Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: +d4mbey1fRwtSo76jfLzvPgP4qhf4Nu+05oKXKOr1k8=
Subject key identifier: 27:F7:53:DF:92:C2:38:E9:13:83:9A:87:72:2E:DE:8B:61:D2:22:DF
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 01974E576B3E7038CB12CD1537925031A533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0994
Signing time: Sun 08 Jun 2025 07:00:41 +0000
Manifest this update: Sun 08 Jun 2025 07:00:41 +0000
Manifest next update: Mon 09 Jun 2025 07:00:41 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: WN+dOGf3CIS10oLy2mKNvSU8MJu+hl3UJoke7iy3Q0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:6b:3e:70:38:cb:12:cd:15:37:92:50:31:a5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Jun 8 07:00:41 2025 GMT
Not After : Jun 9 07:00:41 2025 GMT
Subject: CN=27f753df92c238e913839a87722ede8b61d222df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:35:cc:fc:72:38:32:10:25:34:07:6b:44:
c6:d4:61:6b:22:f2:fe:ff:71:31:b0:12:26:10:d5:
ba:84:b7:69:74:20:d9:67:bd:d2:a0:6f:c6:70:10:
fd:a0:8c:99:50:b0:32:f0:a8:a7:63:88:b0:f7:86:
a6:0b:18:3e:67:41:4c:54:a0:65:4a:e6:f2:42:9c:
66:0d:5c:21:2b:d7:69:32:7c:9a:1b:8f:f4:91:f6:
c6:2a:c7:1c:ac:38:c6:6e:6c:20:e0:73:f4:e1:98:
ea:97:96:bf:93:73:be:62:ad:ea:c8:10:8e:d7:1b:
3b:93:43:a4:8c:dc:c8:42:e9:a2:3e:49:40:21:d5:
bf:49:44:6d:8d:cf:12:7a:a5:25:a9:29:57:3d:65:
58:e6:89:cd:79:40:36:8d:e6:aa:99:0f:56:db:c9:
47:b9:eb:f5:a5:aa:87:ff:e1:a6:11:7b:5a:f6:91:
55:d6:7d:b8:de:e1:25:b0:8c:0b:a3:28:73:2b:bd:
01:c6:82:d6:65:3d:73:42:55:a9:0c:a3:f7:22:a9:
7d:65:34:79:15:dc:ff:2c:01:92:67:58:80:57:20:
d9:ea:11:04:1d:b6:75:70:86:a4:a2:f9:3b:73:4d:
05:be:b0:a2:77:65:20:98:75:8f:ed:3e:f1:51:25:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:53:DF:92:C2:38:E9:13:83:9A:87:72:2E:DE:8B:61:D2:22:DF
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8e:4a:f1:9c:61:04:d1:67:de:fa:d3:6d:cb:9f:e1:8b:9d:
30:e2:21:fe:ac:d1:48:07:e7:0b:69:d5:ce:e9:12:bf:b4:c6:
d0:92:94:27:68:47:c8:6a:ee:f4:ec:c9:a0:98:7d:2b:14:46:
7f:1e:52:2c:ac:d5:24:4d:f9:d2:ce:fa:28:83:77:4a:6e:28:
76:91:98:60:2f:a4:71:4b:28:24:5c:e6:63:38:00:26:b1:40:
da:11:36:84:e1:d6:1a:22:f1:7b:20:a2:c6:26:11:e4:1c:a6:
2a:8a:1e:aa:0e:5c:cf:f9:5d:76:48:5d:32:cf:c1:3a:e4:40:
29:62:bf:b3:9b:97:e6:09:33:e5:f8:bd:97:41:1a:ae:79:c9:
97:4a:8b:f6:6f:cf:cf:13:36:e2:ee:91:34:0e:2a:35:b4:1a:
fb:a8:5f:a8:1e:2d:36:21:80:f9:1e:50:6e:59:c4:73:62:95:
34:d9:e5:c4:a6:4e:26:8e:81:41:97:24:c0:02:96:64:2d:c2:
eb:7b:f3:7c:db:25:45:2d:43:52:93:e8:9d:31:d3:1b:ee:f6:
34:b8:f0:45:a2:e7:c3:7e:37:79:e9:53:a9:e7:17:4f:4a:09:
d0:b0:01:22:16:f1:0e:c5:1d:3f:80:c3:69:ed:a3:67:bd:8c:
7a:7e:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:55 2025 by rpki-client