Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 49no/Ae+aP8kzJ9jqHhM6f2ya+RxMdMRB48di5iJmns=
Subject key identifier: ED:32:39:88:88:CE:07:F4:76:87:B4:57:F5:7B:AC:DD:70:5F:66:8A
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019748FAA752B4EB86B352C958FDB0D7867A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: AHDX1hZhFuJzMaRN4tE2MWjpMwFnNaxYlypsPoJAQQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a7:52:b4:eb:86:b3:52:c9:58:fd:b0:d7:86:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=ed32398888ce07f47687b457f57bacdd705f668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:a7:c3:aa:6a:ee:14:2a:17:93:94:f2:b2:
69:58:dd:87:9f:c9:ea:a9:3b:ff:09:f8:51:d1:4a:
7f:c5:48:49:0c:5c:72:16:bf:bc:0b:46:80:b0:24:
20:7d:b8:61:53:f3:f7:24:dc:50:5f:60:54:ec:3f:
7a:3c:3b:ae:bb:b1:8c:cd:bd:17:41:9a:dd:b5:a4:
31:58:d1:ea:ff:fb:67:1f:40:71:68:05:6c:71:0f:
f3:ba:71:7b:25:5a:65:1e:1a:ea:26:1e:cb:da:65:
dc:3b:f0:a7:1f:94:2f:12:f9:cb:7f:04:c7:be:39:
f0:39:1b:39:c5:46:1f:1d:c1:31:a0:4e:9e:87:48:
27:27:30:48:c8:37:66:43:9f:99:bc:a1:94:68:82:
e8:30:ac:2d:3c:7e:35:8c:ed:af:ab:65:79:76:c7:
0c:ff:08:de:d6:d1:ee:3b:f9:97:16:49:b9:9a:6d:
f6:0a:30:ef:c3:5e:2c:16:a5:71:5b:7a:19:82:7d:
98:d5:b2:79:a7:73:d2:d2:b8:3d:4d:16:60:37:56:
b2:5c:80:c3:68:cd:2f:9c:da:fb:72:7b:88:f4:bc:
80:cf:72:66:77:f3:ad:2f:9a:49:8e:15:39:b8:6a:
8b:02:92:c6:93:65:bc:8c:93:ef:08:2a:b4:4b:17:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:39:88:88:CE:07:F4:76:87:B4:57:F5:7B:AC:DD:70:5F:66:8A
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:85:e3:a2:35:37:fc:b9:cb:d6:fc:b4:6d:48:9d:40:e1:
b7:b2:b1:19:12:d6:da:ef:fd:39:04:53:cf:7c:1c:19:d1:ad:
b7:ad:fe:0a:ec:10:f7:d2:74:45:01:b1:48:95:00:a1:ea:97:
3f:a9:cf:a1:11:c3:af:5e:59:a0:75:f5:84:4a:23:6b:7f:79:
2b:1b:89:cc:99:61:e7:3d:c4:76:cf:af:5b:47:40:17:f9:f6:
1d:3c:4e:af:57:54:0c:e8:ca:20:b7:d5:a0:a4:f7:49:85:a8:
df:12:f3:7a:a3:6c:52:1e:08:50:a7:e2:07:41:1b:ec:33:7c:
38:25:b2:d1:ea:b8:09:db:cd:b4:ab:c6:f3:c7:50:78:5c:a3:
36:f9:4d:8d:9b:1a:33:32:63:6a:45:92:c3:7b:74:c0:e5:ae:
3d:3a:ad:82:8e:d0:6d:13:7d:49:00:f1:cc:c5:e0:8a:58:d3:
9d:8c:3f:9a:35:a0:f1:50:4b:a7:7e:16:a0:1a:67:62:18:4a:
3f:48:8f:d2:86:9f:97:76:1b:2f:d9:30:8b:43:27:3e:f7:53:
95:a1:b6:bf:d1:9b:5a:f7:1a:f3:b1:e4:2e:7b:8c:ec:e8:21:
69:26:59:de:f9:cd:1d:5b:d4:49:92:45:4d:f3:1e:98:a2:3e:
b5:4d:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:35 2025 by rpki-client