Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: 4APU/azviu5nRqimIyYVwXNUeaebe+QlXDtg89xE2PE=
Subject key identifier: 52:FD:4B:81:CB:19:50:78:AB:75:C3:C9:2B:5A:BA:C2:00:3E:74:2F
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019745C23F478DC143F8A3D4360DAC84B022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0B8C
Signing time: Fri 06 Jun 2025 15:00:47 +0000
Manifest this update: Fri 06 Jun 2025 15:00:47 +0000
Manifest next update: Sat 07 Jun 2025 15:00:47 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: dZvkSLLAmYlD9F0FEo6pVK7n2K5WWG7DUqjYS+jWPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:3f:47:8d:c1:43:f8:a3:d4:36:0d:ac:84:b0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jun 6 15:00:47 2025 GMT
Not After : Jun 7 15:00:47 2025 GMT
Subject: CN=52fd4b81cb195078ab75c3c92b5abac2003e742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bb:f8:64:4d:e4:d2:f0:74:b7:e9:0a:dc:ac:
b2:cc:48:7e:23:ec:00:83:04:f5:03:51:8f:20:1a:
64:c7:62:f3:e0:b6:30:ca:ac:4e:1c:c3:3d:1e:ee:
02:4e:ef:d4:ba:36:bb:a6:f4:e8:a2:09:b2:5a:fc:
fe:1f:13:44:b4:85:6b:5a:4a:c1:a2:76:45:be:52:
5f:73:8b:1c:cb:20:e7:68:d5:ba:db:9b:1d:0c:73:
25:af:4b:69:43:de:eb:05:70:e8:a0:a1:21:ee:be:
03:05:8e:42:fa:c3:ad:fe:b9:a8:dd:d7:a9:1a:7e:
e0:ce:47:1a:fb:99:98:4f:3e:56:33:31:3a:e3:29:
42:ce:2b:13:cc:87:8a:fd:82:26:69:c6:92:1e:bc:
a0:0b:93:2e:e1:cd:77:4d:64:bf:d8:93:2c:e0:20:
69:f8:c9:1f:4e:ae:a1:13:fc:09:4f:5b:14:9c:0b:
9f:9e:c0:3b:9a:d6:59:88:86:7d:b3:d8:b0:1a:b4:
6f:0b:79:15:e3:50:f4:69:35:4b:96:2e:c2:e0:a6:
0c:2f:41:af:b6:5f:d4:84:04:49:c1:b8:47:be:3f:
42:c3:6b:99:f8:a6:d9:fa:9d:46:c3:bf:f4:92:d2:
60:84:80:b4:f1:17:73:c3:d6:b3:b7:9c:e7:98:23:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:4B:81:CB:19:50:78:AB:75:C3:C9:2B:5A:BA:C2:00:3E:74:2F
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:09:f7:56:98:90:42:c7:2a:fc:2f:09:5a:a4:db:c7:94:
68:72:04:b2:c0:dd:51:d5:2e:4a:94:48:9f:b5:6a:73:72:8e:
c4:66:af:fd:ae:80:19:e1:36:e2:60:63:79:e9:63:45:ee:d9:
c4:12:df:40:d9:f3:ae:54:5b:52:30:37:dd:c8:69:12:bf:a5:
3b:eb:21:38:09:a6:84:d9:a2:56:ce:32:71:52:dc:4d:3b:ac:
86:e9:3e:e1:93:72:7b:cf:e0:d2:cb:b3:37:b0:da:bf:78:07:
b2:92:5f:3b:87:00:7f:40:9b:4a:e4:d0:fa:17:33:50:6d:8d:
91:37:58:cd:67:bf:e2:6a:6f:1c:af:30:c5:98:0c:cd:1e:1b:
70:13:98:45:bb:7c:b1:80:ae:c9:1b:79:36:5b:c1:a6:69:9b:
1d:75:0c:f0:76:33:28:ce:31:64:0b:7e:2e:f5:c3:04:0f:eb:
11:0c:45:88:87:65:77:11:3c:88:1a:c4:e5:81:28:03:22:d8:
0b:1f:db:a5:94:4c:8f:f7:4a:ab:f1:97:72:82:27:b5:bc:78:
e6:d2:bc:a5:b0:06:31:4d:9d:43:78:e8:c7:f1:c0:dc:65:a8:
c9:1e:0e:8a:11:0e:dd:30:69:3c:86:60:28:22:82:69:bc:96:
6a:72:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:27 2025 by rpki-client