Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: A/J08eJCdPB5rYpfi6x+tCTEYmzQlkR0KOrVVlUQ9Vs=
Subject key identifier: 22:BE:92:B3:F9:55:DA:0B:6C:6C:BD:15:61:03:58:3A:B3:8D:48:5A
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 01974CD6F79D031C96C01DCB53707961EA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 00:00:45 +0000
Manifest this update: Sun 08 Jun 2025 00:00:45 +0000
Manifest next update: Mon 09 Jun 2025 00:00:45 +0000
Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: TT1b5aHwyUoVDBdnkOIm/vqq5Zhbv37HdhyVX/XT6k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:f7:9d:03:1c:96:c0:1d:cb:53:70:79:61:ea:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Jun 8 00:00:45 2025 GMT
Not After : Jun 9 00:00:45 2025 GMT
Subject: CN=22be92b3f955da0b6c6cbd156103583ab38d485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:83:38:9e:52:4c:3a:47:ac:41:86:2d:4f:
db:27:0c:68:19:5f:69:b9:88:11:8c:48:b8:b9:65:
ce:4b:47:4b:03:be:e1:6f:de:d8:b5:18:d9:dd:65:
e4:53:a0:03:e7:3e:dd:3c:b9:d1:15:5f:9d:cc:df:
05:f2:73:2c:44:58:d6:f1:4f:ee:db:53:c3:83:d0:
e6:c8:93:8f:5d:7c:6c:24:fb:c6:b1:08:eb:1b:4d:
f2:e2:d9:df:34:86:a4:20:f9:18:33:47:e8:88:0c:
06:cc:00:03:14:5f:8a:6f:49:69:fb:59:f2:c0:57:
be:81:eb:f3:61:af:87:cc:45:f5:25:29:c7:e6:d9:
1f:49:0d:a4:b2:3a:7a:2b:71:ce:cc:dd:77:ae:22:
3a:5a:43:c6:77:58:c0:57:d1:eb:4e:58:79:de:8c:
0c:1d:cb:fc:d5:eb:1d:66:02:ad:eb:85:e5:36:19:
8c:29:5e:bb:1c:18:4f:05:20:50:f6:c1:f2:9a:cf:
9b:cb:a3:1c:dd:22:b8:42:3a:14:31:3e:75:09:3d:
fd:72:18:12:d8:0c:76:b7:2f:13:12:2f:6e:ef:bd:
15:3a:00:b6:cb:54:e1:d5:59:31:2d:49:5d:d2:10:
a4:3d:8f:76:20:5f:91:d5:2e:aa:d1:18:e5:7d:91:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:92:B3:F9:55:DA:0B:6C:6C:BD:15:61:03:58:3A:B3:8D:48:5A
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:d6:77:ea:1d:21:f0:8d:36:7f:60:15:cd:90:d2:f0:25:
db:ca:d5:ed:8d:9e:4a:33:db:9f:c9:1f:be:98:48:5e:8b:12:
76:b3:dc:b9:37:8c:44:fb:23:9f:bf:b0:e2:80:98:65:46:6d:
75:28:c2:be:96:48:7d:f8:3e:48:90:38:2a:8e:d3:8b:49:52:
24:a1:92:44:8f:02:26:6c:d0:91:21:99:65:37:60:22:85:cf:
60:80:91:01:92:78:e6:20:20:50:cc:95:5c:c4:db:d8:b3:a8:
d0:3a:db:dc:91:cf:af:85:1f:1e:84:89:f1:70:2b:b7:b5:a3:
81:96:c5:80:73:95:76:c1:89:5d:8d:05:7c:92:84:13:91:03:
37:29:de:d9:b7:8b:45:f4:90:bd:8d:2d:60:15:f3:05:f8:0e:
e3:35:77:86:0d:5b:ea:7c:de:f3:ac:1d:e4:2d:bb:bb:62:ea:
55:9b:88:98:64:67:61:2e:85:b5:ae:a7:e6:c1:20:6c:5b:36:
10:07:5b:09:e6:62:1f:5e:ed:2a:37:74:69:e1:58:5d:2b:e7:
6e:0b:da:aa:c0:a7:7d:1d:ef:e0:2b:55:70:39:ca:63:ff:63:
a5:75:c5:20:5c:e4:da:1b:ca:42:13:79:25:2a:9b:58:a9:89:
2b:b1:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:59:59 2025 by rpki-client