Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: jlAhD0eYlqYoNi9+DtSfItXxPmRtQMgKw6tmPRu0Dtk=
Subject key identifier: E5:3D:B2:FC:54:D5:4D:57:C3:A7:AC:05:32:07:52:B6:EE:9C:6F:D1
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01974BFB2A73DA8B87168EEAD181324EDE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 0170
Signing time: Sat 07 Jun 2025 20:00:40 +0000
Manifest this update: Sat 07 Jun 2025 20:00:40 +0000
Manifest next update: Sun 08 Jun 2025 20:00:40 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: JS9ijQJsyxO0EKMnxUEWi3vWUUVye6QbYWt/A/NZr70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:2a:73:da:8b:87:16:8e:ea:d1:81:32:4e:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jun 7 20:00:40 2025 GMT
Not After : Jun 8 20:00:40 2025 GMT
Subject: CN=e53db2fc54d54d57c3a7ac05320752b6ee9c6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:98:9d:53:4b:84:70:45:01:1d:dd:d7:af:
d4:c4:9c:27:de:84:e0:5c:f2:0c:c1:55:05:8e:fd:
07:d8:dc:a3:e5:03:dc:e9:1e:c4:ac:4d:f4:6c:22:
85:7d:02:69:fa:42:c9:b6:bd:e9:b1:65:46:ac:46:
5d:1e:5f:da:68:ad:e9:52:a5:86:c1:27:54:68:91:
02:91:55:fe:bf:33:75:e4:db:6d:66:13:7e:a4:9d:
28:ad:79:e5:b3:dc:54:d4:71:85:7a:27:ab:08:85:
78:31:a3:ff:76:23:8a:79:c3:19:09:a0:f9:85:18:
e7:91:da:03:a4:3d:71:cf:73:36:72:2b:a5:38:62:
77:69:bf:e5:5d:b8:d8:cf:29:a8:97:d5:11:0b:11:
01:66:2f:3a:b5:3e:6e:6b:44:3d:ff:0b:98:ee:42:
6f:8b:1e:e5:23:d5:f2:5e:be:0d:b3:b0:ae:30:19:
4c:86:90:ba:00:a0:10:25:db:aa:3c:61:fb:77:5a:
ee:ea:17:12:c7:bd:4b:27:59:a4:b1:30:0f:7e:4e:
3b:e7:49:49:e0:29:8c:79:bd:d2:32:00:d8:5d:df:
32:8b:1c:cc:5e:7b:b9:fe:ce:34:5c:3a:14:ab:70:
8b:24:81:81:d6:d9:69:9f:31:36:09:fe:11:3c:b8:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:B2:FC:54:D5:4D:57:C3:A7:AC:05:32:07:52:B6:EE:9C:6F:D1
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:89:14:5a:98:57:c7:de:57:06:63:27:72:12:1a:42:03:f8:
49:c0:b1:cb:ea:1e:e8:f8:a7:1d:8e:43:7c:39:38:11:3c:6e:
01:05:5c:e7:13:c0:b0:d9:12:98:b7:64:a0:a1:c1:56:96:7b:
72:73:f3:25:b0:77:3d:24:f2:2e:24:98:04:7b:63:31:ab:27:
0b:e3:49:c5:ee:21:c2:13:6b:43:a9:55:72:7f:21:3f:ab:b8:
3f:4f:e1:3f:09:d4:a0:18:46:75:2f:61:69:85:f6:51:0f:7e:
3a:4f:5a:75:b1:97:ea:12:a3:62:b9:59:2e:d4:1d:eb:24:fa:
5c:66:46:31:6b:1b:00:e3:c5:56:32:ac:b3:da:20:8c:5f:b8:
6d:83:8b:5b:55:0e:d1:4c:f6:f4:26:64:37:7a:e8:d7:6d:d0:
c6:f6:ac:5a:74:75:98:da:04:78:56:49:8d:15:48:d4:7f:c3:
65:10:7b:68:41:9a:3e:15:6a:c9:b5:1a:f7:1c:83:43:d5:f9:
a2:06:46:c6:57:88:e5:f0:47:7e:31:de:9a:d5:0e:78:ae:a0:
4e:c0:ad:cc:f8:b5:eb:a9:11:bd:fc:05:90:90:5a:d6:e5:83:
98:18:ef:4b:67:3c:40:f3:02:f3:27:e3:c2:7f:cc:ab:ad:d1:
35:f2:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:50:08 2025 by rpki-client