Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: swBjaSWsmXbSww+ZnljPsr9yZ+y60L3lpZKNsGHQx9E=
Subject key identifier: CC:D7:58:E9:0D:F3:5F:2D:68:F7:82:69:37:B6:E1:9B:62:00:65:61
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 01974FA0FD8069C603221E5B8134073B1332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0D4A
Signing time: Sun 08 Jun 2025 13:00:40 +0000
Manifest this update: Sun 08 Jun 2025 13:00:40 +0000
Manifest next update: Mon 09 Jun 2025 13:00:40 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: CNaOnKCaKtTjitMdTkj33HmZFwpeQoTPDH+c35tpbl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:fd:80:69:c6:03:22:1e:5b:81:34:07:3b:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Jun 8 13:00:40 2025 GMT
Not After : Jun 9 13:00:40 2025 GMT
Subject: CN=ccd758e90df35f2d68f7826937b6e19b62006561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:46:0e:8c:12:f9:f7:f7:66:e8:28:c7:30:
33:94:bc:d5:59:87:38:b2:71:32:da:df:a8:f3:9a:
77:84:72:41:db:05:bd:25:d1:17:51:41:17:17:88:
94:69:d8:ed:d2:e4:af:1e:75:65:cc:ea:2a:8f:cb:
51:be:ba:8c:44:fc:5c:92:2e:65:a9:8d:1a:90:39:
3f:2b:3e:d8:55:06:4f:ae:02:a2:03:e5:c2:9d:f0:
c3:49:37:94:c6:4e:2a:ae:32:26:a8:d7:8b:76:2c:
1a:a0:bc:87:fd:e2:ed:61:95:f9:84:df:87:b7:05:
00:99:96:a1:4e:a0:57:6a:d7:a3:78:a6:cb:5a:2f:
d2:86:1b:90:99:90:02:64:55:cb:e5:8b:24:c1:a8:
e1:cd:4d:f4:ad:e9:35:1f:0c:04:b0:94:1d:b8:7e:
56:ff:b4:84:cb:14:c3:5c:c7:94:1f:05:56:b3:a8:
ab:36:bb:5a:3f:8a:a6:ac:2f:68:cc:8e:a7:d2:4a:
65:13:5b:2f:3f:c1:99:1c:31:2e:90:11:b1:98:9f:
31:16:bb:1e:b3:40:68:e1:0c:b8:c0:af:2a:33:fe:
53:e1:10:16:f3:77:a2:95:f6:e7:1a:88:9d:7b:c5:
0a:c9:28:7b:c7:16:2e:a0:17:22:08:49:1b:5c:57:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:58:E9:0D:F3:5F:2D:68:F7:82:69:37:B6:E1:9B:62:00:65:61
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8f:57:c7:25:ef:ce:ca:d7:1d:5d:eb:cd:a5:d3:46:d0:1b:
16:47:56:17:9d:1e:d8:1b:75:39:61:70:9f:1a:44:9f:ef:13:
12:a9:0b:e1:9c:3f:e9:2d:2f:e4:09:a1:c0:a6:5f:68:46:83:
f5:a3:51:8c:75:8a:fe:f6:25:4b:68:cd:0e:fe:45:8e:a3:3c:
8e:19:0a:2c:a6:6a:5d:57:6e:ac:f0:a4:25:93:99:10:76:e9:
d3:52:bb:2a:03:2e:78:11:d1:9b:86:9a:63:f2:1b:05:4e:02:
4d:54:e2:f3:1d:9b:be:23:a0:33:86:a4:b1:3d:7c:5f:a9:a2:
e7:ad:3f:1f:87:d9:6c:43:eb:69:78:d7:90:b1:e8:f0:1d:c5:
41:06:bb:41:e9:6f:87:4f:03:31:c0:06:74:0f:d7:01:ba:0d:
b1:37:73:00:1b:4b:77:c6:05:de:46:a2:84:c8:77:a7:f1:07:
99:f5:b2:d3:d2:a3:8b:ef:a2:0a:98:51:71:50:f2:3c:a6:db:
2d:94:b6:16:f3:de:46:60:c9:4e:a4:99:81:a4:30:5f:38:32:
4e:6e:8b:77:6b:e6:fe:ed:42:c3:8a:84:29:b1:07:be:05:fa:
c0:34:25:43:76:c9:69:a4:7d:01:c9:25:c5:23:cb:07:1a:59:
19:e9:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:40:23 2025 by rpki-client