Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: HMJkgug+tyVtD2v4fX2iFXoAn2Ygc2oIEpElsTq6JaE=
Subject key identifier: CE:A9:5D:1F:60:4A:A7:6A:DC:16:FB:AC:55:8A:13:11:D6:D7:F9:C7
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 01975A24655AA91D04C2F4E5D9D70079AB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0643
Signing time: Tue 10 Jun 2025 14:00:24 +0000
Manifest this update: Tue 10 Jun 2025 14:00:24 +0000
Manifest next update: Wed 11 Jun 2025 14:00:24 +0000
Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: HGVutowFsMMOnDAjaoNGG52d358x0AC4JQhLaT6fRhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:65:5a:a9:1d:04:c2:f4:e5:d9:d7:00:79:ab:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jun 10 14:00:24 2025 GMT
Not After : Jun 11 14:00:24 2025 GMT
Subject: CN=cea95d1f604aa76adc16fbac558a1311d6d7f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:87:a2:d3:34:e1:e0:2a:ac:99:d2:9b:e0:
92:54:61:28:48:bf:75:18:4a:d0:b7:b5:61:8e:da:
19:ad:92:51:84:c5:7e:0a:ee:5d:f2:e5:70:25:fc:
1e:c2:01:c6:02:4f:14:7f:ea:24:de:9d:e5:55:80:
94:83:3a:7b:da:b2:9f:72:3d:ac:e9:11:6c:39:ba:
90:88:3c:17:87:4f:ee:9f:84:72:54:17:ff:c2:80:
32:b7:fd:b2:58:0a:bc:db:3e:ff:5b:dc:fd:8d:7a:
04:de:dd:bc:f9:05:01:ab:20:84:ec:d0:db:cb:7c:
70:c1:1c:de:bc:10:60:9f:dd:a6:01:ba:41:21:3c:
47:50:d2:16:22:f9:83:c2:0f:4b:51:e1:20:36:20:
60:bd:96:f5:a6:3b:ba:cf:fb:a9:1a:71:1b:55:3f:
66:a7:e0:0a:a8:42:b3:6f:74:c3:02:98:36:f1:f8:
00:1e:f3:83:71:d4:95:04:f7:41:35:ae:0c:15:ee:
74:85:75:a2:2d:d4:59:10:5f:de:e8:b7:b4:8e:ef:
fd:6c:2b:43:83:4f:97:27:9e:cc:c0:33:44:54:0f:
b3:83:2d:7c:f3:c7:f2:67:de:fa:14:e1:94:ee:6f:
5f:4c:86:02:dd:1d:b0:6c:30:d9:f2:b6:70:8b:d7:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:5D:1F:60:4A:A7:6A:DC:16:FB:AC:55:8A:13:11:D6:D7:F9:C7
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:4a:b8:50:36:11:ef:20:20:41:fb:22:0d:5b:3b:94:24:
a1:3a:b8:e5:88:13:61:0c:11:bd:7e:d3:3c:07:9a:fd:79:9b:
d4:c9:76:36:d0:d5:e5:9d:07:3d:02:19:7e:c4:a0:4a:94:61:
3c:25:c7:7d:88:21:25:f1:69:d4:fd:3e:86:bd:d7:be:c2:9e:
b5:00:ad:1b:6e:c6:d4:19:ae:6f:15:43:8c:88:85:6a:02:05:
ee:a6:06:7c:65:20:fd:be:78:3f:b6:91:90:45:d5:00:7f:71:
28:26:1a:09:58:20:cf:c1:14:ef:10:1b:5e:96:62:57:ad:6e:
a2:07:34:34:07:b6:80:a2:f4:8a:57:82:5f:73:4f:d6:bf:3f:
e4:b5:18:08:74:a0:8b:58:5c:6d:dc:3c:42:bb:12:9c:a0:2c:
c7:1f:39:61:32:a7:35:64:d1:3a:22:d2:40:f7:c4:b6:04:53:
23:01:7c:e1:ae:0f:1a:1c:74:53:3f:65:8b:59:41:b1:b1:e4:
4d:59:d0:43:59:b6:80:50:50:1d:5b:b6:4d:bc:53:de:1a:5e:
4d:d7:15:fe:e8:5b:53:10:46:16:f3:05:15:c7:76:9b:9d:df:
01:9e:2b:25:73:1c:5d:40:b2:82:a9:c6:c3:15:19:77:d8:e9:
c4:44:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:41:21 2025 by rpki-client