Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: Lu9fFTVqzE8KwfnJrHmdygnSI2GezXOuKRlY81X75W0=
Subject key identifier: AF:6A:04:C3:74:96:3A:1E:55:E8:D0:49:B8:18:6A:B0:B4:76:99:2E
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 01976139449C97C75CD526EF375D952890FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 05DA
Signing time: Wed 11 Jun 2025 23:00:32 +0000
Manifest this update: Wed 11 Jun 2025 23:00:32 +0000
Manifest next update: Thu 12 Jun 2025 23:00:32 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: fG9UByVLDGG9eahIxvBDgOi9cs8O7x1dGuqXfIr4cjM=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:44:9c:97:c7:5c:d5:26:ef:37:5d:95:28:90:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jun 11 23:00:32 2025 GMT
Not After : Jun 12 23:00:32 2025 GMT
Subject: CN=af6a04c374963a1e55e8d049b8186ab0b476992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:a9:a7:30:c9:6a:f8:6c:5f:35:13:cb:a6:
a2:24:9c:f3:85:b3:72:87:51:f9:73:c5:e6:0e:b6:
33:30:cc:48:75:5f:b4:f3:62:29:53:b3:b9:44:74:
45:7f:d5:7e:7b:0c:f0:2d:e0:41:12:fd:d2:d1:6c:
79:22:9f:84:2e:56:6f:12:f3:04:e1:21:4c:67:40:
0a:1d:01:26:d1:cd:23:07:ad:89:85:39:67:d9:17:
97:f1:90:ce:95:4c:04:6b:14:dd:1a:e6:70:47:2d:
3a:35:42:0f:e5:e6:df:ca:70:aa:60:4f:4d:d8:16:
b9:0d:7c:06:db:8b:06:01:62:9c:0a:73:e4:1c:31:
2f:07:fd:e5:4a:b1:bc:a4:36:0f:66:4f:4a:16:7e:
10:78:9e:9f:15:73:3e:31:61:70:0c:57:da:0f:70:
b5:ab:31:09:91:6b:ef:ae:30:83:8a:cd:07:3b:db:
64:d6:47:58:a6:5e:d9:93:44:00:4f:0b:89:be:65:
64:14:5c:f2:d5:a6:d3:14:6f:04:f6:8a:fd:8d:b8:
88:b8:cb:e0:6e:e9:2e:92:54:ae:fb:ec:e1:8d:ba:
e6:90:58:d4:46:86:dc:36:85:c3:16:4c:2f:7c:aa:
53:0a:e2:6c:5b:39:4d:ef:13:a0:4e:ef:58:80:3f:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:04:C3:74:96:3A:1E:55:E8:D0:49:B8:18:6A:B0:B4:76:99:2E
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:c0:da:55:1b:f8:a9:53:f6:e2:e0:b9:1d:7d:12:f1:b9:
fb:98:66:c4:20:30:51:51:f8:e0:f9:6b:07:1c:d7:9d:ef:14:
86:de:30:13:ba:f3:d9:a4:d7:d0:1b:81:be:fc:db:d6:4c:51:
9c:01:76:c9:f7:5b:1c:81:f9:26:92:38:c0:f1:25:0a:47:25:
30:1b:b8:eb:95:3a:c1:c5:01:20:d7:e8:3d:fb:44:8e:d1:5b:
91:25:09:6e:54:d9:ea:43:13:2d:b5:f9:3a:7d:06:92:01:da:
63:19:56:73:91:d5:7d:f1:23:e9:c9:5e:a8:74:59:6f:36:5c:
a2:9d:67:58:55:ac:d2:f9:94:21:25:0a:d2:2e:6e:36:f1:82:
0b:78:e4:6c:d5:28:c1:28:0f:e9:73:53:87:ac:35:c4:ff:b7:
a7:b2:bf:13:5b:39:0b:be:80:8f:e5:79:9b:17:49:19:b2:e7:
07:33:c6:19:7b:2c:1e:55:df:15:6d:75:ce:43:54:1f:d8:bf:
82:c9:85:d7:f6:4c:4d:d9:77:84:8f:6b:1b:2e:13:7c:e3:08:
2e:c1:45:13:5f:c8:df:fb:d8:04:ab:16:5e:34:8b:a1:57:86:
ff:4f:9b:15:68:4a:27:be:d4:7b:ac:04:33:1e:24:14:d0:1f:
b6:2d:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:27:41 2025 by rpki-client