Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: Mkd5+krih48nYIJ1JI5bT+hJYg5t0LI3mfOeDSky7BE=
Subject key identifier: 42:99:F2:FC:94:2F:A7:DD:6E:11:0E:37:86:E4:D8:F1:9D:A7:DF:F5
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01974CD6F17144C046A9BE00A33A97589C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:00:44 +0000
Manifest this update: Sun 08 Jun 2025 00:00:44 +0000
Manifest next update: Mon 09 Jun 2025 00:00:44 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: YpjsqBLuwGZgyjP4s1FLprVV8sYut8W/23o5uF1+ZP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:f1:71:44:c0:46:a9:be:00:a3:3a:97:58:9c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jun 8 00:00:44 2025 GMT
Not After : Jun 9 00:00:44 2025 GMT
Subject: CN=4299f2fc942fa7dd6e110e3786e4d8f19da7dff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:c5:d3:1c:b6:ea:6e:68:4f:39:da:87:74:
2c:d3:59:4e:b3:6a:99:13:65:7f:76:f5:8b:1d:16:
f1:58:83:06:09:9b:1f:f3:d6:7b:a4:53:3f:00:de:
75:18:2f:02:cf:c9:9b:4d:b8:e3:b7:04:e3:42:32:
a6:06:02:01:b9:e9:60:61:5a:98:55:c7:82:a9:da:
35:ec:12:94:b5:e3:45:74:20:03:25:12:73:b3:3e:
92:41:00:e6:b1:87:6b:79:93:87:66:ec:7d:ec:dd:
61:ac:75:1e:f4:d1:4a:62:b4:f7:6a:fd:78:21:12:
05:03:f9:d0:dc:b7:f7:36:74:04:07:56:83:7b:37:
57:f6:20:f0:11:52:be:3b:69:1d:a5:09:42:7d:0a:
bb:21:2a:cb:69:4c:6e:69:eb:04:21:61:87:14:5b:
a8:5a:74:14:8f:a8:35:88:1b:c2:7f:2e:3c:47:b8:
50:1d:92:f0:42:c1:c4:6d:0c:e7:2b:d1:ff:7c:30:
41:ef:41:e2:3e:15:ec:15:c5:f3:51:40:82:85:34:
0e:59:03:06:79:b3:ce:2f:b6:08:e3:00:35:4a:d4:
71:a0:b4:88:21:fe:7c:6d:ac:fd:12:ec:8b:f8:5e:
70:4e:6d:1e:b0:a4:16:af:77:6f:ad:60:00:20:df:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:F2:FC:94:2F:A7:DD:6E:11:0E:37:86:E4:D8:F1:9D:A7:DF:F5
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:37:4f:5f:2b:f3:40:dc:ba:a6:6a:ae:83:86:b5:a1:e6:
d4:ff:72:a6:55:c5:c1:3d:f8:52:96:02:a2:75:87:11:8a:cc:
e7:43:a9:99:4b:14:aa:50:96:55:b2:37:e3:cb:9f:ff:7e:0b:
81:4b:ed:bc:a6:4c:32:47:47:1e:4b:d9:2d:00:09:d3:8b:eb:
f7:eb:4b:82:97:d3:89:82:3b:8f:3b:57:4a:7f:98:dc:a1:ee:
27:2d:f0:1e:9b:45:6e:98:92:71:bb:21:70:66:1c:10:08:bf:
95:49:ba:8d:76:89:13:b7:a6:f8:71:b8:8c:a5:a6:fc:aa:b1:
f1:8d:66:88:24:a4:d2:fd:e6:f7:79:c0:3b:f2:e8:25:5b:d8:
32:ba:96:e6:18:37:9c:f2:57:b0:1e:85:69:fe:6c:61:42:0b:
fe:6f:2c:63:d2:a2:78:d4:6e:da:ae:ca:ee:9f:e8:b9:aa:5f:
ee:65:cb:1e:44:c0:0a:b3:1d:45:bb:72:1b:c2:db:9f:62:33:
e3:06:44:3f:d1:16:d2:2e:eb:c7:04:f9:5d:30:a4:e3:f0:2b:
3a:10:26:4b:54:e2:15:d0:5a:c8:48:79:03:78:ee:b6:b5:ef:
15:b3:08:71:cf:1a:a8:61:cd:07:d1:c2:0c:12:b5:f1:24:0c:
77:2b:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:22 2025 by rpki-client