Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
File: nJ4hbtlwrbWem9SinbNcIj1ivJY.mft (raw, json)
Hash identifier: XOobzRJ3GSNykcnTN1JNbsTU7H/IGIiTgWBihtb+7f0=
Subject key identifier: 95:F1:1D:EC:69:AB:EE:D5:98:37:6D:7C:28:75:AA:ED:BD:4C:79:CE
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 019751C645642CD5891E1542CE0ACFCB6502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
Manifest number: 0A9D
Signing time: Sun 08 Jun 2025 23:00:37 +0000
Manifest this update: Sun 08 Jun 2025 23:00:37 +0000
Manifest next update: Mon 09 Jun 2025 23:00:37 +0000
Files and hashes: 1: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (hash: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=)
2: nJ4hbtlwrbWem9SinbNcIj1ivJY.crl (hash: Hms/dpMldQXAzqvGYrUIUzOauuMwBQxUI/IGm5mgPw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:45:64:2c:d5:89:1e:15:42:ce:0a:cf:cb:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: Jun 8 23:00:37 2025 GMT
Not After : Jun 9 23:00:37 2025 GMT
Subject: CN=95f11dec69abeed598376d7c2875aaedbd4c79ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:63:93:9a:3c:46:6c:c9:79:84:b6:a1:4b:
b4:c3:27:17:35:32:27:35:56:96:d4:b7:20:6c:e7:
c6:f2:08:39:20:f9:63:ae:83:06:62:fe:7c:68:c2:
36:18:68:6a:b6:05:0f:2b:95:ea:d7:c8:00:8e:15:
87:1c:b1:88:02:59:5a:37:c4:95:38:97:2b:24:6b:
82:b5:64:97:8c:58:d4:00:4c:f7:46:cd:f5:b3:bc:
9d:4d:0e:f9:f1:59:82:52:c1:5c:c6:58:a7:7c:17:
3a:fd:91:f4:ee:30:4d:bb:84:ad:42:54:a3:0a:0e:
b4:ca:9f:fd:07:43:16:4b:fa:c0:8d:4b:4d:5a:ac:
c3:ce:af:df:71:4b:3d:33:d5:f3:c9:25:14:ca:e8:
2a:08:87:7d:7f:a5:f3:e3:6d:87:63:7e:b0:1a:8e:
d6:04:b8:6f:57:a6:ea:b5:78:60:22:f3:42:1b:f7:
15:dd:8a:bb:b2:92:69:e2:92:64:f6:cb:4e:5f:39:
38:bd:a5:fa:46:96:ae:fd:44:d8:31:a1:d7:ec:a1:
dd:5a:51:15:f9:20:c6:48:21:35:93:ce:5e:6b:0b:
b8:2d:3f:26:b9:c6:e6:a6:83:18:3d:c0:ee:52:ba:
13:66:74:95:d4:19:d3:ec:4a:14:25:c9:6e:a9:6d:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:1D:EC:69:AB:EE:D5:98:37:6D:7C:28:75:AA:ED:BD:4C:79:CE
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:51:17:b0:cf:10:44:96:fd:4c:15:f8:d3:c9:32:c3:64:6d:
1f:7c:cf:21:ed:fc:50:15:ad:f4:70:a4:fc:47:2b:e6:f7:ca:
bf:c6:d8:5e:c6:f3:1c:f1:35:c3:44:7b:4e:08:20:9e:6a:c2:
e6:e2:b0:91:c4:e8:59:45:49:93:30:1c:af:28:65:40:a5:24:
9e:3e:82:24:0b:24:82:23:6d:b7:37:6f:94:57:86:f7:85:dd:
0f:59:fb:30:23:3c:dd:c3:d9:be:bb:2f:02:98:31:04:6c:21:
ae:1d:8a:de:b4:14:78:70:02:10:b0:7e:96:66:7d:a6:31:e4:
ae:f8:ab:7a:40:58:20:b4:62:6b:38:1e:1b:3a:86:04:84:d6:
4f:0e:83:8e:51:f3:6f:f9:8b:32:55:f9:92:3c:16:0a:4e:53:
78:f7:7f:7b:04:b5:e4:6a:12:e4:99:b0:6a:b6:38:ea:ac:3f:
6d:2a:21:a2:09:06:98:94:b7:d5:62:cf:62:9b:aa:01:e4:db:
93:6c:a3:0d:3b:b3:90:58:ad:76:86:b1:f7:45:da:23:ad:63:
a2:e8:21:36:1a:12:0f:c9:37:19:dc:76:18:65:03:92:f9:4f:
e9:3a:c3:af:41:12:36:c0:b1:99:57:b2:a1:c9:06:b8:b8:46:
74:aa:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:44 2025 by rpki-client