Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: QlGTet3B5RNH769gjbG/8q7Q6IUAS6XNSXiQ4sLHTnc=
Subject key identifier: 4D:3E:E8:C4:D6:C7:3F:32:11:E3:39:D0:B8:3A:66:D6:A2:47:BF:5E
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019746D4EE46F81C0D49FB93AAB6FB96E92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 0E4A
Signing time: Fri 06 Jun 2025 20:00:49 +0000
Manifest this update: Fri 06 Jun 2025 20:00:49 +0000
Manifest next update: Sat 07 Jun 2025 20:00:49 +0000
Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: Xtb1tn9CNlrz4dqgg+aoqCF0uGcNoDQ4pEYLtU2154Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ee:46:f8:1c:0d:49:fb:93:aa:b6:fb:96:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Jun 6 20:00:49 2025 GMT
Not After : Jun 7 20:00:49 2025 GMT
Subject: CN=4d3ee8c4d6c73f3211e339d0b83a66d6a247bf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:e7:93:23:d8:35:0c:9f:c7:79:ab:30:ad:
27:5f:4c:74:2a:c8:ca:d3:19:55:36:38:ce:ff:4f:
b9:7b:95:b3:d9:c0:f6:32:79:e0:fd:3b:db:f0:95:
8f:33:21:65:60:39:1b:1b:d7:57:cb:23:9f:9d:ee:
98:e7:63:fa:92:a2:78:ad:46:5b:00:df:4d:e5:b4:
ba:3d:cc:cf:f7:99:41:98:8e:48:6f:4b:07:d5:db:
bf:d9:1d:54:79:bf:b5:c8:a2:61:da:a9:51:6b:64:
65:77:83:04:17:f3:09:e8:f3:95:7f:f9:da:0c:04:
94:c5:07:3b:78:43:62:de:ec:ba:22:30:d5:d9:1e:
2a:da:ce:5a:f9:7c:97:30:d1:99:bd:a9:e4:83:2c:
8d:e4:df:66:e5:f9:8f:1c:d3:10:b9:a4:3b:ea:09:
97:81:9f:d4:3c:a5:80:e3:c3:db:d2:a7:f4:9e:a4:
a1:6b:fe:a2:07:84:04:b8:79:90:3b:e6:57:30:33:
ff:e2:33:a6:80:c4:e6:45:27:26:00:9c:66:ad:76:
4c:7f:70:57:ff:f2:51:2e:87:59:18:03:99:25:e6:
71:d5:71:a6:31:f5:64:aa:b0:d5:6d:fc:b7:78:bb:
09:7f:11:a9:42:cd:6a:eb:1a:21:74:b1:63:87:ee:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:E8:C4:D6:C7:3F:32:11:E3:39:D0:B8:3A:66:D6:A2:47:BF:5E
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:18:b1:d3:a4:c7:af:e8:f3:cf:cb:39:03:04:71:cd:67:30:
37:04:e4:61:e1:bc:9c:af:8d:91:c2:1c:98:2a:c1:c4:97:dc:
77:13:7e:62:ad:80:e6:fe:d5:c8:0b:4b:82:16:4f:65:9a:94:
3d:69:4f:f3:8a:5d:f3:56:a3:15:25:f1:71:69:8b:7a:c1:9a:
e3:fc:60:aa:8f:4e:56:b5:fc:dc:da:dc:db:2a:61:f3:1c:0f:
5b:5a:64:fc:ff:d0:d6:65:e9:70:0d:e1:5c:1d:ab:a2:c4:d7:
8f:52:93:b7:b2:ec:72:d4:c6:0f:55:d6:47:4b:73:df:e7:b1:
27:c5:0f:90:3d:f6:01:4e:f8:b2:72:c1:26:20:22:4a:b1:00:
3e:95:a1:70:ca:34:10:32:5c:a7:7b:03:28:8e:c8:70:c2:4a:
65:1e:d8:29:d8:32:f7:8e:39:2b:0e:f3:da:c2:af:08:06:e2:
8b:12:56:18:67:f4:f8:d0:30:a2:ab:7e:12:9c:43:16:f3:4e:
20:e3:35:57:28:32:a9:ad:3b:99:47:10:9d:a7:9f:f5:b4:f6:
54:76:2c:8e:79:42:cd:9b:5d:8c:b9:c0:b9:60:49:48:3a:56:
5a:4c:fa:49:34:e3:5a:91:82:53:4b:db:8c:d4:d8:ac:bb:80:
12:87:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:47 2025 by rpki-client