Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: UPfylz76e7evGSMQrXqhzcVYfcM9BEtt9I1X7txhUrs=
Subject key identifier: D4:3B:49:43:53:74:C9:31:1B:D6:9D:57:D6:5E:DF:B3:E2:DC:7E:E9
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 01976471CF54C89DBD58602E2FEA024A11A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 13A7
Signing time: Thu 12 Jun 2025 14:01:09 +0000
Manifest this update: Thu 12 Jun 2025 14:01:09 +0000
Manifest next update: Fri 13 Jun 2025 14:01:09 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: VTIZydVM29GEHzsv+6lOJOqJyZunKKd39KzGEkq2lok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:cf:54:c8:9d:bd:58:60:2e:2f:ea:02:4a:11:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jun 12 14:01:09 2025 GMT
Not After : Jun 13 14:01:09 2025 GMT
Subject: CN=d43b49435374c9311bd69d57d65edfb3e2dc7ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:0d:f6:e9:bb:94:17:a1:5e:89:22:7e:4f:
8b:84:f6:6b:08:87:d9:d0:29:10:73:a0:ec:ad:7e:
9a:47:36:58:58:ad:6b:33:46:c0:f9:23:43:d4:a4:
93:47:ba:c8:12:e9:ed:5b:42:ad:de:1b:6e:06:f0:
3c:b4:e4:46:4c:d9:6a:20:2d:3e:0d:f9:ae:19:07:
7e:12:4f:07:2d:e9:96:f1:a6:97:a6:aa:cf:27:70:
0c:46:e8:9b:df:ca:bd:49:fb:9c:15:f9:05:b3:2f:
56:df:7a:d0:44:3a:16:0a:fe:57:93:67:d2:dd:f7:
37:a0:e7:b6:de:6f:06:4a:46:a0:c1:1d:a3:a3:1e:
1a:69:53:a8:04:7a:69:bf:4a:1c:ef:c5:19:63:99:
00:bf:13:8b:ab:55:a7:2a:09:e1:8c:e8:42:fe:a2:
a6:ce:f9:42:4b:5d:79:54:41:6c:6f:97:39:29:8b:
19:5f:ea:dd:50:b1:99:c7:07:78:8a:44:f5:45:b3:
97:6b:2d:eb:d2:d1:25:0e:f9:79:f3:e2:5b:c2:44:
5a:f1:92:35:18:ea:5b:3a:dd:44:2c:90:6e:7c:14:
31:40:73:5b:94:b7:52:8e:03:50:ab:da:53:e6:a2:
6d:39:3c:e0:9f:ba:f3:d4:64:fd:ce:36:0b:41:69:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:49:43:53:74:C9:31:1B:D6:9D:57:D6:5E:DF:B3:E2:DC:7E:E9
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:af:3a:20:b3:8d:03:3e:9a:f6:e3:2b:41:5b:f4:38:07:
3f:af:d2:f1:92:12:75:f9:32:b3:f1:5a:68:0d:81:b9:25:fe:
30:cb:72:97:96:ae:a8:20:73:2c:be:c3:8e:9a:7a:66:42:e9:
bf:bb:49:83:d7:58:b7:13:57:81:a7:e4:72:3c:5b:20:77:29:
39:05:8c:c4:db:45:a0:8a:de:b6:0f:6f:62:67:6e:1e:aa:f4:
d7:0c:89:af:dd:2b:8a:9b:72:0c:d0:01:52:72:7b:a9:2e:79:
cb:16:e9:a9:11:f5:bc:be:97:62:49:31:c2:de:a5:17:34:cd:
a5:37:9c:0b:df:44:7a:4c:04:64:e0:69:7e:cc:6a:1e:18:21:
b2:48:8f:1b:c2:2a:da:72:5b:1e:9c:31:8d:91:9f:0a:f6:33:
3a:bd:b1:ed:b4:a2:ce:38:1e:cb:35:68:68:fe:2f:d3:a3:e5:
c2:86:83:eb:8e:fd:01:e4:83:b0:2e:23:68:ec:e8:be:95:37:
65:cf:69:ad:c9:1c:bf:c3:8d:7a:93:18:f0:7e:68:52:d0:23:
05:c4:a6:9c:b9:da:de:26:16:5f:59:6c:94:f1:17:7e:78:fe:
44:21:7c:88:ce:68:6b:00:69:6e:3b:60:6c:13:d6:64:ea:29:
19:fc:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:35:10 2025 by rpki-client