Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: G+QgkQcJSqCV5zAk+okklnZ1IW9ZQ8+Dvcya9SLoRbc=
Subject key identifier: A9:2C:2D:16:3E:CD:B1:22:91:09:FC:39:51:5E:41:21:3C:34:F9:A1
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 01974666CAD018633EDE5BFE3D470EAD9CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 18:00:30 +0000
Manifest this update: Fri 06 Jun 2025 18:00:30 +0000
Manifest next update: Sat 07 Jun 2025 18:00:30 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: TQ8XKADdUdQBq9EnOKD+haqyBdmfsCX/ERiObymYr24=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ca:d0:18:63:3e:de:5b:fe:3d:47:0e:ad:9c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Jun 6 18:00:30 2025 GMT
Not After : Jun 7 18:00:30 2025 GMT
Subject: CN=a92c2d163ecdb1229109fc39515e41213c34f9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:5e:59:77:23:45:36:10:2b:b7:ad:8c:de:
da:c4:bc:5f:2a:48:c0:74:4e:e9:65:39:81:91:a3:
19:7c:bf:03:a7:9c:6d:66:8c:aa:b1:62:dd:7a:86:
2c:5f:a3:a8:67:98:50:85:dc:12:f4:ec:d4:29:79:
6f:30:7f:0f:43:57:b7:db:47:fd:a2:11:d6:b9:2e:
bf:c1:dc:14:4f:9f:1d:91:0c:6f:b7:29:62:e9:5a:
ae:b9:1a:b3:5e:46:07:02:89:29:50:62:2f:6f:ca:
66:67:68:d2:0b:74:ca:8d:bd:49:53:22:49:96:44:
82:3e:59:8e:70:0f:35:e3:ea:19:cd:29:28:99:09:
95:f9:08:45:33:a9:3f:09:70:69:eb:53:ac:94:d1:
61:69:a6:4b:6d:16:64:61:13:ce:a6:1b:37:c9:0b:
ad:75:0c:a4:85:eb:ce:af:d3:81:18:78:77:3d:35:
44:73:ad:58:81:de:c4:35:34:83:72:4e:b5:9d:f6:
2e:c4:49:0d:38:33:2d:8c:a7:53:bf:1d:25:49:37:
9e:e5:1c:dd:7f:f2:fb:77:eb:e0:d0:d6:08:fd:f0:
0e:fe:d9:3b:cd:3e:89:c6:28:c8:5e:c9:9b:6d:45:
fb:df:ac:78:e2:5c:05:6e:b7:0d:8a:91:f3:1b:18:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:2D:16:3E:CD:B1:22:91:09:FC:39:51:5E:41:21:3C:34:F9:A1
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:49:a7:6f:7a:6e:cf:84:5c:50:04:6f:0e:8e:fb:ec:69:6d:
3c:21:93:ec:fe:fc:25:54:9e:ab:b1:9c:d1:5f:a8:37:2e:33:
91:d1:fb:ff:9d:56:c0:e4:e7:06:ff:56:51:93:45:2e:11:8a:
74:9a:29:74:7f:de:74:59:13:57:83:84:c0:67:ca:23:52:36:
46:0b:fe:fa:fd:64:97:46:a4:24:4e:3a:4d:2e:15:b4:7e:f8:
9a:ae:55:00:2b:9a:ea:8f:74:cd:fb:74:32:ce:29:56:d6:a1:
30:12:b1:cb:fe:2a:6e:3e:3f:9d:4b:bb:2f:52:c3:27:35:07:
60:6f:0a:d0:97:47:b6:60:2f:91:c9:bd:be:b1:dd:b9:2b:5a:
99:e3:b7:b2:2a:69:cd:d0:e6:e8:9f:88:40:c7:ff:ef:2f:92:
98:bb:17:22:c2:ce:2d:c1:6d:c6:44:39:50:a2:b4:37:08:5e:
aa:98:02:b2:ea:fb:0d:76:f5:2f:64:0d:e2:07:d4:49:5b:f8:
4a:ce:9b:1c:6d:d0:99:87:7a:fe:aa:b5:e4:d8:b8:c3:e3:ee:
df:52:53:e3:72:60:a9:92:d3:bc:df:75:97:17:c2:ed:ff:b6:
b0:42:92:e7:30:f2:6b:7c:80:db:1b:05:7c:4f:98:59:5b:85:
6c:31:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:15 2025 by rpki-client