Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: YTbCrbO45qKvLRwAqeWSzU+WoiOXNMq0UcA0vvxzA00=
Subject key identifier: E2:4D:72:A5:C0:47:4C:67:E8:69:4C:EE:AF:43:76:00:D4:C9:00:DC
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0197C56EF20DA0332AD67AA3D0CBE7F400EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 15CD
Signing time: Tue 01 Jul 2025 10:01:11 +0000
Manifest this update: Tue 01 Jul 2025 10:01:11 +0000
Manifest next update: Wed 02 Jul 2025 10:01:11 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: 3gS2+crrJl1m32czJtuN/WHUKRw0Vd0PtnvvDCLrEZA=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:f2:0d:a0:33:2a:d6:7a:a3:d0:cb:e7:f4:00:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jul 1 10:01:11 2025 GMT
Not After : Jul 2 10:01:11 2025 GMT
Subject: CN=e24d72a5c0474c67e8694ceeaf437600d4c900dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:da:c7:37:08:fb:fe:be:1c:60:e7:fe:5e:
dd:b4:e5:6f:45:b0:0f:44:70:74:e8:cb:1b:c4:19:
f6:8c:23:ad:e7:ef:46:d8:80:06:01:a2:ae:9a:8a:
b9:23:f5:d7:0e:90:67:c4:62:63:4e:93:0a:fc:43:
66:e7:3d:fd:49:43:43:2d:1c:4c:47:c2:46:ba:74:
2e:92:a2:1f:05:da:87:7a:90:d8:1f:40:db:d9:f0:
05:ad:0d:45:39:d4:78:f7:b3:14:ff:30:26:a5:9e:
b1:31:6c:21:31:72:66:ac:5d:96:5c:19:a6:85:9c:
69:da:9a:c8:0f:63:d1:71:26:ab:49:8d:e8:1c:df:
7e:20:23:d5:3e:07:1c:af:3b:35:67:5c:5e:2d:ca:
5a:45:3b:cc:0d:67:83:2c:02:f2:5c:c4:26:ec:a7:
9d:32:37:2a:6f:ed:79:8e:b3:b2:5c:16:e3:34:f9:
fb:0a:cd:73:f2:30:2a:75:af:ce:0c:9e:53:fe:10:
8f:b4:59:0c:60:25:ef:4b:aa:be:2b:38:dc:ac:1c:
3a:b4:74:0f:31:c7:8a:a1:4a:a2:76:b3:c1:03:db:
f8:c4:39:d9:b2:ce:ff:a1:52:01:57:f7:a7:a9:c5:
a4:e3:81:e4:9d:f1:4d:7f:aa:db:01:68:46:51:2e:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:72:A5:C0:47:4C:67:E8:69:4C:EE:AF:43:76:00:D4:C9:00:DC
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a6:98:0d:41:59:e8:b7:84:72:cf:01:09:61:8d:81:e5:1d:
b9:5f:0a:6b:61:0a:73:b6:53:f4:14:3f:f2:f7:c3:19:c7:95:
37:58:3d:ef:3d:df:ff:4e:41:f7:a7:0f:e5:fb:52:85:b8:fe:
5c:c6:66:c1:87:5a:d3:7a:32:61:83:a2:f3:72:2a:69:bc:5f:
40:b4:ca:03:8e:4b:e1:49:be:c2:9e:6b:02:48:3d:8e:47:44:
8d:e2:01:77:f3:99:40:5c:bf:4b:da:3b:6c:2c:09:33:1e:55:
41:c5:73:fc:3c:8e:27:c2:c2:63:e4:33:9e:90:21:6a:8a:d1:
52:e1:8e:1f:20:cf:0b:e9:b0:55:67:27:11:a6:e2:27:f0:7b:
17:fb:b6:70:27:31:6f:96:9f:0e:47:aa:f1:70:9f:5e:52:bd:
f6:9d:16:a8:3b:11:6f:4e:54:7d:38:04:ee:03:82:2f:5d:34:
8f:0a:c5:50:3d:a7:79:09:7e:df:de:f9:0f:83:62:03:b2:9e:
90:f7:95:9a:ea:8a:04:9d:71:e5:16:76:de:5b:99:7b:60:34:
4b:3f:e7:39:f2:19:9d:07:f3:70:8f:a5:2a:e1:0a:46:be:4e:
99:15:ad:68:04:ad:c8:f1:4a:89:44:69:9c:ba:27:d5:9a:7f:
3a:36:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:31:13 2025 by rpki-client