Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: hfy43GpYVsvhUw7ZFFcA5WaSlBKpBvChBhYfyrGJ/RY=
Subject key identifier: 40:29:5B:46:62:37:DA:BE:B0:46:36:82:EB:AA:11:6E:54:3E:59:2D
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01974C3231A372CA5065272297CBDD27263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 030D
Signing time: Sat 07 Jun 2025 21:00:47 +0000
Manifest this update: Sat 07 Jun 2025 21:00:47 +0000
Manifest next update: Sun 08 Jun 2025 21:00:47 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: O74n2SpE4KUEeo21VDXktaLEUL8G2AArrbYxRuyfxX0=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:31:a3:72:ca:50:65:27:22:97:cb:dd:27:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jun 7 21:00:47 2025 GMT
Not After : Jun 8 21:00:47 2025 GMT
Subject: CN=40295b466237dabeb0463682ebaa116e543e592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:73:e2:d9:cd:68:25:32:f6:b6:c4:6c:10:
e1:1b:2f:dc:fc:d4:f2:7e:39:a9:39:f6:af:79:3c:
13:21:b8:c0:dc:98:d8:2a:b3:71:48:0f:c5:28:62:
66:77:fc:33:d4:b4:96:8d:7d:5b:6f:e9:06:f1:bc:
d8:c1:0b:59:71:35:13:3d:01:ae:96:e0:be:b9:a3:
1d:9e:5c:13:19:b6:76:11:63:cf:62:b3:5d:38:c9:
81:c7:18:99:b5:82:7b:3b:8c:78:47:b9:93:a1:a9:
d4:3c:ef:19:c4:f7:b0:3f:a3:50:80:fc:95:63:f7:
ea:6b:fa:51:d1:eb:80:09:fa:50:2f:a0:02:69:e8:
0d:48:26:e9:62:df:2a:e7:cc:09:aa:75:98:8c:1f:
10:7f:15:4a:c8:8c:cd:cb:e8:fd:5e:0b:01:33:84:
39:53:e3:1a:80:0a:83:9b:1a:48:95:42:62:af:eb:
dd:c4:0c:15:b8:5e:b3:c5:a9:36:01:63:2e:09:e8:
89:8a:d1:90:65:1f:30:39:6c:51:2e:f2:d8:8c:45:
20:4c:51:b6:11:57:69:0f:e8:8b:48:bd:2f:52:a1:
e1:77:f6:c1:76:c7:2f:d9:1d:78:71:84:d4:01:29:
29:02:27:4e:f4:14:8d:5c:4e:3e:5c:16:b2:b3:da:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:5B:46:62:37:DA:BE:B0:46:36:82:EB:AA:11:6E:54:3E:59:2D
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:81:52:a5:c7:36:78:e2:8e:29:b9:e7:b5:20:4a:ad:67:f5:
b6:8d:b8:56:dd:41:f1:c5:3b:b8:72:48:56:08:ed:f8:a8:e5:
01:de:35:91:c3:b1:f4:26:5a:bc:6b:90:f2:4e:93:a4:85:16:
e3:1f:5c:d7:95:e3:0d:e8:f6:ca:56:4f:76:b0:be:ce:95:60:
0a:9b:e3:33:36:ce:4c:ed:5d:b2:76:fc:10:ba:de:a4:42:57:
00:07:9a:18:ac:44:19:9d:ba:f2:a5:42:83:e3:af:f0:38:c8:
69:62:13:40:97:a2:3d:82:5a:b1:d6:77:36:3c:8f:11:08:0f:
7b:15:0c:de:8a:07:f3:94:5b:a5:8d:2c:52:75:ae:cc:60:56:
14:03:9a:5e:0c:22:a4:4e:80:e4:bc:09:fb:a6:2c:9a:fb:53:
49:29:e0:65:63:a3:de:5f:c4:bd:2d:e1:cc:25:65:79:06:47:
e8:72:f2:ec:62:e3:14:04:a4:14:aa:a8:3c:78:ca:c7:50:26:
aa:f0:b0:77:f1:b2:dc:8a:37:8e:da:67:d1:2a:2b:42:94:25:
a0:1e:d1:b7:5f:29:7b:f2:7c:3c:b2:7a:b7:a6:4e:df:ac:df:
16:b3:86:86:93:56:37:fc:e2:94:32:4f:6c:78:41:97:e0:19:
5c:a7:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:41 2025 by rpki-client