Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: P3zpy1yzuTc1hqEoCNKyXq8faQkD3Q5+S4iYaqGwDOw=
Subject key identifier: 08:46:78:6B:AE:62:85:1C:E8:5F:E0:0C:40:06:5D:14:09:0A:C0:BC
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 0197665FCAAADB4D31BF9CAD103584C842E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 13A8
Signing time: Thu 12 Jun 2025 23:00:43 +0000
Manifest this update: Thu 12 Jun 2025 23:00:43 +0000
Manifest next update: Fri 13 Jun 2025 23:00:43 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: N7bhxrw44BIWXoc2LejWM8VIQUpydT9NUA7/cutUpCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:ca:aa:db:4d:31:bf:9c:ad:10:35:84:c8:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jun 12 23:00:43 2025 GMT
Not After : Jun 13 23:00:43 2025 GMT
Subject: CN=0846786bae62851ce85fe00c40065d14090ac0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:e3:a1:0d:98:95:82:a9:68:ce:21:e2:c2:
2f:f3:91:8c:ce:52:33:53:73:81:12:c4:13:a7:15:
34:43:14:f4:83:6e:e4:9c:37:3d:ee:9a:d3:fc:61:
1e:6c:6a:66:3d:20:04:12:53:ad:68:70:12:c8:49:
f0:76:aa:6e:7b:d6:c4:a1:a6:36:ba:f2:50:df:42:
e4:26:0b:8d:fc:51:d6:fd:2b:e9:1e:ef:6e:89:a0:
c8:1d:29:04:b1:7b:27:39:e6:84:30:b7:82:b9:8a:
bb:d9:8d:85:f7:1d:dd:14:eb:79:56:66:eb:f2:fd:
79:aa:7e:32:49:96:a6:06:bb:af:7b:b0:96:a6:77:
28:31:05:1f:b4:f7:82:d2:2c:02:6a:28:dd:b0:84:
d4:c4:6c:48:21:45:70:39:66:c9:f8:13:33:aa:78:
04:fd:6c:4e:24:f6:b5:33:28:36:8c:ec:80:61:0a:
98:50:23:83:b0:80:ad:6b:74:4d:79:8a:45:e5:15:
b9:77:5a:d0:ce:60:fd:93:c2:07:08:01:ac:fb:0b:
06:18:9c:64:28:07:17:48:f1:5c:f7:ae:91:9a:73:
7f:ce:0e:76:1c:55:77:73:af:b2:06:05:0e:d1:cc:
79:08:29:21:12:b3:07:b7:1d:c6:0a:a6:9f:0e:ce:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:78:6B:AE:62:85:1C:E8:5F:E0:0C:40:06:5D:14:09:0A:C0:BC
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:12:6e:ff:6f:c8:58:24:2c:8e:90:68:8a:0b:5c:f8:23:
2c:6d:69:2d:c2:ed:fe:60:7d:78:fb:b2:39:c3:f2:3c:f6:8a:
1b:42:1e:0c:7a:40:11:7a:9b:cb:79:58:e2:db:63:4e:18:32:
bb:c9:b6:8c:47:48:0b:e4:dd:d1:8a:6c:af:a1:e0:87:0a:e1:
4d:0c:6b:f6:b9:61:d7:d5:9b:0a:f7:14:07:5f:a4:d0:06:40:
07:d9:37:96:89:ed:d1:3c:ee:d6:55:e6:eb:17:9b:23:5d:b3:
7a:21:8a:33:cf:30:11:e7:eb:08:a7:a1:7e:ed:25:c8:45:44:
42:90:c7:4f:45:12:cb:1b:78:4a:d2:9e:d8:45:51:da:17:b2:
6d:c5:73:ac:2c:dd:0c:eb:40:bd:10:51:39:1b:b8:8d:86:fb:
32:3d:85:90:50:cb:ec:d4:3a:70:c2:6b:38:18:c0:36:fb:4a:
53:ad:10:6a:7f:5b:3a:29:43:2d:f8:70:e3:68:03:df:ba:85:
04:20:88:06:d9:9e:4e:79:99:c5:24:b4:c2:b6:f4:75:00:ef:
46:5b:50:75:1e:e6:aa:16:ed:fd:68:23:ff:4d:db:60:5d:aa:
7a:6e:41:6a:a7:17:fd:9a:7b:4f:a9:3f:71:e7:aa:39:84:fd:
3c:24:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:09:45 2025 by rpki-client