Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
File: nBzRs8h3KVb6hVNahGS0yhlmOt4.mft (raw, json)
Hash identifier: 06i+CvsWXHqtQVPodlFoFhp3q5k3yeCNtEfZJG0828c=
Subject key identifier: 68:40:E7:BD:70:71:59:62:75:DA:DF:C7:77:87:AE:C3:9A:02:49:DF
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 019746D498FC7C82F723C50C1E820A6D9E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 20:00:27 +0000
Manifest this update: Fri 06 Jun 2025 20:00:27 +0000
Manifest next update: Sat 07 Jun 2025 20:00:27 +0000
Files and hashes: 1: JeBncY6ChKBRQOUTYTSFHZE1uH8.roa (hash: xgTh9uFZcGgpjhz25blPwKqXY1Nn7zce/RhA70u2mJQ=)
2: XOwu2ebvUDQPT_bMtirnTz4DXtY.roa (hash: +WWsZzcafcQYxozcv0fQHPsnMiE94A7luCuf63M9dXs=)
3: nBzRs8h3KVb6hVNahGS0yhlmOt4.crl (hash: vQC++dbbC7poxvike0EuN64vGJwauYj0DZ6BozxGAvE=)
4: o2jbAYhRTuQBmdDMbACuxNgCDog.roa (hash: l9P4NF0hkDAdmr9McK92Zf+I3x80Yj+ORPskROTVaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:98:fc:7c:82:f7:23:c5:0c:1e:82:0a:6d:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Jun 6 20:00:27 2025 GMT
Not After : Jun 7 20:00:27 2025 GMT
Subject: CN=6840e7bd7071596275dadfc77787aec39a0249df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:1e:3c:06:45:13:35:71:e0:e4:9e:97:af:
cb:68:4c:cf:13:d2:4e:99:9d:8d:c7:3a:1e:03:ae:
fd:f2:16:90:66:75:17:b3:89:ea:45:e0:5c:d4:4b:
1d:2a:24:c1:9f:ef:72:17:79:d3:fa:c3:d1:e7:e6:
29:8f:f5:7f:33:0e:4f:3a:b0:be:2a:90:1b:2c:ce:
6d:7b:d8:df:0c:89:0c:19:09:d6:64:e7:1a:e4:9f:
57:8c:06:07:9b:86:cc:51:5e:1e:79:df:42:94:f0:
49:a8:f5:fb:05:e9:52:f9:b5:76:26:5f:24:0c:77:
59:ce:f5:b7:f3:7a:bb:85:a6:37:d9:a7:96:b3:8b:
be:03:52:61:02:30:f8:7d:ad:32:64:4c:92:b6:a0:
29:17:d5:45:25:7d:41:94:13:7c:4b:e7:63:5a:b8:
53:c1:61:c0:be:42:3b:71:6e:ef:51:71:28:fc:d9:
d1:5c:b0:56:1a:16:ac:d0:ee:1b:0f:fb:46:d9:97:
b3:30:d0:16:57:7a:68:02:f2:ed:3b:f2:f4:97:ac:
68:29:b6:64:da:53:39:2a:67:19:d1:87:7e:d5:d3:
9b:eb:33:ee:f5:64:ab:95:c5:e2:c8:b9:1a:77:ea:
0f:12:de:d7:f9:fd:e8:92:25:fd:75:13:b3:a8:68:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:E7:BD:70:71:59:62:75:DA:DF:C7:77:87:AE:C3:9A:02:49:DF
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:23:f8:e4:96:14:22:02:89:98:58:0d:d6:8d:9a:13:b5:53:
d7:62:bf:5a:5f:ba:a0:4b:65:6a:c0:47:83:2f:60:7f:b8:d7:
bd:2a:05:1f:ee:05:29:ba:9d:4a:7f:5e:ae:9a:a9:b5:16:58:
35:10:8a:a5:71:bd:3a:2f:cd:8e:ca:a0:33:2e:8c:65:80:f3:
c9:d0:10:4d:44:9e:14:cf:58:c2:5b:0b:1e:1d:ef:04:4c:90:
18:4a:b7:e6:84:4b:2a:c0:71:59:0c:26:86:a4:9a:7b:26:f9:
56:3f:65:a7:80:34:ae:fe:6b:ff:e1:02:ee:cc:5e:5c:e4:32:
5e:39:18:88:13:16:95:00:b5:bd:fb:af:4e:f0:1f:e7:66:0c:
7b:bf:c4:24:6c:7f:16:ea:5e:38:58:80:6a:51:3d:c3:6c:fe:
a9:9a:6a:93:6d:99:ca:66:67:58:b6:de:6a:25:bc:94:e0:16:
e4:98:80:0b:24:b2:1b:73:b8:c3:4e:15:8f:59:d0:3e:e6:40:
53:1f:e8:eb:96:df:ec:24:94:25:78:e9:ab:b2:5c:a7:0b:a7:
64:61:30:06:00:05:68:ea:90:ce:4f:5b:62:2e:0b:90:75:5a:
d2:43:74:3c:ef:92:44:8d:d4:9e:c5:89:af:23:77:82:43:a0:
98:24:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:32 2025 by rpki-client