Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: mo2DDDVM+4T04Sz8C+7kddDjsnsvYCSWDL86ghEdBWw=
Subject key identifier: 46:AE:B5:1A:F6:DA:A9:9A:E3:17:F0:10:D0:B5:2C:67:73:E1:2F:32
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 01974F6A22EC52C5410EDBB1B7CEA1E637D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0919
Signing time: Sun 08 Jun 2025 12:00:45 +0000
Manifest this update: Sun 08 Jun 2025 12:00:45 +0000
Manifest next update: Mon 09 Jun 2025 12:00:45 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: 4rpxibWKzCxsvT8jrEHCTx3STbdiJ1JDDEhyQNvlHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:22:ec:52:c5:41:0e:db:b1:b7:ce:a1:e6:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Jun 8 12:00:45 2025 GMT
Not After : Jun 9 12:00:45 2025 GMT
Subject: CN=46aeb51af6daa99ae317f010d0b52c6773e12f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:7a:e4:2e:01:ad:dc:43:b8:ab:6d:2a:37:
37:9d:7b:07:36:76:f8:b4:bc:09:3f:e5:2b:22:38:
52:7b:74:4d:f5:2b:ae:5b:af:d6:53:fc:e1:bf:82:
be:8b:e3:18:1d:6b:da:76:c6:48:b5:7e:9a:64:95:
47:d9:ac:7c:10:4f:ea:f0:d4:78:7c:66:e7:83:47:
9c:28:38:b1:31:7c:67:1e:4c:2b:37:e7:c9:38:0c:
90:93:91:45:8c:dc:f0:31:f9:33:7f:b1:f3:23:c4:
0c:eb:21:b8:98:a3:34:0e:54:10:1b:b3:83:c5:ec:
30:97:72:b6:12:9c:06:09:00:4f:e4:ae:c7:e2:d9:
c0:25:94:2f:78:5c:85:2d:06:02:70:d7:dc:cf:3f:
21:86:e9:61:d7:8c:47:5d:ed:98:a4:47:80:14:5b:
0a:37:8e:08:07:76:de:70:6f:c4:59:52:b5:62:8d:
5a:a8:6d:b3:82:56:98:cd:0f:5e:99:92:f8:13:57:
2e:54:46:50:76:45:bd:9b:49:df:63:b6:b6:a2:a1:
9d:e0:72:f3:73:62:b9:05:9a:24:0d:3d:76:ad:3d:
05:14:9e:88:49:31:f0:c6:5d:3f:08:4f:6e:a3:b3:
f8:e7:90:52:96:4c:4d:ad:ad:f8:e5:c1:30:b5:c1:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:B5:1A:F6:DA:A9:9A:E3:17:F0:10:D0:B5:2C:67:73:E1:2F:32
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:61:b3:00:44:9f:94:37:35:3b:a4:e6:a7:4d:b8:95:a6:b4:
21:69:4f:2d:cd:2a:ec:72:7a:6f:ad:18:eb:35:85:d5:ef:df:
23:3f:e3:64:7b:f8:68:87:e4:53:de:94:b4:2e:30:49:71:53:
47:0b:fa:f4:f9:6a:d5:20:1f:77:ab:b3:05:86:c5:29:7e:6a:
5b:bc:88:a0:53:ab:77:87:a3:1e:82:40:e6:28:89:36:de:94:
8a:ee:a7:79:65:69:0b:19:8e:2f:b3:d5:87:05:3e:b6:cc:d1:
e2:80:1d:44:35:96:25:a6:99:78:1e:33:e1:a1:8b:c2:7e:db:
56:ea:9e:2d:e3:4e:98:fc:ff:9f:23:9f:cc:8b:47:e2:35:b8:
4f:c5:eb:5d:3c:9e:aa:c7:54:9f:fc:c7:0a:5b:94:98:45:76:
84:c5:1e:c8:c4:52:3b:bb:2c:80:57:1b:a2:44:70:cb:db:e3:
83:bb:4f:e5:9d:f0:b9:4c:df:1c:07:9c:f1:64:3a:9d:d7:7e:
a5:24:16:58:8a:28:b7:b9:b1:5f:29:29:02:a6:02:a0:87:ab:
55:3c:fe:9d:96:b1:62:dd:9c:e3:1e:db:47:dd:fd:48:fe:24:
c5:4e:29:38:b6:98:cc:c6:8b:b3:0b:8f:4b:53:68:b6:59:a6:
2f:45:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:09 2025 by rpki-client