Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: mOJNTtq+pgISmpYpOIAeSnAeUViWYNNUbdKEKfvy2ag=
Subject key identifier: EA:DC:1D:70:21:9A:5B:57:31:30:8A:99:9B:03:98:B9:79:73:2C:46
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 01974FA0DB73885BFC81299332D07EF18426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 053B
Signing time: Sun 08 Jun 2025 13:00:31 +0000
Manifest this update: Sun 08 Jun 2025 13:00:31 +0000
Manifest next update: Mon 09 Jun 2025 13:00:31 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: SXekmxiiSn6QOoP1w1n+JGJnSh+UuXaEKFCm2lyqwfM=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:db:73:88:5b:fc:81:29:93:32:d0:7e:f1:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Jun 8 13:00:31 2025 GMT
Not After : Jun 9 13:00:31 2025 GMT
Subject: CN=eadc1d70219a5b5731308a999b0398b979732c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:ba:d2:af:c8:e6:aa:e2:f0:66:df:ed:67:
3a:7f:52:d6:31:67:a6:5d:29:72:f9:e8:76:36:83:
7e:1a:68:48:55:3a:27:96:55:59:30:2e:00:d8:fb:
9d:c2:0d:77:b4:9f:82:75:c8:43:11:a8:33:f1:80:
0d:35:55:3f:92:74:5b:db:7e:ff:ed:d5:27:41:ab:
92:90:11:4a:b4:aa:d2:ed:f8:6f:72:da:a8:23:45:
99:47:f5:e7:fc:62:53:61:21:b5:39:a0:9d:9b:05:
77:de:cd:1d:42:12:fc:14:22:3b:f5:d1:f4:4b:cd:
56:29:e6:e0:78:cd:d9:0e:d2:37:9f:bc:43:43:92:
b6:da:45:37:e0:e1:dd:c7:06:70:e5:cc:f3:e3:b3:
aa:c7:8c:d6:e1:ad:60:b8:67:d3:f7:f7:73:5c:8e:
a1:78:ac:13:34:1b:b0:a7:51:38:3f:5a:95:62:fc:
24:55:50:d2:65:7e:18:20:14:a3:60:f6:17:35:f2:
a3:40:8d:45:3e:30:a0:50:f2:3e:9c:e0:c2:f4:9f:
92:a6:29:f4:da:c7:e0:ab:3a:7a:9e:70:a8:65:63:
85:3a:03:0d:0b:2a:ad:11:6e:37:ab:41:4e:85:c9:
24:34:66:cf:13:9c:04:16:11:79:37:47:3a:6b:4f:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:1D:70:21:9A:5B:57:31:30:8A:99:9B:03:98:B9:79:73:2C:46
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:55:3b:b8:05:52:ab:d7:27:57:25:05:f7:62:30:d2:f9:
03:0c:84:b7:ec:70:ab:4e:e2:c3:e9:58:d9:8e:a3:31:e6:90:
74:0b:0b:60:68:4f:40:82:51:36:65:d8:66:e6:cb:22:46:7a:
42:06:02:c0:f9:34:e0:4c:32:3c:ea:3c:a0:78:b3:de:22:bf:
1d:3a:6d:53:89:39:d6:68:3b:62:2d:00:7e:cd:7d:2f:b1:70:
c4:ec:e0:03:d9:69:6a:19:2a:b4:e0:8f:27:e0:ac:47:90:82:
5a:3b:09:7f:76:d1:39:84:54:d0:2d:85:ae:90:a9:1c:c1:e0:
31:4f:8c:2e:96:33:94:98:f0:84:bb:d2:31:f6:13:96:29:0e:
88:29:a6:10:61:ef:42:5f:c3:3f:4e:eb:e3:f0:29:5d:a9:3f:
29:21:e2:cf:b4:b8:cc:84:88:d8:77:97:bf:35:93:94:c8:30:
46:bc:a6:e7:37:53:20:54:11:99:33:2d:90:df:54:97:69:1a:
b3:d3:b1:f7:59:0b:bf:43:67:7d:cd:80:d4:80:da:4c:3c:93:
d3:d5:c7:93:d0:10:e8:93:c9:da:01:03:b1:68:20:da:61:b2:
83:0a:1b:df:50:ba:c8:38:a5:67:5e:cb:ba:72:e9:ae:98:19:
92:f8:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:00 2025 by rpki-client