Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: EeX4TN/UZrfPoDTRe3ZrB3UADlOKz6Lis28OA6rzBS4=
Subject key identifier: 3E:79:46:D1:1C:3C:9D:68:95:AC:B8:45:16:53:B7:FB:DF:48:82:E9
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 019748F9E8DC877BF656130AE6CDD8DAB3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 1599
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: Triz9xiFz+6SbzDA2/5QEm2J3W+KtL0l+NnleDQ1SjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e8:dc:87:7b:f6:56:13:0a:e6:cd:d8:da:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=3e7946d11c3c9d6895acb8451653b7fbdf4882e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ce:4c:3d:63:a7:8d:00:b0:6a:b4:3a:5b:
d5:90:84:4d:98:f5:42:9a:06:2c:48:ff:64:1d:ba:
6f:9e:47:05:33:78:f7:f4:da:63:fe:a3:2d:7b:45:
e0:40:3f:1f:e0:3c:6d:5e:3a:43:27:90:7b:bf:be:
a1:52:bc:50:b3:c3:89:f3:46:6a:d9:af:8d:12:bc:
fe:13:cb:4e:77:29:74:0a:aa:9b:21:83:f6:66:38:
c8:a4:84:74:29:c5:0a:4f:00:e4:50:55:e8:6d:dd:
06:60:fd:13:b7:06:cd:8c:90:25:be:78:f4:a1:53:
5a:c4:1d:36:c6:36:4f:85:ff:ca:93:2c:c3:33:01:
20:3f:1e:9f:49:a3:84:e8:1f:58:6d:22:d6:cc:6b:
8e:d8:be:1c:7f:a7:5e:44:3a:e2:5c:eb:df:4b:c7:
ed:59:13:6a:cb:fb:90:e2:f3:4d:f4:ef:e5:06:ec:
f5:89:2f:64:0c:82:25:af:b3:6d:3d:60:d4:b5:92:
b1:a3:6e:12:bf:a9:25:a3:64:fe:0d:83:e8:5a:26:
5a:ff:68:e3:46:3a:d6:b4:3f:ec:ae:0b:b9:a4:97:
b2:de:76:ab:ef:84:66:64:f6:c9:08:63:ff:15:bf:
27:94:fb:2d:c2:5f:71:68:67:91:ee:72:84:9f:0b:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:46:D1:1C:3C:9D:68:95:AC:B8:45:16:53:B7:FB:DF:48:82:E9
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:4e:c6:a1:c6:4f:c8:c1:62:45:83:39:74:60:49:ab:88:
c6:e7:8a:e6:b9:c0:8f:dc:c2:98:25:96:a3:2e:59:eb:ad:0e:
d0:93:9c:41:29:69:5e:dd:62:96:e0:20:ae:e3:5a:88:39:86:
f8:9b:d7:6a:ab:06:00:d2:33:fc:47:53:eb:ed:48:69:98:c6:
fb:0d:4c:93:7c:ad:8e:9b:7a:d1:11:65:19:9d:d7:89:92:a6:
62:ce:d6:e1:85:36:8d:b3:ae:c7:58:95:81:62:aa:ac:88:bd:
7f:a1:16:18:28:69:e9:2e:6a:ae:83:98:c4:cb:de:15:84:9a:
ba:a7:77:3d:11:dc:2c:79:55:32:61:49:bc:12:1f:10:63:cc:
c2:22:b8:c0:50:19:fa:24:e9:c0:6a:86:a0:51:d2:ab:fb:54:
dc:26:40:54:1e:b0:57:69:82:94:d0:f0:61:36:1a:e6:97:8d:
bd:df:d8:df:c7:15:4d:32:6c:6a:2b:44:97:25:80:23:b1:da:
47:c0:62:10:ca:af:7b:a2:16:c0:fa:16:d6:86:2f:cd:1e:e5:
9d:27:73:e1:f9:bc:46:cb:ad:8a:52:ce:d0:1c:2b:68:19:d8:
2c:9f:21:62:cb:8a:6d:41:be:3c:2e:fa:64:06:cf:7e:fe:02:
e1:8c:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:17 2025 by rpki-client