Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: LmEzUCkJnv4J69miFyKqDMU2PEzF5ebQdXq+ZF5sTEg=
Subject key identifier: 18:68:44:AB:78:65:E4:35:C7:F9:D8:7E:6A:FC:07:54:C0:1D:CB:2B
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01974AE8427E9538AE4F7195E8EA87E01A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 14CB
Signing time: Sat 07 Jun 2025 15:00:24 +0000
Manifest this update: Sat 07 Jun 2025 15:00:24 +0000
Manifest next update: Sun 08 Jun 2025 15:00:24 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: +1kmc95nc0zbap17GEooUxRC4pPVjcAEVuM7aFHPk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:42:7e:95:38:ae:4f:71:95:e8:ea:87:e0:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jun 7 15:00:24 2025 GMT
Not After : Jun 8 15:00:24 2025 GMT
Subject: CN=186844ab7865e435c7f9d87e6afc0754c01dcb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7a:a5:09:a8:73:22:34:0f:73:0a:9d:1e:47:
84:da:4d:61:1b:e7:39:9c:05:aa:4e:9b:b2:2a:1f:
b4:ba:ee:a3:4b:52:9c:b3:92:7f:ea:8f:f4:db:c6:
f2:01:df:dc:68:36:e8:d0:92:1b:f1:ed:cc:ce:6f:
bd:af:43:83:73:2b:ed:7e:de:68:05:67:ef:64:0a:
0f:54:25:36:dd:ee:fc:22:b2:f0:cc:5f:14:0e:3e:
d3:16:96:41:40:21:3a:2b:c5:90:79:42:2a:11:6a:
b1:47:e4:21:64:42:05:73:7c:ef:8a:68:59:fb:76:
c4:67:85:fe:5a:7a:6d:fd:d7:ba:a8:c4:05:a3:99:
dc:01:88:2e:ce:6c:f8:36:0c:53:ae:91:e7:d1:fb:
59:31:d7:91:57:64:fe:3d:75:59:e8:da:67:48:94:
dc:d0:53:e8:79:bb:20:c6:56:85:a7:da:83:f6:81:
18:70:28:a5:43:97:b8:99:5f:44:9b:52:8b:9f:c5:
72:f1:bc:39:f5:86:33:c2:f3:f4:a0:33:7b:99:da:
2d:8c:a1:55:c1:81:2b:4a:81:c2:b5:73:b7:4a:ff:
ea:91:bd:bd:03:d9:59:12:6a:10:37:01:45:2f:90:
22:11:0a:dc:9b:2f:15:db:25:b7:68:fc:01:5e:39:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:44:AB:78:65:E4:35:C7:F9:D8:7E:6A:FC:07:54:C0:1D:CB:2B
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:ae:42:4f:76:16:b2:b3:35:9f:ce:ae:43:9f:29:8d:90:
a6:25:9d:10:0e:84:48:8d:8b:56:13:fb:f7:7d:ff:7b:8e:21:
08:8f:71:81:15:ad:2b:e0:46:8e:fd:5c:a2:f6:e4:87:5e:19:
6a:7e:bb:23:34:0a:e0:21:e1:05:cb:81:b2:ef:c2:56:2d:1a:
17:ba:a2:22:16:14:fb:28:c0:81:35:df:41:df:1e:40:56:ea:
76:56:f3:dc:e2:31:cf:0b:07:9d:0c:da:45:a8:96:58:cf:72:
97:f1:ea:fd:30:34:29:f0:35:b3:9f:6b:0b:c6:6d:41:f1:57:
3a:0d:ec:13:4f:92:2b:bf:a2:bf:df:f1:a7:08:b5:1f:98:b3:
1a:11:50:ad:93:5c:e1:2f:3a:f7:49:6a:1a:84:d0:a2:92:c4:
fd:a7:7b:11:8e:cf:38:ff:06:be:1b:70:c6:4b:34:79:f4:54:
e8:a9:89:05:8f:0f:e4:37:a9:ba:5c:e8:c9:f8:55:06:f9:7b:
f1:0a:dc:23:2f:f2:07:46:c0:b0:e5:7e:7d:68:ad:d4:eb:ef:
e3:e1:b7:ea:71:ad:e4:bb:b6:22:b4:c8:0e:d6:6d:9f:75:ed:
13:34:55:46:f9:4c:c8:92:5e:73:19:f5:0f:ec:70:d0:b2:65:
1b:6a:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:13 2025 by rpki-client