Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: N5XMuLu5tiOJ21c0wA3gMb+Y7bBov2gCpVSF9qfIf+c=
Subject key identifier: CB:55:75:30:62:4B:CF:3F:BB:91:37:E9:89:43:02:96:8A:8E:0F:C5
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01974D44F856A838FB1437663FEB10FDFC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 08B1
Signing time: Sun 08 Jun 2025 02:00:54 +0000
Manifest this update: Sun 08 Jun 2025 02:00:54 +0000
Manifest next update: Mon 09 Jun 2025 02:00:54 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: U7mJ+lWPwQZngR+cqaCIjx8yIpNp4ti1CavKkeejzYg=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f8:56:a8:38:fb:14:37:66:3f:eb:10:fd:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jun 8 02:00:54 2025 GMT
Not After : Jun 9 02:00:54 2025 GMT
Subject: CN=cb557530624bcf3fbb9137e9894302968a8e0fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:b4:a4:db:da:86:20:6b:76:dc:e8:b5:60:
80:44:54:eb:cb:b2:8d:a5:86:06:66:0f:b2:41:1e:
2a:ed:de:fb:b3:83:26:c8:54:83:89:13:c4:db:18:
a0:c7:0b:44:7f:f6:36:45:11:10:1f:bb:ac:cd:7e:
9f:4d:82:2b:21:52:46:6d:52:4f:43:70:53:11:3a:
5e:cc:77:23:08:f4:35:0b:3e:5c:c7:13:67:48:d9:
26:f9:11:bd:a5:55:e4:cc:37:fc:15:8b:57:84:3d:
57:71:45:8e:f1:b1:84:18:f5:aa:4d:86:5c:b3:92:
c0:b2:25:82:a5:89:0a:d5:99:3a:30:40:5f:8a:ad:
6c:74:94:e3:f2:b5:5b:6d:f5:be:0d:08:51:4e:74:
fd:be:d7:d6:79:f4:8d:96:c5:90:9c:80:86:73:c3:
4f:33:2f:a0:f5:f2:66:3e:6a:bd:84:ae:2a:38:96:
b8:0d:15:e7:87:76:a4:0e:53:8d:1a:14:38:1e:b0:
33:ad:72:4e:20:aa:45:04:27:75:02:ba:f8:0a:f1:
fe:61:c4:ab:ad:b0:14:09:8b:9d:d6:ff:4d:7e:b5:
dd:86:c6:c2:08:54:b0:ed:2c:94:55:cb:45:f7:07:
b3:fa:0c:5c:67:05:af:9b:a0:0b:2b:1c:3e:83:9c:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:55:75:30:62:4B:CF:3F:BB:91:37:E9:89:43:02:96:8A:8E:0F:C5
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:b1:e3:07:44:89:20:71:21:71:93:01:c8:7c:7c:17:62:
ba:71:f6:3b:88:1b:2c:3e:44:e6:20:44:3c:e9:ff:d2:16:a5:
64:3b:1d:fc:a2:6f:02:30:7c:c1:ca:35:fa:20:8d:b8:f4:72:
35:5e:a6:30:ea:80:7c:55:18:24:68:46:77:1c:52:fe:8c:3b:
cc:f5:ee:cc:36:2f:25:bb:be:d8:26:c2:83:48:9e:51:fd:bc:
b8:dd:af:f8:41:e6:d4:79:85:23:98:ce:42:98:ee:ab:ce:f1:
db:d9:7a:0e:eb:d7:24:ee:30:8f:2d:32:a4:60:06:fa:a7:30:
3f:a4:5e:fd:36:87:c5:3f:7b:14:e2:d4:3c:05:73:f4:78:bd:
56:d1:f3:c0:15:24:97:28:87:e3:0c:52:10:88:7b:be:54:6b:
2f:b5:99:70:4c:a4:6d:38:3b:d3:db:e6:09:de:dd:08:4e:93:
de:61:5e:7d:fd:bd:2b:6d:b4:1f:61:80:80:66:ba:1c:0a:32:
c3:55:0c:17:57:0b:02:ef:2f:d1:b2:9a:ef:9b:59:61:28:7e:
11:4a:94:d5:15:1e:5e:be:0d:dd:d4:18:00:64:50:c5:33:ff:
d7:b0:55:bb:72:32:23:11:cf:58:3d:b4:05:b3:00:10:5c:59:
c3:ff:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:49:49 2025 by rpki-client