Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: fv7I1f//2mjPhYn+1aM3QIdryonZyoaN3djziSot2uc=
Subject key identifier: C9:0C:9D:95:BF:2D:2F:35:01:00:57:40:AB:9E:54:AA:DB:E1:EF:00
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 019763959F1BDCAFEA19EE4317E748B55C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 151A
Signing time: Thu 12 Jun 2025 10:00:39 +0000
Manifest this update: Thu 12 Jun 2025 10:00:39 +0000
Manifest next update: Fri 13 Jun 2025 10:00:39 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: 17qXZ81e3Vk79fZ4txd727ES3qT1A28oGYo1ANFEDSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:9f:1b:dc:af:ea:19:ee:43:17:e7:48:b5:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Jun 12 10:00:39 2025 GMT
Not After : Jun 13 10:00:39 2025 GMT
Subject: CN=c90c9d95bf2d2f3501005740ab9e54aadbe1ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:8f:18:bc:cd:bf:64:57:cf:19:78:ce:d9:
22:da:83:b4:75:da:93:c9:1e:2e:2f:27:c2:eb:b4:
2f:0c:dd:be:6c:fe:48:13:23:bb:dd:05:53:bc:00:
a6:1c:bc:5c:bf:2c:6c:12:ad:f0:0d:35:e9:5c:58:
f7:8d:12:96:28:b9:7f:be:d3:3b:01:ee:7d:c3:ca:
5b:dc:5a:f2:ac:c9:8e:86:8b:68:4e:76:f7:b8:28:
f3:88:ee:19:0b:0d:17:9b:cc:57:20:31:dc:0e:52:
04:dd:92:8f:54:99:b5:a1:77:8a:f7:21:42:ca:d9:
5a:31:90:b3:02:8d:e6:ca:eb:b1:d0:fb:b1:af:11:
c6:28:af:ca:96:d0:c9:cd:06:be:d0:b7:35:48:27:
d9:8b:b6:ee:63:a9:66:8c:f6:41:56:5e:95:e1:a7:
e4:b2:2d:b9:51:75:a9:c0:2f:74:88:6d:02:e4:10:
56:8e:90:0e:af:fa:5a:e3:49:6a:95:8e:59:e1:74:
7d:8c:56:97:52:15:7f:9c:4d:6b:02:14:1b:cd:d8:
28:a4:f5:d8:36:37:fe:e4:a1:ae:09:e1:df:ac:3e:
09:fb:ce:9c:33:65:7e:a4:a3:7d:df:16:76:28:ab:
7d:d6:ab:a8:2d:f8:09:4c:3b:58:02:89:3a:c6:03:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:9D:95:BF:2D:2F:35:01:00:57:40:AB:9E:54:AA:DB:E1:EF:00
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:68:48:65:9e:55:90:1f:95:9b:42:79:0c:c1:d7:0a:b8:46:
fa:50:36:70:ce:a4:57:8d:07:19:26:f1:37:3a:0f:53:fc:19:
a6:16:8c:e2:4b:bd:85:bc:fb:3c:ae:a2:0f:7c:11:af:b5:4a:
c6:12:32:fc:b4:a1:c9:70:7e:c6:50:a8:62:70:a2:41:1d:28:
06:6d:25:9f:a2:d0:2a:d7:4e:14:6e:ec:0e:c0:aa:0b:e0:09:
cb:e4:a3:8e:90:66:c7:6b:2d:5e:58:27:22:b2:61:9a:ac:d1:
8b:0c:13:b6:0a:a8:b7:d6:73:a9:7a:48:03:53:b2:82:7c:66:
cf:7b:23:49:73:06:70:3b:e5:07:33:f7:49:a9:6f:a4:4e:9f:
a3:6b:b5:96:5e:44:fe:73:2a:e6:57:94:25:ba:de:3f:78:86:
05:02:12:d6:37:d6:76:69:90:e9:4d:95:96:20:eb:2e:27:2c:
33:5b:bf:1c:19:cf:a2:a5:5b:2d:86:1d:d2:52:b1:25:25:cc:
47:e9:27:57:44:78:6d:08:d8:2b:50:85:db:39:d6:5d:0c:f8:
a0:a5:ba:d3:74:23:bf:da:71:d0:03:24:8d:e9:bf:7d:4b:3d:
c2:0b:5f:c8:84:4e:9a:03:f0:31:51:cc:6c:55:41:a2:76:00:
fd:61:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:21:09 2025 by rpki-client