Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: VGN4OLzR0NBcCWcyQ8pPuHv62empzer2mQkUyl014A4=
Subject key identifier: DF:E1:CB:BE:2B:3A:B2:79:D6:54:2C:44:B5:91:2F:00:54:93:0B:6B
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 01975422BD44F20D9363BE897638914558B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 10:00:52 +0000
Manifest this update: Mon 09 Jun 2025 10:00:52 +0000
Manifest next update: Tue 10 Jun 2025 10:00:52 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: rbFuv1LmbxsMTyCmDxgz1t7a6hMVfauQ+BXaWIEJVpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:bd:44:f2:0d:93:63:be:89:76:38:91:45:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jun 9 10:00:52 2025 GMT
Not After : Jun 10 10:00:52 2025 GMT
Subject: CN=dfe1cbbe2b3ab279d6542c44b5912f0054930b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:a2:19:9a:b1:d7:b9:7d:a6:75:50:d0:d0:
e7:bb:bc:6b:17:46:5a:cc:e4:7a:4e:9d:85:7c:59:
68:67:02:6c:7f:1e:97:6d:03:23:47:54:4a:e3:4b:
6c:88:82:68:19:d7:ea:4a:90:69:e0:ce:cd:f2:ba:
04:94:e3:5f:b9:1b:76:f3:53:d2:6b:a2:2d:69:ca:
62:c3:8b:aa:01:69:6f:67:23:14:3d:e3:56:45:7f:
98:34:30:d0:48:80:12:11:72:98:2a:24:7e:c6:b4:
3a:5e:0a:c2:b2:a7:0f:68:14:bf:53:b8:82:50:5d:
25:09:a4:64:c3:b3:ac:d7:8e:45:be:1f:66:55:7a:
6a:cf:ee:c2:9b:7e:c5:31:c2:2f:be:8f:ae:1f:3f:
a0:c6:e2:31:a9:06:2a:03:3c:6c:f0:85:dc:d4:de:
e4:6a:72:bd:b2:c1:9f:83:c4:ed:d5:d5:d2:3e:61:
80:8a:b0:0f:98:df:e4:89:b1:70:bc:35:fc:06:bc:
63:d4:34:d0:c3:f9:f4:56:91:f0:7c:5b:24:34:77:
2b:0e:f2:e8:1f:92:f3:bb:a9:5f:5f:77:0c:59:2b:
25:79:44:71:ce:76:74:13:58:b9:8e:0e:0e:45:ae:
e3:0d:bd:ad:fb:b8:1c:14:17:0d:9e:74:58:db:cb:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E1:CB:BE:2B:3A:B2:79:D6:54:2C:44:B5:91:2F:00:54:93:0B:6B
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d4:5c:96:93:d5:e8:ab:77:9f:d3:13:61:b0:01:b1:72:2b:
10:d9:bd:f5:6c:e8:2c:39:ae:d4:85:2a:8c:08:e1:4a:68:ef:
33:2b:92:ec:77:09:ac:16:2f:b1:e7:ce:06:6e:c0:dc:9b:08:
28:d8:bb:83:cf:a6:6a:de:1c:b6:3f:24:cc:92:f0:ec:73:ad:
fb:86:4f:41:0e:c9:1a:3c:a8:39:fc:ee:08:39:4d:84:cc:9e:
8f:b5:0f:2f:ad:a7:58:34:2c:cd:5c:d4:89:2c:74:68:60:4b:
e5:89:7e:5c:50:ac:dd:35:c3:17:92:43:84:e8:6e:d1:4a:ba:
e3:aa:0e:a6:da:c5:bd:73:8c:48:28:bf:16:bc:9d:59:1b:dd:
89:07:c4:46:f9:0a:82:cd:68:3a:02:e0:90:6b:48:b4:59:e7:
5c:f9:30:5b:76:da:b3:d6:9c:8e:b2:54:0c:bf:32:b8:5c:7a:
61:a6:ee:65:75:de:45:f3:03:73:96:24:4d:34:26:14:61:58:
a1:de:46:1c:70:6f:3a:a7:39:49:b4:df:27:fb:ce:fd:0f:bc:
f9:93:4c:69:54:cb:4d:60:3a:60:92:e6:b8:b3:30:d8:a4:42:
06:e0:95:fd:89:f3:a7:73:2d:98:0b:25:5c:2a:c2:12:82:94:
97:23:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:05 2025 by rpki-client