Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: 7lXuqmRvSWrZ0tjMUR7+w+aRFrdgR8P9x8UGvzF3klw=
Subject key identifier: A2:EB:40:CB:2C:31:0A:88:4B:A2:80:2B:02:1F:48:87:4F:55:5C:9B
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019749313D1F84172CDA6327AD1A754E3E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0E3C
Signing time: Sat 07 Jun 2025 07:00:53 +0000
Manifest this update: Sat 07 Jun 2025 07:00:53 +0000
Manifest next update: Sun 08 Jun 2025 07:00:53 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: A0s6jb8aOMlcbdOmAyqDee1iQsAjpZOrcbguRx5t6c0=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3d:1f:84:17:2c:da:63:27:ad:1a:75:4e:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 7 07:00:53 2025 GMT
Not After : Jun 8 07:00:53 2025 GMT
Subject: CN=a2eb40cb2c310a884ba2802b021f48874f555c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:32:6a:cb:a4:33:0e:76:7d:1a:26:f5:b6:68:
01:87:29:25:3b:d4:37:e5:d6:cf:2a:b6:f1:de:96:
22:d6:67:90:e2:95:33:4c:08:a8:b2:81:21:29:86:
be:51:85:39:26:20:46:cd:66:a3:3e:db:54:84:96:
cd:b8:89:ad:7b:6a:1d:10:83:8b:8c:d4:91:d2:0e:
ef:a2:05:45:5a:4b:67:6e:de:42:f0:c4:1e:e9:d6:
ca:2a:1b:49:ef:de:ff:da:14:40:09:6a:be:18:cd:
0c:16:6d:1d:e5:59:c9:1a:84:8a:a5:cb:94:4e:d8:
ab:d9:2a:03:d5:5b:84:a7:41:7c:c6:fc:6f:fd:0f:
62:f5:45:c6:6a:9d:9a:f2:30:41:0b:7d:fd:38:54:
47:c5:2d:38:61:e0:22:27:59:b9:e1:bc:83:0d:31:
90:f6:70:2d:5f:04:24:2a:bc:a4:b1:db:d6:ff:45:
71:71:2e:b3:60:0f:cb:38:69:48:93:80:d7:9a:38:
b6:23:77:60:34:60:2b:52:b5:a8:17:9b:a4:ba:65:
b9:df:44:37:bf:12:f6:99:44:0e:54:84:d7:bd:8c:
a7:8f:7c:96:fe:cb:a6:7b:f0:49:8d:e5:3b:26:36:
44:f2:02:cb:aa:28:65:e3:4e:83:3c:f3:44:27:7f:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:40:CB:2C:31:0A:88:4B:A2:80:2B:02:1F:48:87:4F:55:5C:9B
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:0b:e2:fd:95:65:59:7c:ac:61:b7:3e:f7:ab:97:8d:7d:
85:05:b6:b0:60:66:ba:99:aa:82:39:9f:ee:a1:a3:64:13:83:
59:b7:6c:b9:c2:69:0e:f9:c2:66:28:1a:79:b0:16:e0:95:8c:
cc:52:ee:fa:a3:87:0d:b0:30:c1:82:10:7a:61:a8:4f:eb:03:
37:e5:97:88:74:6c:67:4c:b1:c3:9a:c4:b9:1a:df:84:8e:14:
f6:36:32:6b:4f:09:b3:c0:80:c1:a5:a2:d5:89:d5:5b:10:14:
52:27:45:6f:1b:0f:a5:2a:84:f4:0c:fb:99:94:97:82:be:6e:
25:0d:0f:a3:21:99:7c:a5:d9:74:9d:13:3b:8e:b2:ad:a3:96:
ac:f6:49:63:b0:f4:a3:9c:63:64:84:88:17:5e:8d:37:73:3c:
3d:f2:b0:0b:b5:d1:29:e5:7c:54:c8:e4:3e:af:b5:58:c6:0f:
80:bd:01:7d:d6:01:c4:3c:d3:d2:c5:52:9b:e0:3e:44:6f:33:
a0:e2:ff:98:12:28:c0:9a:17:f2:55:de:0a:fe:22:a4:06:9b:
7a:aa:86:bc:23:d7:e9:c2:76:b1:78:55:40:7d:7f:ba:50:f3:
42:39:01:5a:da:1c:56:1a:a3:1b:c1:1a:b0:0f:7e:8a:45:22:
e3:c2:50:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMT0fhBcs2mMnrRp1Tj56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5
NWJjYzAwHhcNMjUwNjA3MDcwMDUzWhcNMjUwNjA4MDcwMDUzWjAzMTEwLwYDVQQD
EyhhMmViNDBjYjJjMzEwYTg4NGJhMjgwMmIwMjFmNDg4NzRmNTU1YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzJqy6QzDnZ9Gib1tmgBhyklO9Q3
5dbPKrbx3pYi1meQ4pUzTAiosoEhKYa+UYU5JiBGzWajPttUhJbNuImte2odEIOL
jNSR0g7vogVFWktnbt5C8MQe6dbKKhtJ797/2hRACWq+GM0MFm0d5VnJGoSKpcuU
Ttir2SoD1VuEp0F8xvxv/Q9i9UXGap2a8jBBC339OFRHxS04YeAiJ1m54byDDTGQ
9nAtXwQkKryksdvW/0VxcS6zYA/LOGlIk4DXmji2I3dgNGArUrWoF5ukumW530Q3
vxL2mUQOVITXvYynj3yW/sume/BJjeU7JjZE8gLLqihl406DPPNEJ39V4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLrQMssMQqIS6KAKwIfSIdPVVybMB8GA1UdIwQY
MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt
Mzk2MDc4MjFhMDlhLzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh
LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin8L4v2V
ZVl8rGG3Pverl419hQW2sGBmupmqgjmf7qGjZBODWbdsucJpDvnCZigaebAW4JWM
zFLu+qOHDbAwwYIQemGoT+sDN+WXiHRsZ0yxw5rEuRrfhI4U9jYya08Js8CAwaWi
1YnVWxAUUidFbxsPpSqE9Az7mZSXgr5uJQ0PoyGZfKXZdJ0TO46yraOWrPZJY7D0
o5xjZISIF16NN3M8PfKwC7XRKeV8VMjkPq+1WMYPgL0BfdYBxDzT0sVSm+A+RG8z
oOL/mBIowJoX8lXeCv4ipAabeqqGvCPX6cJ2sXhVQH1/ulDzQjkBWtocVhqjG8Ea
sA9+ikUi48JQdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:06 2025 by rpki-client