Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: wZj/J4uTnkborEoytUxteFQ+Y5Pz81lOMwl+e8Y9RPs=
Subject key identifier: 1C:8A:1C:AA:5E:5C:F6:3A:41:5F:A4:5E:68:39:AA:30:5A:AC:14:12
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 0197B70EE9179EA196BD5B62CBFBB9113F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0749
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: vFIGmC6TAEZV5WuK+c970mOlosS9QuQYDCyp+cLHGio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e9:17:9e:a1:96:bd:5b:62:cb:fb:b9:11:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=1c8a1caa5e5cf63a415fa45e6839aa305aac1412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:50:fb:d9:28:ea:05:ee:2a:14:bc:15:1a:5b:
8d:f4:30:8c:8d:6c:9b:4b:bd:44:9e:41:9f:fc:c7:
8d:d1:00:cc:a7:da:32:63:dc:e3:5d:28:a1:b5:5e:
33:13:01:8d:c4:2e:f7:40:76:97:e3:91:71:ed:72:
8b:02:0d:1e:b2:95:86:2e:44:35:72:e2:65:a8:25:
b4:cd:62:70:45:76:c5:a0:56:a9:1e:ee:39:45:38:
92:33:6f:8e:cc:78:e3:81:02:34:1d:16:3b:78:4b:
ae:5a:70:cb:01:2f:87:46:93:0a:28:31:c6:0d:cf:
dd:47:45:a7:ee:55:56:55:63:e1:bd:ac:e7:44:0c:
6d:06:45:cf:40:d7:48:ca:51:72:a7:49:49:e1:dc:
e0:b3:7b:8f:1b:b2:dc:b0:a8:ab:65:08:3f:94:4a:
0d:18:92:4c:93:18:ab:67:1c:61:d3:eb:6e:e0:0f:
4b:20:b4:20:cc:bd:6f:18:b4:93:64:cd:08:51:c6:
1e:b4:2e:c3:4c:36:13:89:12:03:e1:50:42:60:5e:
f2:1b:64:90:63:f1:b7:e0:cb:ca:0c:76:f9:a1:f0:
0d:64:35:00:51:6d:f9:29:6e:01:6c:76:95:9c:da:
c4:cd:0a:44:2e:07:c3:d7:0e:99:ee:e6:13:6e:53:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:1C:AA:5E:5C:F6:3A:41:5F:A4:5E:68:39:AA:30:5A:AC:14:12
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:50:79:9e:d5:4f:94:b1:d3:63:d8:03:a4:fe:9b:08:7f:
58:15:58:d1:2b:d3:08:f5:58:9f:61:3a:11:1a:90:cd:2f:2c:
7e:bf:f3:c6:07:b0:9a:74:72:64:b6:55:a9:57:f9:8c:1d:a4:
11:c9:2b:27:c6:dd:ef:58:ec:d6:b6:71:fa:bb:f7:5b:91:1f:
35:b1:81:98:ea:50:20:ec:86:46:c2:f6:00:fe:0d:a5:ed:b0:
43:f4:56:58:c6:12:85:5b:0d:a5:79:ea:ef:54:af:27:aa:74:
c0:6d:1c:dd:ec:d9:f6:3a:61:49:6b:a2:98:f4:41:c1:1d:79:
b3:a6:13:e5:37:c2:3c:c4:46:b6:66:0d:1f:3c:65:81:a2:53:
f7:4d:81:a2:53:05:f7:f3:37:3c:ac:8a:b7:79:11:cd:6c:e9:
e3:70:2a:7c:16:e8:b9:e8:a1:08:e7:31:1b:74:54:ed:0b:91:
4e:fc:4e:ca:1b:94:12:9b:47:07:ba:e1:73:da:17:fd:10:b3:
da:4d:2d:5c:1e:1e:1d:37:64:b4:59:12:b9:eb:d2:10:b2:a3:
f1:36:99:bf:cf:48:75:42:3b:08:3e:9b:c5:53:2f:7b:00:9e:
7b:46:22:6b:6d:98:76:72:4a:70:46:4b:89:2a:24:6b:3c:a2:
9c:74:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:33 2025 by rpki-client