Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: QZhUP2MK4lTtGU1Vjy7xHeYA/zf8TM3x9ZUytK9DDfc=
Subject key identifier: A8:4E:E1:46:5D:0D:13:A5:86:01:7E:43:E9:FA:AD:CB:47:25:9A:1B
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 01974855798010147284F90C13B1458B7DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 0642
Signing time: Sat 07 Jun 2025 03:00:50 +0000
Manifest this update: Sat 07 Jun 2025 03:00:50 +0000
Manifest next update: Sun 08 Jun 2025 03:00:50 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: MSMed7l4LfRilNTXA72hf/i8mz5///edm+zlsV1YLas=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:79:80:10:14:72:84:f9:0c:13:b1:45:8b:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Jun 7 03:00:50 2025 GMT
Not After : Jun 8 03:00:50 2025 GMT
Subject: CN=a84ee1465d0d13a586017e43e9faadcb47259a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:37:a9:90:40:34:f0:0c:ca:e2:72:fc:1f:
04:a7:b8:1a:04:bb:2f:28:6e:3b:cc:a8:3b:95:64:
1e:40:99:0f:90:b8:cf:c5:85:cd:65:b8:e1:61:cc:
28:b9:6a:1a:13:59:53:af:30:a6:36:ae:79:1c:61:
ce:53:4c:ff:5e:a0:2c:81:0f:1e:eb:ab:e7:03:e8:
1c:a3:65:9e:24:a6:0b:9a:cb:93:1f:61:c0:cb:23:
6f:52:42:a0:5e:5c:e1:12:ce:03:7a:98:64:e5:70:
53:58:b2:e4:b8:25:84:7b:c6:ad:e5:c2:b0:35:47:
a7:44:3d:a1:9b:69:00:7a:d4:ab:2b:f9:1a:bc:9d:
2c:17:ac:67:97:7b:48:08:46:64:2e:2f:32:4c:d7:
cb:a1:a5:cd:2e:74:b6:7a:0c:82:ae:62:6c:36:06:
d5:5e:fd:30:30:52:f4:43:73:53:5b:87:e4:f9:6b:
11:3e:af:c1:62:e2:0c:d6:4f:4a:c7:2e:de:71:92:
83:e5:79:59:0d:98:fe:3d:36:1a:a9:b9:a9:44:75:
a5:03:e4:7c:22:80:f8:17:ce:e3:25:b9:9e:d7:53:
f0:63:6f:a8:b7:95:70:3f:1e:81:13:2b:9c:bb:dc:
b5:f4:77:16:bb:be:5a:af:16:b1:e5:3f:93:db:fd:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:E1:46:5D:0D:13:A5:86:01:7E:43:E9:FA:AD:CB:47:25:9A:1B
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:32:a3:24:70:d2:d0:70:73:fb:fc:40:1e:eb:d0:0b:42:
bc:14:fe:8c:d0:86:6c:86:f4:1b:3a:7a:52:46:8d:e4:41:fb:
e3:e4:6b:8e:fa:e5:8a:96:ef:3c:34:7e:6b:5a:df:8a:8e:e4:
16:ae:4f:55:11:3f:82:7e:ab:d1:11:31:c1:d2:57:1d:4b:2b:
88:14:1b:33:ac:79:a4:1b:33:28:a3:18:6e:4b:58:a9:6f:67:
da:33:05:21:34:ec:cb:48:a5:65:38:21:8c:ce:63:15:5a:96:
30:ec:26:c1:60:4f:17:a1:7d:ab:a8:44:b7:55:08:59:f6:55:
ca:36:8c:f6:11:ae:27:05:7e:39:57:83:9c:0a:81:e2:0d:bb:
e5:cf:34:f5:00:1b:9e:c4:e9:a4:ef:d1:42:c6:c4:56:5f:b5:
d4:12:6b:12:36:b4:7d:68:e6:a6:4c:ea:b7:50:1b:59:87:84:
09:ec:40:cb:7c:1a:1d:15:6c:1e:90:12:70:73:7a:1b:57:22:
0d:8d:67:4f:d3:2f:6a:af:0e:25:3b:79:ac:56:70:1c:60:c9:
a6:8f:77:31:0f:5d:4e:6a:f5:31:4f:7a:7b:5a:73:35:51:d7:
2e:95:d2:5c:cb:7e:e3:23:98:f0:3e:4d:89:65:81:41:f0:fd:
a1:de:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:28 2025 by rpki-client