Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier: nPFyfz39JaNB/r5JMLrEnjmMqPTX9VBr4Htzqbb1E4o=
Subject key identifier: 8D:F2:F3:FA:3C:76:79:E6:73:B4:47:BA:89:31:56:57:E2:97:18:50
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 019752A28FADBC7584F0B3AB60F492828105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number: 0289
Signing time: Mon 09 Jun 2025 03:01:14 +0000
Manifest this update: Mon 09 Jun 2025 03:01:14 +0000
Manifest next update: Tue 10 Jun 2025 03:01:14 +0000
Files and hashes: 1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: w+E/PuimZi1CH0rT0Orev5yM8FFVcxWZ8Q7AYxut3i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:8f:ad:bc:75:84:f0:b3:ab:60:f4:92:82:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Jun 9 03:01:14 2025 GMT
Not After : Jun 10 03:01:14 2025 GMT
Subject: CN=8df2f3fa3c7679e673b447ba89315657e2971850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:92:57:e7:bb:70:cc:53:9d:00:6d:7a:30:
02:e2:c7:e5:c1:f9:be:b2:7f:44:91:a9:2d:7c:30:
4b:e4:95:f6:3c:d6:11:be:85:2b:9b:fc:52:44:5c:
10:09:7a:53:8d:eb:29:33:18:d4:08:91:dd:8c:f2:
35:5a:06:05:30:49:6a:c7:48:2e:80:b0:bc:c0:24:
94:85:81:8e:87:eb:a8:03:32:12:9f:94:8b:50:44:
13:6c:a3:b2:2a:8b:03:80:28:0b:a3:6b:10:50:c5:
e2:fa:33:3f:21:e6:e1:e3:54:c5:be:6b:a0:fb:68:
3d:d6:52:29:bc:9f:e9:f5:8c:43:08:56:41:14:e0:
c7:a0:e8:eb:37:09:f8:d4:02:49:f1:e9:51:5d:67:
78:96:5c:71:f0:f0:91:4f:8f:1d:ce:3a:59:d0:fd:
ae:50:94:45:9d:07:de:07:6c:92:6b:dc:e5:74:31:
50:f0:01:60:6d:b6:1c:44:4d:70:80:77:b3:52:95:
84:85:75:8a:dd:5a:2e:76:93:ce:1c:bf:dd:1b:c7:
ce:85:99:79:fe:f5:e1:95:f4:b3:78:e9:f2:8b:d3:
78:ea:82:4a:cc:21:ea:28:c2:e9:d6:d2:7c:f9:90:
0d:c1:20:4a:35:95:99:bc:6a:9a:8e:df:35:10:5c:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:F3:FA:3C:76:79:E6:73:B4:47:BA:89:31:56:57:E2:97:18:50
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:b9:25:38:e3:64:f8:36:15:88:f8:8c:bc:3b:75:eb:c2:
71:ee:68:aa:6e:50:ed:4a:ca:cd:fd:93:36:a2:8c:86:9d:81:
7d:c5:7b:73:5e:e6:07:57:f8:cd:98:66:0b:35:38:25:67:46:
e1:81:a1:22:66:80:16:b7:e3:83:c0:15:b0:0e:c9:ac:4c:12:
f3:8e:a8:74:c0:af:6d:de:4d:a3:01:08:ea:11:92:79:44:de:
9d:66:10:8a:d0:dd:68:77:9e:92:de:98:b3:c9:a6:5e:69:a8:
1d:93:67:7d:44:cd:28:1c:fa:2c:38:17:c5:f0:ca:d3:5f:05:
fd:3b:2a:e5:81:4b:5f:fe:bb:ef:4b:5a:f0:f3:74:5f:a6:91:
5e:09:25:99:09:13:e6:4a:04:dd:73:2e:4b:18:0d:79:c6:27:
18:05:d4:9d:e1:94:2f:68:d6:a0:f6:b1:5f:a7:46:ef:ce:1e:
9f:53:ef:a2:a0:9c:b4:5c:fb:a1:2e:36:61:55:01:ef:a7:96:
42:54:98:e1:b8:10:84:bb:a2:d5:bd:23:4f:ea:ce:ce:4c:bb:
b8:5a:67:f1:06:cb:3d:ea:88:b7:79:a3:57:55:f4:31:a2:57:
23:4e:7f:94:90:a9:59:37:c7:00:fe:15:37:a5:a1:f1:cc:95:
19:d5:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:43 2025 by rpki-client