Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: grtBt7v3v9cdVozqWmWJ7gCDbWhnGq6v+6z2WgKRIMY=
Subject key identifier: A8:F6:0C:1F:02:98:1C:55:E5:EB:C8:05:37:42:64:6B:BE:0A:44:B5
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 01974742D7DFE0F0E565831354C02A70D6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 08D8
Signing time: Fri 06 Jun 2025 22:00:52 +0000
Manifest this update: Fri 06 Jun 2025 22:00:52 +0000
Manifest next update: Sat 07 Jun 2025 22:00:52 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: nLEClJKQtAgd0zqy0TGgwP1WbQ9KbUbO36PoMBocHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:d7:df:e0:f0:e5:65:83:13:54:c0:2a:70:d6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Jun 6 22:00:52 2025 GMT
Not After : Jun 7 22:00:52 2025 GMT
Subject: CN=a8f60c1f02981c55e5ebc8053742646bbe0a44b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:bb:17:75:01:cc:7b:0f:be:da:f8:a4:2f:
ee:24:41:2f:f9:0b:9e:22:77:26:8b:59:25:ba:6c:
b1:94:df:24:49:2b:5b:a0:7e:4b:d5:ea:81:85:ad:
ea:61:8c:71:53:dd:29:ac:ae:55:79:bd:27:6d:d4:
76:13:4e:f3:92:04:0f:9b:6c:0f:60:15:6c:74:52:
9f:97:b1:81:ba:0c:d4:bc:9f:a7:a1:da:48:bc:5a:
36:bf:e6:32:17:a2:af:7c:a0:6b:f1:0e:d8:99:ff:
51:08:e0:83:d6:99:e9:54:5e:76:e1:d4:4b:b4:bb:
d9:78:a7:5a:ed:4f:9f:cd:3a:b9:1a:7b:f9:81:9a:
67:2a:75:70:ba:09:5d:d3:87:3e:fe:4b:c2:cf:ce:
fd:b5:22:10:82:75:83:a0:2a:31:b3:36:13:56:54:
3d:58:67:ca:89:f1:7a:20:b7:a9:07:fc:92:5a:71:
e4:0d:cd:f2:29:49:9c:05:32:01:98:70:6a:07:93:
b4:80:ff:34:45:54:2b:b4:40:a2:77:90:d6:dc:a0:
62:37:f6:29:58:f2:1e:73:3a:67:e7:c2:87:af:52:
51:28:51:85:b2:5c:10:3c:76:e1:a8:97:af:0a:5e:
7c:dd:8c:e1:dd:0a:72:75:1e:d9:bd:19:1e:56:a2:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:0C:1F:02:98:1C:55:E5:EB:C8:05:37:42:64:6B:BE:0A:44:B5
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:1c:2b:32:4d:ce:ee:61:00:54:8c:34:37:35:89:81:cc:
93:e3:07:f9:eb:ae:3a:80:fe:cc:56:5e:83:02:c9:5b:f0:57:
dd:8e:60:1a:e5:8c:10:98:32:84:5e:36:b3:6c:45:04:d4:ce:
b5:35:b1:00:81:48:58:ac:c5:ee:50:62:95:8f:04:46:d4:23:
7b:5b:43:0a:5a:ea:7f:fc:7d:df:89:e6:0e:69:6c:68:af:9b:
20:33:35:63:b4:2d:bb:42:1a:a7:e1:f5:b6:a5:94:66:58:b8:
dd:ba:df:01:d2:84:dd:0e:65:62:10:ae:dc:95:44:ea:07:ba:
4e:70:3a:51:b5:36:64:78:12:c0:ad:2d:f5:e9:0e:42:3f:62:
d3:1a:29:9d:69:8b:39:95:7a:8f:92:a2:af:31:c5:b8:d7:8d:
b4:5e:b8:e6:44:af:18:e2:90:a6:4f:c9:38:9b:5e:74:84:5f:
66:9b:bc:57:65:da:6f:76:9f:7a:64:f3:34:5f:e8:37:b1:7c:
00:ae:5e:b8:96:97:d9:01:a2:4c:12:4a:b9:07:64:97:a4:08:
35:3c:67:aa:bc:f0:3c:59:a1:6e:49:23:6e:e7:be:ce:91:b2:
42:62:b4:10:ff:db:16:39:57:dd:b4:14:31:6a:7d:80:be:60:
f8:37:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:04:49 2025 by rpki-client