Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: kMq4dmzE8FMKcnwVVoQEsuIZq7MiGSY2E4+v7/jHXog=
Subject key identifier: D9:01:0F:A5:EF:A5:F3:2C:2B:F2:58:30:C5:89:87:46:41:0F:57:EA
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019755A2D0A298A94F1B32BB914C495224D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 05D4
Signing time: Mon 09 Jun 2025 17:00:22 +0000
Manifest this update: Mon 09 Jun 2025 17:00:22 +0000
Manifest next update: Tue 10 Jun 2025 17:00:22 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: OOoXgKPWCdVc4pXHxgum0rN7H8sg8lkM59ZUF3F4C1w=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:d0:a2:98:a9:4f:1b:32:bb:91:4c:49:52:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jun 9 17:00:22 2025 GMT
Not After : Jun 10 17:00:22 2025 GMT
Subject: CN=d9010fa5efa5f32c2bf25830c5898746410f57ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:ab:1d:be:6b:ed:57:5e:78:7d:03:47:b8:
b2:dc:b8:fd:bc:fd:c7:d5:03:53:58:6e:17:4e:a1:
61:aa:2e:15:c2:75:54:93:b0:f1:37:69:91:a7:c8:
aa:81:64:4d:e2:18:05:a6:59:87:51:65:da:6e:14:
21:98:64:79:cf:ea:5d:a4:11:a8:f6:19:4a:24:1a:
49:d2:ce:22:71:3b:77:3d:18:90:29:ca:a9:2d:b9:
8b:81:97:db:b3:8f:42:5d:19:6b:dd:0b:5d:3b:5a:
28:69:f8:92:51:16:42:a6:13:ec:41:22:91:70:a5:
95:85:a4:c0:91:67:08:b3:06:40:a6:d6:9d:a2:62:
6d:25:fc:4d:dc:7f:09:43:94:74:eb:dc:9b:c7:f0:
34:ee:7c:68:f5:2e:46:b0:79:34:0a:fc:09:9b:9c:
78:2d:2a:4a:97:9a:ab:2a:20:d2:c2:56:7d:82:fb:
cd:7e:52:a3:cb:e8:1e:89:ff:47:90:1c:5c:9f:06:
cf:10:6e:6e:d1:d3:ff:ff:68:8e:3d:b0:8c:45:7b:
88:9a:6e:ac:cd:98:9e:62:2e:5f:8c:2b:7d:34:a8:
55:3a:20:e7:3c:5b:db:1f:23:6c:78:bf:c1:39:8d:
57:e2:27:7d:1c:e2:d8:f3:00:b0:62:57:05:e5:22:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:0F:A5:EF:A5:F3:2C:2B:F2:58:30:C5:89:87:46:41:0F:57:EA
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3d:31:b7:c5:6f:a6:16:1a:57:bb:83:74:5b:bb:84:ee:27:
5f:47:10:83:ab:39:19:11:ec:b7:08:1a:76:fb:23:d2:f2:a7:
4d:47:56:c2:46:a6:f6:b5:d4:a4:04:63:79:0e:ce:b1:ef:46:
5f:e0:ce:30:80:09:68:8d:72:8c:da:e6:07:a1:5a:d5:8d:a3:
3e:8f:07:c1:59:45:12:13:51:99:41:09:f1:fa:9f:70:04:94:
9b:23:46:5d:e5:36:6e:d1:ed:59:69:b3:6a:43:98:9f:dc:5d:
6f:81:67:ca:fa:5e:fe:52:6e:1d:42:19:41:0f:0a:0d:83:5e:
9b:27:37:41:e5:7b:85:d0:91:ef:b2:55:5e:67:5c:4f:f6:1e:
40:3c:41:22:e5:38:c0:70:3f:ed:4e:a6:61:c8:dc:8f:d1:83:
96:25:c9:29:22:40:d0:98:c1:1b:ee:cf:9c:29:f5:32:32:1e:
c8:55:5a:cf:05:82:04:f8:47:1a:c4:f8:3a:16:16:06:11:e0:
a5:95:d4:e5:64:d6:66:e7:ec:67:ca:b6:2a:a6:26:1b:fd:a9:
56:27:77:16:aa:d8:d9:13:40:1c:b3:ea:9f:80:5b:3b:1c:f5:
38:22:d9:15:1e:86:28:0b:68:c2:1b:06:4d:f9:6d:a7:eb:90:
3b:3e:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:35:50 2025 by rpki-client