:c9:f4:bc:1a:
42:66:16:1d:d7:4a:94:53:e5:3e:90:89:2f:14:00:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:D1:14:3A:26:8B:8B:71:62:96:DD:03:7D:30:C8:F0:2A:58:B3
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:4d:c0:97:d3:3b:75:f3:5d:3f:47:b9:79:d1:3c:a0:de:
04:fe:0e:40:f6:51:74:a9:c8:4c:3b:70:40:dc:6e:44:2c:50:
51:6a:83:42:26:c7:79:2d:ff:cf:54:61:22:ca:f8:93:c7:c1:
98:29:68:a8:59:b3:aa:68:5e:f0:56:99:0b:a5:47:10:0f:8a:
a5:c3:44:dc:96:d8:e6:e9:94:d9:b0:07:51:0b:1d:de:e2:b2:
67:5d:fe:98:d5:74:a5:e1:17:20:c4:59:5d:7d:ff:66:97:6d:
51:8d:9c:e9:65:72:aa:fb:00:44:c3:89:53:5a:20:fc:48:2a:
5c:1b:f9:01:c9:07:4c:5a:c7:41:7e:aa:6b:01:e0:03:f4:c6:
49:15:22:2b:c7:26:1c:f3:1f:48:70:2e:42:c4:67:89:f2:97:
ba:04:22:06:c2:b0:79:ad:4c:ee:48:67:3e:f4:04:30:75:bf:
95:c2:fd:9a:fd:58:85:2e:4b:52:dd:0b:b3:75:00:fa:44:1e:
82:05:ee:17:8f:51:0c:60:53:75:26:ae:69:e5:02:2e:5a:e2:
47:64:b4:53:b1:cc:a0:b6:e7:75:5e:d8:e7:15:30:5b:60:fe:
8f:6f:00:ca:2b:53:84:52:53:8e:db:cd:bc:71:e7:69:fd:df:
b3:c0:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:59 2025 by rpki-client