Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: IX4rW5VTN+wk8jxg72wGVaC9/eMu2P3/F22zDtNgdbk=
Subject key identifier: 05:95:24:ED:AF:B5:65:D5:3A:1C:AC:EC:1A:0B:F8:2D:D6:52:44:75
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 019747E790020EAAA65E6E8EC4BE6BC0D6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 1370
Signing time: Sat 07 Jun 2025 01:00:47 +0000
Manifest this update: Sat 07 Jun 2025 01:00:47 +0000
Manifest next update: Sun 08 Jun 2025 01:00:47 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: a2rS/FLTDKIBbUrc+vbYUHRSkjsu4eKhQGSN7WzTKY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:90:02:0e:aa:a6:5e:6e:8e:c4:be:6b:c0:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Jun 7 01:00:47 2025 GMT
Not After : Jun 8 01:00:47 2025 GMT
Subject: CN=059524edafb565d53a1cacec1a0bf82dd6524475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:0e:5b:fa:17:af:a5:12:f5:c1:44:e7:dd:
9d:66:1b:7d:b5:c4:77:a6:e9:7b:ca:f3:7d:69:be:
51:76:2a:e3:93:7d:a0:58:14:03:15:98:60:ad:93:
cf:37:68:16:5b:52:81:d3:5b:e2:ad:4a:41:fc:4e:
1a:2d:30:1b:6b:d8:3f:b2:5f:26:7b:c3:3c:7d:e6:
c4:d4:01:ce:8a:33:e9:6c:be:1b:67:30:c8:67:c5:
ca:e2:0d:c8:4c:12:56:c1:7b:c4:9b:af:46:a6:d1:
1f:3d:44:d0:de:4a:47:7a:4c:03:13:38:ee:76:c3:
61:b6:12:fd:cb:a4:7a:e0:d1:a4:7f:37:c0:d5:84:
5a:b9:ec:40:d1:7a:4f:f2:aa:29:ee:59:2b:6a:24:
8d:95:ed:75:f2:c1:cf:20:6d:08:d5:48:83:58:ce:
19:03:ec:a8:53:51:41:25:0a:9e:8e:a6:ea:c9:71:
61:19:1f:d9:1d:81:ca:07:5c:7d:6a:b2:e2:d3:d8:
7a:b9:54:5c:ca:07:6e:3b:a8:98:51:d1:80:31:ab:
68:64:0b:ac:0e:c8:ce:a9:85:81:ca:1e:46:20:05:
d3:fa:aa:3c:fc:54:e1:70:85:fc:45:f3:42:fb:ba:
16:fe:27:02:cc:0d:8c:d5:81:af:9d:0a:d9:d1:8a:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:24:ED:AF:B5:65:D5:3A:1C:AC:EC:1A:0B:F8:2D:D6:52:44:75
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c1:b2:a3:88:06:ac:00:14:86:7f:4a:e7:69:5f:dc:c5:80:
5f:22:23:7a:0b:f0:01:2d:6d:c5:b0:f8:85:59:c1:72:de:85:
c0:d9:1f:49:e9:5a:bb:24:b0:5b:bc:e3:16:40:bd:e3:72:c0:
73:49:95:67:54:24:86:6e:a0:96:ed:03:d6:ce:0c:34:b5:0d:
24:df:fa:a0:d2:7c:3d:78:46:c2:1a:dc:01:71:a7:b1:49:c1:
e1:26:12:c4:12:38:55:f3:43:ee:9e:d2:31:05:89:15:80:6b:
51:88:8d:05:76:64:49:fd:e2:1d:07:e5:89:60:bc:9d:6c:64:
5a:de:24:32:13:19:a5:29:90:5d:a1:f0:21:d3:66:f9:69:93:
54:d7:3e:79:14:1b:2e:ca:57:10:31:cd:ec:a6:1c:6e:cf:6a:
74:4d:cd:e6:b2:b0:ef:70:30:d6:f2:17:4b:da:d3:8d:a0:1f:
51:3c:60:bf:a9:87:00:1c:85:a5:d7:f2:08:4a:54:75:be:44:
13:ce:3a:88:d1:c7:09:21:a0:5c:0b:e2:d2:68:73:13:a2:0a:
d1:ea:b7:6d:64:59:1b:ad:aa:62:6a:86:6d:fc:6a:7b:a0:3e:
0c:60:45:f0:f8:b6:59:41:53:66:de:59:4b:01:e2:43:ae:84:
9a:28:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:35 2025 by rpki-client