Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: IntWLVl47Iwhxl6yRvvfnA84CGK7zG2+XNnDxNopOi8=
Subject key identifier: A8:84:E8:BC:A8:F4:EC:B4:46:80:AD:47:4A:7D:38:CB:5F:F9:69:C3
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019750B391EEBF0A697B1BA433AFEF7915BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 089C
Signing time: Sun 08 Jun 2025 18:00:34 +0000
Manifest this update: Sun 08 Jun 2025 18:00:34 +0000
Manifest next update: Mon 09 Jun 2025 18:00:34 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: yzcLXb3ntkm0g7grNOwLYKnKoVuKEQBR9jnMhva6C6c=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:91:ee:bf:0a:69:7b:1b:a4:33:af:ef:79:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Jun 8 18:00:34 2025 GMT
Not After : Jun 9 18:00:34 2025 GMT
Subject: CN=a884e8bca8f4ecb44680ad474a7d38cb5ff969c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:29:2e:6e:26:59:2a:29:2a:7b:d3:eb:46:
14:a4:c9:06:14:af:ad:6d:62:9e:eb:6a:5e:e8:54:
04:95:b5:b9:da:84:51:5c:c5:cd:67:37:9f:ed:89:
f4:bf:20:e9:d0:01:39:23:4f:51:85:f9:0b:33:75:
c5:b3:00:9f:9e:f4:8b:3b:19:fb:37:e8:ca:1a:33:
ba:b5:4d:06:b9:d0:1e:1d:5a:2d:79:d0:39:e3:67:
18:44:5a:bf:e5:66:40:77:cd:d2:94:7a:2f:aa:db:
91:2c:66:04:fa:02:fc:fa:95:f8:4e:b0:d2:c2:97:
77:ec:99:40:7e:47:4e:3c:76:c9:13:69:91:34:f0:
13:9a:4d:88:90:f7:98:8f:a2:1d:ca:d0:e1:d5:dd:
ac:bd:b2:d8:31:00:75:45:41:f6:ed:81:bd:94:e2:
64:be:79:37:02:49:49:8c:fd:54:26:e2:35:eb:22:
84:0a:d7:15:45:a2:f0:04:d5:d3:ed:a9:88:36:ce:
72:7f:ae:81:29:f7:76:26:61:60:e0:42:c7:46:08:
46:0b:ad:45:fb:b8:42:44:1e:e9:f3:0c:8f:99:7a:
94:e2:e4:0b:0d:34:45:10:c4:42:a4:68:59:47:de:
b9:db:09:a3:ba:34:c3:d6:a7:a9:9e:74:ff:2a:77:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:E8:BC:A8:F4:EC:B4:46:80:AD:47:4A:7D:38:CB:5F:F9:69:C3
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:4a:e9:3e:53:e5:c7:e4:ac:96:40:20:e8:85:81:44:7c:
5a:ac:3b:36:2d:0a:99:9d:9e:3b:b5:43:96:21:b8:dc:56:34:
25:e7:18:ae:a2:8f:f2:86:49:ce:f4:e9:54:a2:9d:af:10:cf:
ff:2c:3d:ac:4e:9b:6f:8a:6c:64:37:61:2a:56:3b:bd:42:6c:
cf:52:64:2c:7f:ce:6d:34:5a:99:81:c8:28:c5:01:c1:52:02:
0b:1b:19:70:3e:cf:77:48:0f:34:d8:8b:83:07:b7:41:6d:f5:
37:38:25:32:e4:a7:18:dc:b9:3d:45:b1:88:b6:3b:a5:ba:ac:
46:5c:f8:46:ae:4f:e3:c1:0f:ff:68:21:d2:08:cc:dd:25:30:
fe:99:ed:24:93:d1:8a:3d:4d:46:fa:ad:ff:e3:c1:43:c2:81:
db:bc:67:a7:0f:28:0c:d9:39:ac:24:b1:fb:b8:74:e3:e3:0a:
9d:f7:26:5c:64:80:a1:f9:95:83:4b:b7:ed:00:ea:2d:fc:23:
e1:5a:b3:a1:56:f7:fc:66:09:d3:3e:a5:bc:b1:95:26:6f:8a:
3d:d6:d0:23:59:c1:d8:8d:20:b5:8f:5c:3e:bb:38:8c:f8:4a:
1c:77:3f:0d:af:fd:ad:0b:f6:ba:e3:bf:04:95:68:f6:bf:12:
a3:f1:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:09:08 2025 by rpki-client