Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File: n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier: H9MSq/k/6oBjmhu3Vge5lfh0LrtiSx8mqOj8WhVP7k4=
Subject key identifier: 18:5B:0D:03:76:A9:1B:5C:50:CF:FD:D1:8F:E2:20:51:68:32:D3:64
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0197CDCD8EC9C8AC90B3390822CC87CCC106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number: 15C5
Signing time: Thu 03 Jul 2025 01:01:29 +0000
Manifest this update: Thu 03 Jul 2025 01:01:29 +0000
Manifest next update: Fri 04 Jul 2025 01:01:29 +0000
Files and hashes: 1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
2: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: VHiCPf1vShvFl/dTaACOZLmnS/dbG431FD6ybULkaKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:8e:c9:c8:ac:90:b3:39:08:22:cc:87:cc:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jul 3 01:01:29 2025 GMT
Not After : Jul 4 01:01:29 2025 GMT
Subject: CN=185b0d0376a91b5c50cffdd18fe220516832d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:58:b2:93:32:7f:44:25:ae:c1:cd:d8:89:
22:8f:86:75:24:c5:65:fc:4e:7b:1b:ee:32:7d:ad:
9d:14:57:55:e8:6f:06:64:f3:fe:c7:99:64:82:ac:
06:3b:3a:a7:b1:b4:b5:83:7b:1b:66:d1:95:d4:eb:
15:3a:fa:91:a6:0c:f4:8d:73:63:46:53:b7:3f:d9:
23:ae:b4:6f:c6:fd:53:6f:4c:24:0f:07:7c:9a:f7:
ca:64:66:db:a6:3f:46:18:84:1d:9a:3c:b6:73:35:
fc:39:aa:47:32:e6:c3:ac:2c:ce:4d:7a:7c:a8:4a:
20:81:5f:85:1d:b7:01:9d:d5:d9:b9:5e:f0:bd:c5:
c6:7c:3a:30:71:90:51:1c:8e:0c:02:ac:0f:73:62:
2c:c7:ad:d5:27:0e:fc:7b:48:4a:f2:af:de:25:18:
b7:59:99:6b:be:1c:38:1f:99:42:26:f6:05:65:c9:
b0:81:8e:21:3a:92:55:39:66:0a:43:d8:15:b7:4e:
8e:ec:f3:69:ad:66:cb:ad:de:4c:47:ec:f5:56:44:
bc:6a:2e:ba:da:41:1d:8e:6d:8d:33:b1:d9:b7:c3:
e1:26:f5:f8:50:78:57:7f:cb:1b:6e:91:df:f3:22:
79:b7:ef:27:ff:11:9b:6e:fc:29:c9:4e:fc:40:1a:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:0D:03:76:A9:1B:5C:50:CF:FD:D1:8F:E2:20:51:68:32:D3:64
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:67:d9:fe:5a:ef:5e:a9:82:db:95:0c:70:f2:03:00:a5:b3:
b3:88:c5:a0:22:47:1b:51:aa:b4:73:04:7a:46:53:72:98:af:
ab:83:6d:0e:72:9f:12:84:e8:1a:0b:b5:e6:57:75:85:5f:b1:
82:bb:ef:44:c5:b2:cc:ed:dd:3e:b0:17:89:09:6b:58:5b:8b:
af:f2:48:8c:5e:ff:56:3d:a3:98:1d:79:5a:6b:95:68:53:fb:
24:1c:a5:de:48:ad:e0:43:e2:ce:41:63:f9:c1:a0:96:90:1b:
e9:c6:f6:48:30:9c:66:72:e2:e0:b6:01:94:b3:7c:77:ed:1c:
01:d7:fd:0f:d6:a2:94:7d:77:64:93:b4:92:df:b5:fd:03:91:
6b:c7:9e:f1:7b:49:07:35:be:54:bf:fb:09:1e:79:9f:ad:35:
1d:3d:09:b4:67:ae:ac:ec:38:54:3c:b3:f2:f0:11:dd:0c:03:
4a:62:9b:ef:fa:16:23:af:d6:e6:0b:f1:8a:3a:ee:9c:82:e5:
65:63:10:76:98:2a:a9:e4:4a:15:1e:4f:e5:d6:11:d8:9a:46:
9f:d9:18:5f:c1:47:55:71:c9:01:0c:ea:3f:5b:ef:8f:c2:21:
22:8a:3e:29:20:75:a1:2f:33:de:c3:97:a8:20:9e:7f:8d:be:
e5:ee:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:13:05 2025 by rpki-client