Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: m0IKlDpN4NSc2mG7/uhEHbGinCvr53ENF57COr7yhxI=
Subject key identifier: 85:A5:64:A4:8A:59:07:30:66:68:D9:68:C7:D5:EC:8C:A8:92:A3:7A
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 01974C3223893ECF61D7D814CA1D154295B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:43 +0000
Manifest this update: Sat 07 Jun 2025 21:00:43 +0000
Manifest next update: Sun 08 Jun 2025 21:00:43 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: yBTNf/bFNVt9nI2lawz6D+hZPE39+yZXvmD4p56yFU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:23:89:3e:cf:61:d7:d8:14:ca:1d:15:42:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Jun 7 21:00:43 2025 GMT
Not After : Jun 8 21:00:43 2025 GMT
Subject: CN=85a564a48a5907306668d968c7d5ec8ca892a37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:65:79:24:2c:57:5d:34:c0:3e:bc:0d:b1:
c9:e5:10:8a:5c:3c:d9:ed:cd:67:b5:f3:12:f1:92:
bc:0a:79:53:df:c2:42:89:8c:e2:be:24:c9:8d:d6:
81:d0:04:8a:95:2a:9c:85:98:3e:a5:c2:0f:bf:37:
a0:cd:83:56:f9:b2:66:b8:c9:8e:e7:f3:91:02:cb:
08:c2:d9:33:ba:2b:09:6f:c4:93:35:84:65:76:57:
f7:a0:76:2b:db:61:4e:66:c9:42:9c:dd:db:22:16:
f0:0e:84:ce:1d:18:94:75:a2:1e:13:e1:5b:33:fb:
e2:58:36:0e:b9:c9:0f:57:ed:0c:de:7b:09:00:da:
10:80:f7:6d:d6:3c:73:3b:16:97:8e:55:8d:80:ea:
74:0a:fe:44:62:3a:aa:dd:b6:96:55:22:c6:85:6f:
43:94:36:c2:12:43:78:25:f9:47:96:f8:34:21:ab:
88:00:06:b9:0b:31:f1:61:27:88:23:c1:ff:82:6f:
39:94:34:a6:9e:78:04:51:6b:fa:87:4f:3c:b6:1d:
e3:3a:6c:52:8b:ad:31:aa:85:56:86:23:61:b9:28:
88:ac:c2:40:2b:d0:40:f6:9c:fb:8e:a7:9c:fa:e5:
36:77:73:77:98:fe:ce:92:67:6d:43:d7:74:42:b7:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:64:A4:8A:59:07:30:66:68:D9:68:C7:D5:EC:8C:A8:92:A3:7A
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fc:2d:67:41:c6:77:5e:2a:f4:64:a3:e7:3a:12:a4:49:13:
e2:5c:70:26:ea:97:0c:10:17:f3:0e:43:45:d5:0e:ce:4d:67:
b5:f9:70:d3:17:2d:f9:f8:76:e0:67:6a:f5:4d:8d:58:59:dc:
cb:c1:df:70:13:5a:99:65:06:9e:11:7a:6d:ed:22:1a:fe:19:
71:9a:ed:b8:71:80:e6:cd:7c:10:57:20:d2:ca:aa:37:76:eb:
e0:50:0a:4a:ce:05:38:ba:c0:b8:42:ab:d8:a1:f6:f7:43:2a:
5a:42:2b:47:76:0e:cb:06:a1:80:26:93:26:f0:b3:b7:ab:e4:
61:27:cb:ee:b4:dc:54:ce:b5:16:07:7f:2d:b1:26:9d:c5:72:
b0:2e:a0:fa:76:10:f1:dd:b4:d1:e0:0f:09:36:f0:28:0e:89:
8d:74:c4:ab:93:ef:26:c7:53:a9:5a:40:b6:0b:3c:eb:29:40:
ce:0f:48:9f:a9:b4:1f:56:a8:a2:8e:b9:ce:d1:db:0f:3e:fc:
11:8e:92:ef:d5:16:33:56:1a:a5:87:63:b8:02:b8:e9:b8:32:
88:fd:c2:66:4b:e2:e9:2d:a2:63:c0:53:23:92:9e:77:b8:a9:
8e:94:f9:4d:1c:d0:25:ec:be:96:bd:20:41:b5:49:eb:b8:20:
95:ff:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:53 2025 by rpki-client