Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: +NOJr+X1zqX1UOwp9CL61G5TDVaaaFDQDgOnKnSb6j0=
Subject key identifier: 84:C4:2D:4F:67:6B:A1:88:A8:B7:2C:62:78:73:19:1F:95:72:2A:C5
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 0197B857AE2CF34785CFEE3FA33C1D1E928B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 1A
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=)
2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=)
3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: W3Tcx37XDiVMandmfydpAz5setKVu5O/HeBSj6zdsk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ae:2c:f3:47:85:cf:ee:3f:a3:3c:1d:1e:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=84c42d4f676ba188a8b72c627873191f95722ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:5f:83:4e:33:43:f1:66:02:7f:00:68:d0:
fc:17:dc:ec:44:84:14:39:dc:53:3f:a9:39:0f:f4:
cc:58:21:a2:7e:8e:84:bc:19:dd:bf:45:46:6b:13:
ce:44:7c:3e:a3:6d:51:8d:16:3f:d9:ad:7f:23:44:
1b:b8:ff:da:a6:1d:9e:60:77:41:d2:a0:71:6b:d6:
5f:7a:e1:83:93:a5:39:97:a2:53:6e:87:6f:27:9c:
81:3e:68:7d:74:63:59:98:b0:5b:70:f5:c2:b8:6a:
da:49:c9:2a:9e:bd:f0:52:61:0b:59:7f:2c:be:ac:
76:de:1c:f8:9e:f8:29:a1:3b:2c:a6:0c:be:bc:97:
0d:45:8d:af:f9:9d:95:1b:19:93:68:02:04:cf:49:
b0:a8:9c:fe:85:40:b8:11:54:0f:13:de:bc:ac:1e:
f5:1e:d0:ce:ca:3c:cb:ae:a7:90:24:27:7c:b5:58:
6f:96:f2:71:f0:a1:e9:57:d8:7a:c5:3c:9f:ed:3a:
01:29:66:15:95:d6:ba:af:b6:fb:72:f4:b1:1b:7f:
c8:4c:44:61:00:73:52:28:83:c3:00:69:78:78:14:
d5:1d:6d:ee:7d:93:83:3f:b1:95:7b:fe:e6:9f:a7:
d2:6a:92:2c:85:b1:26:5d:7d:45:c8:84:43:1c:30:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:2D:4F:67:6B:A1:88:A8:B7:2C:62:78:73:19:1F:95:72:2A:C5
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f2:a3:3f:d6:db:7e:11:82:d0:d0:a3:7d:af:7d:8e:65:5c:
18:0f:e2:94:7f:ff:bd:91:9e:ca:cc:b7:d7:2c:4c:b8:2c:f0:
bb:c7:27:12:b7:02:8e:50:2b:4d:66:58:58:eb:12:95:ae:13:
2b:ff:bf:12:3a:c0:98:f2:be:94:fe:cf:eb:c8:33:3b:2b:03:
b7:69:80:77:32:2d:7e:06:3e:a2:b6:6a:98:4c:fe:fc:64:4b:
7e:a3:5b:2d:be:03:aa:3e:ac:96:11:5c:65:25:2e:a9:a3:c5:
ef:5d:d5:5c:f8:4a:5b:1f:84:bf:46:f5:66:17:1c:64:e4:5e:
ed:25:0a:ef:57:b0:4c:d5:18:55:0a:6c:cb:85:32:5d:73:d5:
d3:70:6b:2e:fc:e5:78:0e:3a:be:e3:32:7a:28:c4:eb:7f:84:
b9:16:dd:28:d0:b6:29:a3:11:1c:26:09:1c:11:5d:b4:c3:3b:
ea:d2:16:54:28:1d:ff:77:33:2b:bc:35:ac:d3:a1:2c:6a:16:
bc:de:2e:d3:84:a5:2a:a0:8b:c2:95:b0:5f:db:98:d5:5e:ae:
d6:80:c2:df:89:83:1f:89:d5:94:ad:9e:f1:4f:c7:c7:ff:c0:
1e:df:8b:ea:3b:6f:aa:5a:1a:b8:45:29:95:84:48:63:15:fa:
c7:7c:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:29 2025 by rpki-client