Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: XhUloj0xSQONIb1geGhjfKtDOlJwi1s4bY3cwW+gbqU=
Subject key identifier: 8F:81:DD:95:3D:57:13:AD:06:6D:15:CD:68:41:CE:DF:62:CB:E6:9C
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 01975158B473919CDC362A910DBBFF1FCBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 01A3
Signing time: Sun 08 Jun 2025 21:00:57 +0000
Manifest this update: Sun 08 Jun 2025 21:00:57 +0000
Manifest next update: Mon 09 Jun 2025 21:00:57 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: yJodWD8nPw9Q3f/Ua1nCiKKX+oODhZoruh23pw3Ik/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:b4:73:91:9c:dc:36:2a:91:0d:bb:ff:1f:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jun 8 21:00:57 2025 GMT
Not After : Jun 9 21:00:57 2025 GMT
Subject: CN=8f81dd953d5713ad066d15cd6841cedf62cbe69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:3d:c7:07:08:25:56:bd:ea:15:36:c9:61:
06:79:6e:db:37:de:78:d4:9d:97:fd:a2:a3:5d:20:
2c:b9:e8:7c:00:9a:25:05:94:66:16:a5:1d:9d:6d:
ec:77:a9:c2:a7:96:aa:27:2b:c4:ef:37:1a:2b:19:
91:6b:8c:d1:7d:f0:2a:11:18:8e:6d:9e:ee:80:46:
d7:c5:52:c8:73:ca:1f:d1:9a:48:1c:6b:65:9c:25:
f8:6d:5c:12:8b:ea:43:a9:24:c6:ce:ac:ba:7a:67:
94:55:d1:8a:5c:93:d1:30:4b:c5:71:38:34:1a:f4:
33:2b:67:4f:46:71:2d:bd:e1:42:96:be:2d:dc:ec:
ee:35:85:23:1c:2d:fa:99:e3:56:84:03:41:36:63:
f4:27:d4:97:d9:c4:79:08:86:40:f8:cd:f7:59:48:
5b:34:57:cd:e4:64:d2:5f:68:11:6f:a0:6b:6f:df:
02:b5:5e:f4:28:c6:86:c2:a5:96:f5:e0:48:80:f7:
2c:d1:39:ea:a8:db:19:b8:d2:7f:1b:65:3e:bc:10:
fa:d0:d8:d2:8f:de:8f:47:04:d7:6d:08:9c:63:e4:
46:d9:3c:41:29:a0:0a:b3:a0:dd:4a:ad:39:1b:c6:
42:05:95:0c:98:66:22:1e:aa:4d:7f:c6:96:55:5e:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:DD:95:3D:57:13:AD:06:6D:15:CD:68:41:CE:DF:62:CB:E6:9C
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:df:0a:c5:45:32:c4:b8:4e:d5:37:8a:bb:f9:5a:5d:3e:ab:
87:ff:98:f1:78:b7:0a:5a:83:07:c4:cf:23:64:9b:bf:9c:c2:
5e:fe:70:05:43:ca:48:28:02:6d:64:f2:3a:c9:db:ba:81:04:
32:c0:6d:d6:75:ad:c4:0b:4b:30:ba:02:14:e5:fb:6d:5d:bb:
13:3e:97:95:86:2f:56:4d:b7:ce:b2:ba:7b:4d:ff:65:ce:1b:
55:7c:30:4c:aa:02:bc:3e:54:b5:fe:4e:12:19:cf:96:f6:27:
ca:92:73:e8:4f:af:a1:0a:d8:62:2b:4a:78:d9:48:8b:6c:15:
2b:7c:08:b5:56:58:8e:24:8b:e0:e7:05:52:94:7d:b3:f9:40:
80:2d:70:0a:67:07:c6:e8:6a:65:92:9d:da:20:58:61:89:a7:
07:c2:c5:59:f9:9a:45:68:38:9f:e7:72:b2:63:b5:a2:04:ef:
4e:03:6b:e1:cf:50:a4:d7:05:27:07:8e:0a:5a:d1:dc:53:c1:
d3:6b:32:50:17:85:ed:a1:4c:93:04:e1:a2:d2:7c:01:96:e1:
52:4c:9b:6f:89:bd:05:cd:7b:a3:46:e0:7b:79:49:04:4d:8e:
82:40:f7:2c:2b:3b:85:c5:e9:87:3b:29:ba:74:f7:dd:33:40:
90:7d:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:15 2025 by rpki-client