Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: fkesSaMAGE3zYFFaKy7t6yNOez31EDHI5ooi74rWg8o=
Subject key identifier: AE:54:78:45:7C:94:1D:34:ED:87:C7:D7:1A:DA:7F:F7:8B:77:2B:D0
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 0197B6D760BBE28F514DB98C01FD208ED04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 0E84
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: HiE+4IuzvbxrW+U97gP6yRfsY+nc0aD1VpD9SlyB72s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:60:bb:e2:8f:51:4d:b9:8c:01:fd:20:8e:d0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=ae5478457c941d34ed87c7d71ada7ff78b772bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:c4:48:55:1f:4a:d4:a9:80:a4:f1:02:2f:
6e:fa:8e:31:ad:c7:ed:1e:f8:02:fc:48:4c:76:cd:
ed:b1:ca:31:a2:2b:ca:d1:3c:5a:2d:94:5c:b3:03:
4f:f3:02:d3:3a:bc:89:4b:e6:b4:57:bf:df:d8:ef:
eb:f6:cf:57:57:22:fb:8d:a4:4d:4e:b4:9e:ee:ff:
67:22:ce:3d:c8:93:44:0a:26:4f:50:1e:6c:3d:9d:
cb:06:cc:db:df:52:5d:bd:81:d8:e4:82:45:ad:c3:
85:64:a8:a2:c3:76:3c:8e:3f:35:7d:10:53:d7:10:
c1:70:de:b3:d7:bb:9a:8c:f8:ba:b2:6f:86:0b:ed:
d7:30:ce:e2:09:0d:ba:e9:3d:84:a3:cf:60:b8:5f:
1e:a5:2b:1b:2d:40:58:f1:59:ed:7b:a9:c2:bd:dc:
e9:08:d7:98:f8:43:31:59:c9:54:76:03:ee:71:0a:
b5:d8:a7:79:01:50:ec:2c:0f:04:be:ba:b1:a7:29:
3d:93:cc:af:95:6e:e8:8e:b7:f5:27:f7:31:a6:ef:
a3:84:b5:cd:8e:49:d9:eb:79:98:28:40:56:24:48:
b4:0d:37:41:d8:53:bc:f2:60:32:45:45:46:b1:49:
82:d8:8b:17:2e:12:b6:11:74:ee:9e:b8:b5:60:53:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:78:45:7C:94:1D:34:ED:87:C7:D7:1A:DA:7F:F7:8B:77:2B:D0
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:56:7e:f5:47:ac:fb:e2:fb:a8:ce:73:a4:07:ff:fd:6e:52:
5b:db:8e:cc:7b:b4:58:f8:28:60:42:e9:b5:77:2c:09:3c:e2:
ac:04:70:82:6b:07:22:20:9b:5b:53:3f:37:ff:ec:75:b7:09:
ea:28:10:f9:aa:29:02:04:8c:5d:e3:39:02:0e:16:5a:51:76:
5e:33:c9:39:58:58:92:39:9f:6f:03:36:8b:47:6f:bb:f6:a2:
fb:3a:f2:e3:24:3a:b0:cc:a9:d3:20:43:4b:6d:cc:bf:85:70:
e6:72:a5:29:7c:a3:22:25:31:4d:28:cb:1d:77:c6:67:8f:be:
e5:f4:e7:2f:c5:b6:07:0e:01:20:88:28:8e:64:ab:a1:7f:14:
93:68:da:73:d1:b1:7a:27:ac:91:cd:3d:57:72:58:06:31:e6:
c5:44:12:9e:68:14:d9:b7:47:0f:c6:86:e4:9f:e6:70:12:7e:
f6:4d:3b:66:f5:e5:e4:14:87:37:1f:79:ad:11:5e:55:d1:01:
0a:3e:b5:e9:9e:e9:99:88:da:a1:7b:b1:1e:6c:c2:85:21:01:
d8:31:b4:b3:82:a3:19:7f:74:e0:34:dc:89:42:0d:d0:9a:8f:
b2:94:ec:0b:04:3e:4c:9e:57:1b:2c:32:0f:58:7e:37:ea:b6:
b2:e5:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:43 2025 by rpki-client