Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: y+G7t5kHOfdKUM2zeg9cPKTc6OGo2uHm8zG5s+seo8E=
Subject key identifier: 0D:16:0E:6A:90:AA:1B:41:4E:6D:7F:2C:FA:A2:1A:E5:C9:9E:3A:68
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0197470BFFB89AA7E0F3A0E299DF11A8B5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0F12
Signing time: Fri 06 Jun 2025 21:00:58 +0000
Manifest this update: Fri 06 Jun 2025 21:00:58 +0000
Manifest next update: Sat 07 Jun 2025 21:00:58 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: GvvdoJZFYkEkVgSsHGt754XeVYberbXd2jUQvZXWP0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ff:b8:9a:a7:e0:f3:a0:e2:99:df:11:a8:b5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jun 6 21:00:58 2025 GMT
Not After : Jun 7 21:00:58 2025 GMT
Subject: CN=0d160e6a90aa1b414e6d7f2cfaa21ae5c99e3a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:33:a6:51:e4:44:26:07:87:5f:2c:11:5d:
38:10:ce:95:de:73:ee:c1:d7:58:b3:f0:ba:25:7e:
1a:18:0e:e7:80:6c:de:52:bf:03:be:fe:2d:7f:d5:
de:70:74:0c:81:c8:02:b3:0f:ed:70:a9:df:4b:f6:
03:d9:7c:0e:37:6b:84:1d:e6:cf:85:88:08:5e:6d:
1b:55:c8:87:c3:49:a6:bd:c4:c6:e7:a1:47:39:46:
28:40:42:ae:3c:a6:3d:a3:68:d1:06:4b:0b:9a:85:
b3:82:98:56:66:47:bd:bb:16:bf:92:2d:b7:57:fc:
3d:78:6d:4e:f4:5e:08:83:c9:3e:d3:46:9a:50:57:
1f:c8:05:6e:a8:b3:d8:f4:54:78:32:51:7c:6f:f9:
96:6e:e3:86:d0:1c:3b:16:da:c2:39:ab:56:cc:96:
50:25:40:94:c7:3d:17:ed:bb:73:3e:a9:85:eb:8f:
53:f3:a1:b0:cd:65:d9:fb:4d:c1:dd:c4:2f:6c:20:
e4:22:a6:74:84:35:f4:c2:9d:ec:55:69:2e:56:81:
6a:2d:16:81:af:82:42:23:db:0f:87:82:91:ce:f5:
24:1a:58:0f:2d:96:55:bf:ae:74:c1:d8:0b:99:cd:
dc:b3:3f:30:32:f3:0c:b6:e6:34:fb:b8:e7:1e:19:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:0E:6A:90:AA:1B:41:4E:6D:7F:2C:FA:A2:1A:E5:C9:9E:3A:68
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:82:07:95:79:67:c8:15:c3:ac:ae:00:89:35:4b:d4:9f:
73:e7:7d:06:6c:7d:99:8d:24:f5:60:6c:81:e3:d4:6a:d4:ee:
9f:8b:e2:78:22:bc:5a:23:dc:23:93:5b:fc:03:09:07:72:31:
3b:3f:38:e0:5d:47:4a:10:c5:17:1c:04:f8:85:a9:32:aa:7d:
36:97:0c:b8:ad:a0:15:7d:4b:a1:08:bc:82:af:96:be:58:3d:
a4:97:09:25:62:da:39:d3:c8:29:c4:91:0e:21:ef:c3:9c:ae:
b3:05:3e:f9:74:73:a7:cd:11:b4:94:ee:1b:a2:5f:b4:a9:96:
42:b8:c8:e5:a8:52:67:44:fb:36:d8:cb:b8:da:9a:d4:da:2d:
53:24:62:19:79:06:de:60:88:9d:13:64:e7:12:d5:7b:44:e7:
18:94:5e:09:17:c6:1c:a1:27:0f:fa:ac:81:e6:2a:2c:2e:f1:
da:2c:e5:55:0a:22:41:6c:0c:de:99:d0:6c:22:a5:1f:82:33:
4c:72:50:d2:4b:74:bf:70:bb:a4:3b:f2:a4:7e:bb:34:34:23:
80:8f:83:06:29:cb:16:55:cd:37:99:ed:bb:c0:48:f1:20:a9:
50:c1:e5:9b:bf:e8:e5:a9:b9:25:24:eb:9c:37:09:85:8b:6d:
79:f1:45:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:02 2025 by rpki-client