Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: IiaFnDxbNgG2p9RB1vLpqFbLPZe6wggMmo0g6uZQl3E=
Subject key identifier: 0A:71:2B:A5:24:A8:16:A8:C1:10:5B:C3:0D:B8:E1:2B:52:D6:78:DA
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01975535AEDC2EC01813442834D17A362C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 05A1
Signing time: Mon 09 Jun 2025 15:01:10 +0000
Manifest this update: Mon 09 Jun 2025 15:01:10 +0000
Manifest next update: Tue 10 Jun 2025 15:01:10 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: 6lulRBG0Klh/AhAMrzNdQi/wNwqdwDzt0lgm+bHzITE=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:ae:dc:2e:c0:18:13:44:28:34:d1:7a:36:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jun 9 15:01:10 2025 GMT
Not After : Jun 10 15:01:10 2025 GMT
Subject: CN=0a712ba524a816a8c1105bc30db8e12b52d678da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:95:55:c9:c5:31:38:73:d4:de:28:9c:f6:
f4:67:03:22:09:3c:67:9c:cb:ea:4b:90:09:47:b7:
e6:5f:f1:d5:87:53:30:01:9f:2c:69:46:f9:a4:5a:
ad:c6:6e:d9:a1:59:f4:4d:c0:37:74:41:33:85:0e:
ce:4a:7a:1a:2f:49:5c:7e:3b:d3:44:67:f6:9b:3e:
4e:a0:81:c3:16:2c:df:33:c2:bc:b4:e9:19:63:70:
bf:b3:af:d1:11:1f:f2:6b:f8:5d:ef:f3:a9:22:94:
f2:26:04:92:77:84:11:8c:e5:d4:b3:ef:07:4f:1c:
83:42:05:44:d8:36:41:74:76:4e:0a:f1:7b:f4:72:
ea:30:c6:97:ba:4a:02:31:b9:d9:b5:16:f7:c0:37:
04:1b:3b:12:ae:ae:96:6e:cb:db:0f:e9:95:b5:29:
d4:73:24:12:5a:85:c3:25:5b:d8:c8:3a:ee:60:8d:
ef:ec:08:68:98:9d:68:89:12:82:ab:bd:47:d3:7e:
50:15:6d:f4:96:cf:a2:9a:62:f4:bb:23:6b:44:9e:
05:95:af:53:8a:af:f7:23:2e:01:7d:14:58:ce:b1:
4c:49:c3:cc:33:39:6a:83:54:a6:0f:fa:91:78:44:
fc:35:4a:dc:58:9a:ac:d0:72:e5:6d:04:79:a9:b6:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:2B:A5:24:A8:16:A8:C1:10:5B:C3:0D:B8:E1:2B:52:D6:78:DA
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:7d:4b:2a:2b:79:6b:3a:41:e6:1b:40:73:cf:2b:e0:b1:
6a:8e:a3:a3:2b:99:94:aa:13:db:e3:18:e9:02:16:9d:b4:bf:
42:38:d7:db:36:05:7e:4b:79:a9:a8:fa:34:54:a6:9a:b6:7e:
a6:d4:7e:54:3e:e8:6c:bf:0c:7e:b6:45:da:3e:ae:2a:2c:a7:
28:4e:ae:87:06:cf:52:13:46:ed:cd:5f:8f:94:1b:66:99:fa:
2a:77:3a:53:3c:6b:f4:f0:ee:d5:c7:61:b3:ea:1c:0b:bb:93:
d6:65:6e:47:9c:03:90:d6:c2:bc:b1:fb:87:47:fd:e5:e6:aa:
8c:9f:ea:0b:6b:1f:48:ee:80:ef:39:30:00:74:31:a6:15:4c:
38:58:f4:2b:bd:02:93:97:23:0b:de:13:c9:33:7a:29:69:30:
44:4f:85:16:2d:99:5d:c8:c1:91:24:5d:57:9c:1e:5d:1c:a6:
93:19:e3:54:20:05:e8:b5:60:c2:77:8a:42:c1:81:93:c8:60:
17:a9:84:19:50:28:ab:80:99:78:c3:1e:23:09:0d:6d:73:6e:
aa:2c:d3:47:dc:cb:35:6e:24:fc:8d:3e:96:57:16:83:b9:b5:
5e:96:d4:38:f1:58:18:04:a7:a1:07:ed:08:b0:79:de:2a:1d:
9e:52:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:42:53 2025 by rpki-client