Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: 5XKfgDHbCC8StNYj6F5UE4sYDRRnggqWi2OGXT6pVkU=
Subject key identifier: B7:3A:62:1E:8D:65:49:16:38:54:42:B6:3B:83:27:35:E4:56:B4:35
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 01974E5869090D1BCFE104A5275C34BFC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 07:01:46 +0000
Manifest this update: Sun 08 Jun 2025 07:01:46 +0000
Manifest next update: Mon 09 Jun 2025 07:01:46 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: 9BF7Mv8O6JI5eVe4hw07kzFElbNMyFx2Poj5afAAxog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:69:09:0d:1b:cf:e1:04:a5:27:5c:34:bf:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Jun 8 07:01:46 2025 GMT
Not After : Jun 9 07:01:46 2025 GMT
Subject: CN=b73a621e8d654916385442b63b832735e456b435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:f7:49:71:2a:18:a7:ec:c8:d5:ef:d8:01:
af:b8:bc:8b:7b:ff:8d:b0:c3:f0:8a:a5:7b:4e:61:
2d:70:72:46:30:d7:c4:ba:84:b4:bf:16:18:3d:d2:
60:82:71:85:31:c4:6d:ca:e4:26:1d:0f:7a:79:61:
85:87:cd:a2:dc:ec:98:6f:95:2a:81:ff:bf:e4:a6:
46:50:21:40:72:89:0e:8c:10:52:7b:0f:1f:b3:f1:
95:e6:f3:14:26:1e:96:b4:8b:75:64:ae:91:1d:50:
60:f7:18:7a:4d:f7:c1:96:99:66:b1:11:3c:ea:b3:
f6:e5:33:7f:cd:b4:09:dd:5c:ed:3d:77:30:6d:77:
72:76:5f:be:35:71:b3:26:27:49:e6:0c:12:24:85:
35:8f:70:1a:fc:81:b6:45:4b:ef:93:0f:d6:27:c2:
fa:76:77:f9:a0:bf:91:b2:18:08:d0:8e:6e:9f:e6:
77:78:36:12:ea:3d:4e:1b:c5:f8:fb:39:50:56:32:
54:17:6e:97:58:bc:7d:7d:c3:b0:e4:5f:da:a9:8e:
9b:97:4f:dc:5f:a8:e1:0d:94:5c:73:c3:04:d3:d8:
17:02:69:26:b4:69:3f:3f:9f:7c:ad:a7:ce:d9:b5:
dc:f1:f8:2f:16:13:47:c9:f4:99:bf:ee:e7:70:5b:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3A:62:1E:8D:65:49:16:38:54:42:B6:3B:83:27:35:E4:56:B4:35
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:cb:77:43:54:7f:35:05:6d:43:57:a4:d5:12:6d:7d:58:
72:60:3e:ca:3c:dd:1b:e4:79:1c:c4:92:84:72:29:eb:87:0c:
ba:80:36:20:35:2a:1e:fd:dd:91:02:73:9d:fd:1c:c2:5e:36:
a9:9e:6b:08:a0:8d:4e:35:2d:f3:3b:7a:b4:80:78:c0:cd:3e:
75:ab:85:85:ac:3a:6c:3d:d1:d5:83:df:86:8c:69:a7:66:d2:
9c:df:34:fa:cf:5c:ed:4b:ce:7f:cc:97:f3:0e:33:b2:8c:ae:
5d:c9:3b:fb:62:f9:da:ea:14:fb:b8:ca:64:6e:be:16:5f:bb:
aa:15:d7:cc:32:15:49:78:ab:94:aa:6b:cd:a3:51:3b:f9:39:
a4:2d:10:c6:d5:23:e5:ac:51:ad:43:b6:fe:22:9e:98:d6:7d:
62:2c:5b:5f:11:dd:5a:8e:ee:98:e1:1a:10:24:74:83:3b:75:
6f:9e:35:94:53:86:b5:81:05:6a:74:61:50:94:6a:05:26:e0:
ba:22:49:d3:b3:c8:2b:ca:f1:91:3c:2e:60:d4:71:55:f1:5e:
d5:a1:c0:2e:ac:1d:2f:b4:67:1d:3a:42:e8:b6:54:2c:c6:38:
ad:95:1a:fd:bf:51:25:23:42:6d:a5:5c:0a:4b:23:1b:d3:35:
ce:5b:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:01 2025 by rpki-client