Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: z4WOtBI5bg91Z5mxXhJtOqYpdeKCLkVuefqGBscvY9A=
Subject key identifier: EB:9B:E2:91:1A:51:41:C1:EF:D2:EB:28:C6:01:8C:61:FE:17:57:F7
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 01976282F014FEFA9C412A882ECF40376C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 13A6
Signing time: Thu 12 Jun 2025 05:00:37 +0000
Manifest this update: Thu 12 Jun 2025 05:00:37 +0000
Manifest next update: Fri 13 Jun 2025 05:00:37 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: noMU9oZ9pZnRSqy8mX4obu4mNRAWzkEakdtcrWY2hA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:f0:14:fe:fa:9c:41:2a:88:2e:cf:40:37:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jun 12 05:00:37 2025 GMT
Not After : Jun 13 05:00:37 2025 GMT
Subject: CN=eb9be2911a5141c1efd2eb28c6018c61fe1757f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:6f:68:36:9e:37:37:75:93:80:89:d4:13:
2c:b3:ff:24:ce:48:21:fc:f7:4c:f8:77:f6:8e:fe:
8f:19:6d:78:d7:2c:bf:d2:fc:68:73:26:f9:16:ed:
3c:19:68:f7:c8:a9:75:0a:4e:e3:9c:ea:26:c1:18:
c8:7c:49:8a:83:f5:b8:02:67:e7:06:5e:73:b6:48:
9d:a1:e5:ba:77:6e:7e:f9:ca:c5:a4:b8:67:cc:eb:
6a:c5:93:b6:56:20:7c:d3:74:43:cb:72:0e:c1:6a:
b9:61:2a:d1:34:89:ab:ac:e1:88:c7:63:26:4d:67:
ac:5f:91:e7:e0:4a:5f:18:af:dc:90:b5:32:08:15:
85:c2:8b:8b:61:79:b5:d0:94:ed:38:55:9d:41:3b:
d7:3d:13:9a:37:37:c9:e1:c0:ef:5b:99:70:1c:24:
53:75:e2:a1:fd:87:60:bd:1f:77:db:47:0b:8f:52:
b1:9e:f0:5e:08:df:fc:f2:96:3a:70:e1:4f:aa:5b:
61:d8:d9:4a:55:ec:c3:2e:5f:dd:1d:f7:c4:41:e1:
2f:9a:73:44:9b:3a:00:28:81:8e:bb:e8:c0:c0:56:
05:3a:c1:74:b6:51:cb:f5:54:6b:90:00:ea:60:6a:
82:83:d1:53:3a:01:6d:ba:2d:2f:59:b8:48:4e:33:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:E2:91:1A:51:41:C1:EF:D2:EB:28:C6:01:8C:61:FE:17:57:F7
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:c1:6c:44:34:2c:06:39:ce:4c:cc:5c:9e:ef:85:97:1e:
da:4f:0f:cd:28:67:03:08:b0:e5:b9:67:36:1b:a8:b1:81:0f:
95:d8:7b:1f:cd:90:9c:0b:9f:c8:a9:14:86:e8:14:1f:61:bc:
e8:cb:e5:0f:dd:2c:70:f1:84:f5:71:e8:d7:05:88:78:6a:66:
69:88:52:7b:f3:cc:fa:35:94:34:48:94:91:fd:40:42:bd:da:
1c:61:e7:85:52:95:b0:8c:c0:7b:96:53:11:c4:69:1c:f4:66:
40:21:d8:4d:45:14:3f:f1:92:37:a3:9d:ad:de:fb:19:45:15:
89:2c:1e:6a:28:22:5c:77:77:8b:6e:bf:61:4d:0c:8d:80:c9:
51:4a:b1:00:34:72:06:55:bd:b3:72:33:2c:d3:94:0e:af:20:
ef:6a:38:e8:74:0e:c7:27:71:ce:93:ef:b7:0b:b9:18:6a:1b:
16:92:14:0d:df:bd:50:ea:fd:21:43:43:35:c2:d9:54:47:1b:
92:46:81:3c:92:77:47:d2:2e:1e:e7:17:5d:a8:31:c4:b2:f9:
6a:85:c1:a3:ed:f1:33:6c:b3:34:aa:2e:ba:6e:a0:15:bb:0d:
c9:85:f8:35:75:12:9a:fb:74:16:d0:2f:dd:f9:c6:40:ca:fd:
b0:93:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:40:48 2025 by rpki-client