Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: MxEqPL4vgZHYj8IKQhL6/dCUIIwWVIL2rlbsMCnSbH8=
Subject key identifier: 9E:5E:86:2C:7C:04:4B:FB:6C:E6:A6:6C:B0:CA:19:34:81:42:F6:0D
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 01975A24A5FF54F8904850B00A29300A516D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 0195
Signing time: Tue 10 Jun 2025 14:00:40 +0000
Manifest this update: Tue 10 Jun 2025 14:00:40 +0000
Manifest next update: Wed 11 Jun 2025 14:00:40 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: C8xlv0MIjy8k3RveciJHbneQ6F+5cbGPnst0H3uPsMo=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:a5:ff:54:f8:90:48:50:b0:0a:29:30:0a:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Jun 10 14:00:40 2025 GMT
Not After : Jun 11 14:00:40 2025 GMT
Subject: CN=9e5e862c7c044bfb6ce6a66cb0ca19348142f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:35:49:3c:69:48:c7:51:96:86:39:11:5d:a0:
b3:fe:d6:c8:fd:7a:4e:27:ee:9d:f1:11:91:44:6e:
8f:4f:b3:01:04:4e:69:f1:75:8e:5a:1a:25:77:f2:
13:6e:37:49:88:f8:e6:0f:97:45:bd:20:30:95:99:
71:a9:ab:f1:39:e4:60:9a:db:8e:8a:4e:31:ff:b2:
89:e0:4f:81:3c:1b:33:14:df:8d:70:e4:80:28:1a:
76:f9:6e:35:be:a5:2d:39:6e:0a:0b:71:bf:e2:23:
a2:f5:8f:2d:a4:b0:a2:ca:87:ac:0c:86:2b:27:b4:
46:1d:e0:9f:b0:4a:39:43:62:73:69:36:78:e8:43:
af:15:53:59:3b:63:f1:a9:52:7b:05:0d:73:4b:27:
18:20:a7:51:e9:9a:97:c2:e2:ec:33:c8:1a:3c:8a:
b5:6d:60:2e:ca:f4:35:1f:d1:f0:1c:b1:2d:a5:8a:
dc:e8:52:6e:b1:64:25:7d:35:db:f0:af:90:2c:bd:
6e:c9:88:3c:c9:59:71:e7:11:87:79:04:56:29:fa:
1c:34:c8:b0:d0:34:ee:10:3a:cc:87:50:d4:11:4c:
e0:70:30:dd:ed:84:ac:9b:cb:69:5d:24:29:1a:e2:
0d:bd:d4:d6:4e:6c:05:61:63:bd:a4:c0:0f:51:3a:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:86:2C:7C:04:4B:FB:6C:E6:A6:6C:B0:CA:19:34:81:42:F6:0D
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:ed:e0:c4:cc:31:8c:2c:a9:4e:51:56:9d:00:ef:84:13:
bb:00:6f:4a:4c:73:fc:98:4a:b2:6d:c9:93:07:60:5e:d0:29:
e7:0d:2c:a1:3f:ae:ab:a7:f6:9a:3a:f4:6c:1e:95:a7:64:02:
e2:e3:66:55:24:f2:fe:66:de:c7:b7:c7:aa:a6:09:30:10:99:
c5:a7:da:78:2f:79:bf:82:ce:27:97:23:29:62:ae:eb:d4:6f:
ba:f7:fb:7f:94:b7:8a:b8:77:0a:0e:28:25:75:fc:a4:b9:b0:
38:4e:6b:d7:30:c7:9b:48:5b:ed:8b:26:3f:8c:59:ff:5e:77:
de:33:58:1f:54:bc:87:e5:ed:7e:ab:3f:01:88:a6:54:29:9b:
71:ff:8c:61:e7:5b:81:74:e5:06:32:ff:a0:03:5e:c9:ab:16:
a1:62:25:cd:23:aa:4e:5c:12:3b:a2:b9:dc:ad:c1:bc:e1:a9:
1e:9e:8f:f4:fa:03:fe:1f:04:f4:26:2c:1c:7e:42:5b:94:c1:
95:cf:84:1a:57:8c:a8:97:e4:31:3d:20:6b:d1:d9:60:f1:31:
d0:98:68:4c:68:ba:12:91:ea:92:49:bb:c2:9b:27:28:3d:7e:
82:ef:96:fb:f9:c7:83:61:4d:62:6d:fa:2a:f4:c2:2a:be:77:
f7:ee:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:15:09 2025 by rpki-client