Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: 9o3L3W/S1Iq+XrnfLnRneFzC2TKu7/2lDxW1YafpOc0=
Subject key identifier: 05:64:FE:E6:35:73:FF:50:DC:D4:3E:29:48:F9:96:AA:3C:11:EF:53
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 0197537D7B777E97FDBE8A30944BA7AD690A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0BD6
Signing time: Mon 09 Jun 2025 07:00:21 +0000
Manifest this update: Mon 09 Jun 2025 07:00:21 +0000
Manifest next update: Tue 10 Jun 2025 07:00:21 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: fxeh7NMLYPjRg3HEbPIiToNhxMETvdgEYlvv+zNFmBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:7b:77:7e:97:fd:be:8a:30:94:4b:a7:ad:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Jun 9 07:00:21 2025 GMT
Not After : Jun 10 07:00:21 2025 GMT
Subject: CN=0564fee63573ff50dcd43e2948f996aa3c11ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:0f:e6:32:fa:e6:46:c7:cc:54:ea:e8:d3:
d8:b7:43:53:cf:62:75:dc:e4:40:50:88:1a:72:71:
7b:f3:ce:a2:df:16:92:bd:c6:64:c5:4a:64:45:59:
6b:04:5f:be:06:3b:e6:d3:07:5f:91:74:1c:d1:6b:
4c:22:0b:ff:1b:13:21:a9:96:c0:db:6d:1e:5d:a4:
e6:39:6d:27:5a:1a:39:12:8d:cc:c1:98:e5:06:91:
90:7e:52:2c:0a:7c:88:65:a8:34:44:e4:4b:13:1e:
e3:0e:2d:1c:5d:ab:36:66:02:68:0c:da:6a:38:53:
74:e8:0d:51:f1:cd:17:2e:f5:e6:f0:cc:5a:2d:91:
4e:d6:81:6e:86:f0:6d:f8:58:81:45:fd:b5:8f:27:
23:ca:bd:5f:f8:4e:c3:e7:e0:3c:61:87:ee:4c:a2:
33:b8:a1:eb:95:b4:6f:f3:37:f7:19:96:ad:df:ed:
6b:88:11:38:6d:ea:60:08:77:27:15:95:46:9f:e6:
15:90:b7:77:61:67:65:2e:2f:a0:8f:db:7a:a6:25:
a0:0b:23:15:04:66:00:1f:1c:ae:9e:cc:de:86:50:
a3:d6:02:6d:37:37:18:72:80:0e:1b:53:5c:18:72:
3a:2d:fe:5c:a1:2d:76:3e:9d:eb:7c:31:69:bb:78:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:FE:E6:35:73:FF:50:DC:D4:3E:29:48:F9:96:AA:3C:11:EF:53
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:aa:74:f8:45:a4:29:09:9b:56:47:43:63:f3:7b:3a:f1:39:
2a:8c:c3:ff:3a:70:63:ff:2f:d6:19:75:23:36:ab:ed:c6:32:
e6:ab:8a:d8:20:51:52:3a:59:c6:bc:17:2f:c6:a3:8a:49:05:
0c:78:13:82:58:fe:4d:db:c2:59:4b:c5:87:ee:a7:39:12:5d:
cf:e2:69:7d:d4:d0:0d:85:c9:68:b0:78:ca:b6:cd:15:4c:96:
fd:aa:93:10:d2:d3:20:bf:e9:71:84:e7:40:f8:39:3c:39:32:
6a:c8:7a:47:db:80:d3:d5:42:91:21:9e:19:01:20:21:81:57:
22:ea:a2:5d:80:ef:74:17:5e:62:4d:0d:83:5b:55:6c:f8:22:
17:52:f2:3e:4f:ba:04:fb:0f:bc:41:d6:50:47:2b:f7:cf:db:
9a:f2:a7:b8:40:25:a7:99:ad:19:62:e4:d3:b8:65:15:71:b1:
07:65:c6:37:16:9e:72:89:3a:ab:16:2e:9a:51:a4:27:28:ef:
d1:6f:22:48:e5:b8:c4:32:ee:a0:1a:5c:18:2b:28:5e:02:7e:
51:23:3f:64:38:b7:9e:e6:46:66:39:b6:66:ed:3e:1b:92:83:
b4:95:9a:13:a8:56:d7:d4:83:36:a7:78:0c:40:9e:c9:35:a7:
1b:2c:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:13:56 2025 by rpki-client