Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: xSoTkVQr1TwHeHdlI8KD0pSlA6oVN7x5Ju2bNJHHG04=
Subject key identifier: EB:99:6F:10:9B:BA:31:67:27:B0:E8:3D:A7:A9:B7:0A:63:FC:FB:2D
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01976697156FC9D8D75578D0986142C64677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 05AA
Signing time: Fri 13 Jun 2025 00:01:06 +0000
Manifest this update: Fri 13 Jun 2025 00:01:06 +0000
Manifest next update: Sat 14 Jun 2025 00:01:06 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: U9Qp9laP+RsokHtLail8QjJTMf8hYNXAyaN72WzZDp8=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:15:6f:c9:d8:d7:55:78:d0:98:61:42:c6:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jun 13 00:01:06 2025 GMT
Not After : Jun 14 00:01:06 2025 GMT
Subject: CN=eb996f109bba316727b0e83da7a9b70a63fcfb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:fe:b8:81:cf:fb:20:f6:3f:63:ec:03:37:
9f:71:ee:c6:b7:58:4a:6e:eb:4b:55:09:42:3e:b9:
b7:14:d1:01:fc:de:b0:c3:8e:12:70:67:00:9f:20:
06:c6:1c:e6:53:00:77:22:80:1b:ee:1f:8a:e7:9d:
31:59:b3:6a:b1:b7:3b:95:e1:7b:1a:49:77:4b:dc:
f8:e7:7e:5f:2d:c7:20:46:7b:cb:9c:f8:7a:8f:36:
e4:26:e7:60:bd:51:8a:b6:ed:8d:57:0a:60:3a:46:
6a:81:65:13:f2:bc:a4:ba:28:40:94:5f:7b:98:33:
0a:a1:e2:cd:41:82:94:6c:a9:b4:c4:a5:ea:3d:62:
17:c4:26:e4:b1:96:87:fd:bc:ce:42:ac:27:20:de:
bd:e5:da:52:d6:a9:db:57:ec:a9:22:98:37:55:f8:
e4:38:87:61:94:11:a1:c6:47:c8:d8:54:ba:2b:e8:
34:39:e1:cd:bb:24:1c:25:3d:d7:d3:8a:fd:8f:24:
5c:98:d2:1b:3b:97:ce:4e:91:2a:f3:35:8b:a0:f0:
31:3f:ec:ca:8c:be:cd:b9:35:ee:a1:ba:3a:5b:01:
4f:05:9e:df:18:9b:e3:64:f8:e7:d4:9e:b4:a1:58:
1f:d4:e3:0d:31:32:ba:8e:f7:72:fc:3b:17:46:15:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:6F:10:9B:BA:31:67:27:B0:E8:3D:A7:A9:B7:0A:63:FC:FB:2D
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:d5:a0:6a:6c:27:66:2b:d5:d6:63:44:60:db:13:52:d7:
5e:55:4a:51:dd:b2:f2:52:cb:88:a8:c7:51:48:54:71:17:73:
ea:72:1e:61:c7:91:ef:6d:8f:ed:f6:5e:96:0a:2a:22:65:2a:
11:e6:ed:34:0c:92:7e:15:e1:c1:70:d9:7d:53:33:56:b1:c4:
1e:dd:fb:b6:f9:ac:36:5b:04:68:c4:36:e9:67:7d:0c:9f:92:
1e:d5:78:7b:6f:e7:92:77:80:4d:eb:20:2a:0e:8f:d1:08:a4:
13:1e:04:15:01:77:a6:f7:06:3d:05:7e:1d:08:0c:07:bd:21:
80:1f:aa:1b:d9:ed:79:9c:4b:83:25:7a:bf:88:e7:66:cc:fe:
81:6b:cc:96:62:87:58:aa:e4:12:00:f6:e5:1a:07:34:1f:14:
da:de:cd:97:f8:fc:cf:fc:85:ab:74:1d:50:e2:46:ee:4a:65:
87:c5:fa:a3:8c:e0:0f:f2:7d:20:5f:ce:f5:94:39:56:9b:fa:
41:4b:52:39:01:ad:80:25:0c:10:fd:c4:73:3e:ab:5c:e8:55:
a2:47:e2:54:6d:0f:b4:75:fc:b7:86:c8:a4:9c:45:02:14:3e:
15:b0:9e:7d:44:23:59:8f:93:b1:c6:50:a5:e7:f8:90:82:1a:
2d:83:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:10:16 2025 by rpki-client