Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: o+DOBBdoscqfbzyw8xriTElDRE9BJDK3TFoYnrdf5Tw=
Subject key identifier: 0D:26:FC:D5:FF:3C:56:EA:20:CB:80:13:BE:9D:C9:2C:CE:9F:10:E7
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0197537DD2C24BD55B35DB3EAC0E57764306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 046C
Signing time: Mon 09 Jun 2025 07:00:44 +0000
Manifest this update: Mon 09 Jun 2025 07:00:44 +0000
Manifest next update: Tue 10 Jun 2025 07:00:44 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: 3kaeeUbrtSSrQa+7sp7SzawNlNRxyXWniHB7anLeyvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:d2:c2:4b:d5:5b:35:db:3e:ac:0e:57:76:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Jun 9 07:00:44 2025 GMT
Not After : Jun 10 07:00:44 2025 GMT
Subject: CN=0d26fcd5ff3c56ea20cb8013be9dc92cce9f10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:23:3d:04:4e:5e:fa:17:cb:eb:2f:ea:61:
5a:3e:7b:0b:b1:29:d2:e9:c1:ee:27:3f:a5:ec:46:
fc:be:29:b9:28:8b:30:9c:a4:d2:ee:24:59:47:d1:
04:88:88:8f:b9:52:f9:b9:98:10:4e:bf:c5:1c:39:
a4:e4:1e:64:b5:80:b0:76:81:95:d0:93:e7:23:f0:
e8:11:8f:f4:d8:d7:d4:0d:ae:17:48:a5:08:cd:df:
f3:d7:5f:8c:27:8b:57:8d:38:f3:50:5d:7e:86:05:
3d:76:79:4d:d5:7f:cb:2c:67:96:97:d9:54:6b:07:
88:ae:ac:cb:96:0d:e4:95:bb:ff:d7:7e:c3:9a:3e:
59:ea:ef:dd:31:96:43:42:0f:ec:2c:36:10:3c:3e:
a2:c0:fc:63:10:d6:55:5a:35:87:f8:3e:df:3f:9b:
c0:fa:66:54:4c:f1:4b:86:5b:33:05:b5:e9:ae:e5:
0d:40:e8:ad:75:27:8b:64:48:f8:59:4d:41:8e:1e:
47:75:eb:f3:ef:af:95:54:1f:79:96:df:f6:e5:fe:
e1:fc:56:4d:ed:8e:84:35:0b:e8:ab:6a:a9:b1:6f:
98:49:9f:54:0d:57:96:ed:1c:e6:90:8e:a3:b3:57:
e3:73:65:d2:df:82:45:d6:a5:f4:5a:ba:52:a4:e8:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:FC:D5:FF:3C:56:EA:20:CB:80:13:BE:9D:C9:2C:CE:9F:10:E7
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ec:5e:d2:b9:c0:c9:d7:3f:29:84:32:c4:0e:d2:f6:a1:93:
c3:26:7a:52:4a:3c:5e:55:00:b0:41:4e:22:0c:f4:2a:2c:d3:
64:e5:9a:a3:45:46:ba:b8:73:af:b6:68:70:f7:8b:54:de:22:
84:1a:d9:4f:4f:c8:fa:27:8e:34:cb:7e:05:08:9a:8c:e1:ec:
6a:c6:f0:39:0b:3a:90:a0:f8:3e:65:3d:c9:23:a7:31:d0:65:
d5:6b:8d:55:c1:10:96:a4:6c:fb:15:a1:ae:45:40:29:ce:72:
fd:fe:ff:93:d2:0f:16:e0:00:cb:cb:cd:15:47:1d:7f:5b:1a:
78:98:43:4d:79:f5:1a:a3:94:70:d9:00:66:07:03:01:8d:23:
9a:de:2f:ec:27:cd:80:11:cc:05:e5:11:99:5e:89:b3:63:be:
df:8c:c8:ed:e1:c8:e7:d2:c1:83:2b:4e:1b:70:06:d0:ce:1d:
c9:12:d1:34:a2:eb:37:9b:09:65:7e:c1:cc:cb:3a:1b:d9:ed:
99:d2:f7:df:56:72:e2:10:43:25:df:dc:8a:93:88:27:8c:90:
4b:13:d0:77:36:8a:d6:0f:8e:63:36:1e:05:68:5f:21:e5:a4:
93:35:01:ab:26:c5:6a:fd:c9:c7:75:c8:b8:d4:dc:7a:0b:92:
ef:9d:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:41 2025 by rpki-client