Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: znIvXCSQ4wzk4Ixt6bgxUjpK5TK4IkllCx3Wnolqnsg=
Subject key identifier: 65:C8:AA:0E:E7:60:A3:32:6D:D5:79:68:13:4D:52:92:84:14:91:5A
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 01976A3D03BE40250A2D1F9315ED72A0A2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 13AA
Signing time: Fri 13 Jun 2025 17:01:12 +0000
Manifest this update: Fri 13 Jun 2025 17:01:12 +0000
Manifest next update: Sat 14 Jun 2025 17:01:12 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: aefIrOkXtC18SQG40YCuw+pTKSzz7RY4C3ruqZtzUzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3d:03:be:40:25:0a:2d:1f:93:15:ed:72:a0:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jun 13 17:01:12 2025 GMT
Not After : Jun 14 17:01:12 2025 GMT
Subject: CN=65c8aa0ee760a3326dd57968134d52928414915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:39:94:6a:68:00:12:b6:54:b4:64:9b:9c:
fb:1d:ba:59:e3:71:21:69:1b:2d:31:45:0c:1b:78:
22:ac:90:ae:09:d4:5f:d8:b2:46:fc:f5:d4:e9:7c:
95:f7:7e:13:7d:09:19:04:3f:ad:8e:be:d1:fb:4f:
d0:ee:ef:2f:18:14:ef:81:a6:7f:c8:3a:1f:c3:5e:
2d:ee:56:25:a9:15:ae:8b:63:fb:9b:ef:de:98:95:
94:d8:ec:69:8d:f4:f6:96:5b:7d:ab:33:e9:e6:07:
31:1b:f3:e6:a1:9e:03:74:63:3e:9a:91:07:1d:a2:
ac:d1:2a:ff:f9:4e:ad:c9:6b:6c:3a:2f:e5:2d:33:
f2:7d:08:4c:dd:fa:48:f6:4e:9e:4c:c5:0c:bc:40:
85:eb:43:26:7d:b3:f4:14:fc:dd:c9:42:8a:e7:2d:
2e:6e:7a:1d:8b:38:aa:0d:f3:0a:1f:08:4e:dc:72:
f9:42:95:7b:e2:ec:59:26:03:14:71:8d:c8:82:ff:
31:79:c7:7f:87:67:b4:e0:61:2e:33:89:86:aa:26:
18:1f:25:14:32:23:55:f2:57:a7:9e:e3:04:e5:88:
3e:a1:81:35:19:1e:92:c1:04:07:c7:80:0f:53:ce:
c9:8a:4d:48:ad:15:29:04:e3:91:0c:c1:7b:71:40:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:AA:0E:E7:60:A3:32:6D:D5:79:68:13:4D:52:92:84:14:91:5A
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:cc:94:18:8d:99:79:6b:b5:01:b0:90:4c:84:c9:ef:44:
44:5f:04:06:f1:12:3c:39:52:f3:43:7d:f2:58:8d:ff:c8:96:
3f:9e:5d:28:c1:ed:28:87:16:59:aa:f4:47:44:22:a0:71:fe:
3b:cd:d2:d6:94:18:24:e8:ee:c6:4b:db:ab:63:78:e2:4d:2e:
d6:4a:cf:87:f2:ce:d9:70:d4:39:90:b9:89:d3:f7:79:11:22:
04:2f:e3:fb:3f:05:26:c9:22:f4:c8:8d:a8:19:cb:7b:18:48:
88:a2:0b:63:5a:4c:da:17:2b:85:05:a7:38:a6:c0:17:2c:bd:
b7:ee:f7:ed:6e:d6:e3:98:c6:ad:6a:ad:d4:cd:28:f8:06:16:
53:1b:fe:37:3c:f7:16:94:74:7f:5b:73:e7:d7:39:2d:a6:c4:
f3:de:07:3a:94:4e:a3:a4:a3:c6:54:2c:fe:50:4b:d6:b0:d7:
3b:34:35:c7:4a:bd:3a:bc:41:41:f9:cb:7e:13:e7:16:7e:70:
c9:de:be:fd:1f:8a:40:73:50:0c:5d:89:ea:b7:f8:d8:8a:8f:
b4:1d:72:26:76:13:d1:ff:7b:4a:8e:8c:8e:f9:95:61:3d:0e:
5a:c2:76:af:f0:5c:b8:59:c6:99:9a:48:46:9b:5a:8d:03:94:
d4:b0:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:57:25 2025 by rpki-client