Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: ceWVeYHUCxyKgGQyp7JcEi8+D3Ba6gvfrg10vYKd33M=
Subject key identifier: F0:1E:00:D4:15:A3:4F:26:1E:EC:4E:3E:6A:DB:29:D9:B7:49:30:68
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 0197C614FABB79C5E8655E4A74F6A6FE9734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 09D2
Signing time: Tue 01 Jul 2025 13:02:32 +0000
Manifest this update: Tue 01 Jul 2025 13:02:32 +0000
Manifest next update: Wed 02 Jul 2025 13:02:32 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: 9bfIQJfVIUgfNEKcH6HyE+1Yf5DRyJkC1/lQ0FK0gv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:fa:bb:79:c5:e8:65:5e:4a:74:f6:a6:fe:97:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Jul 1 13:02:32 2025 GMT
Not After : Jul 2 13:02:32 2025 GMT
Subject: CN=f01e00d415a34f261eec4e3e6adb29d9b7493068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:35:c4:a8:59:11:51:4f:4a:98:43:af:3c:
6b:12:35:68:e0:b8:cb:3a:bf:7e:d5:ce:64:aa:af:
19:31:01:13:cf:11:4b:f9:e2:6e:46:b1:bc:d8:7c:
36:e3:ad:0f:fe:62:5a:c1:86:46:49:fc:61:44:b7:
26:9f:13:b7:f1:45:05:fb:da:e3:f8:3a:d8:56:5a:
37:c3:36:d1:da:45:63:f6:e3:75:b4:90:4c:aa:78:
a0:f6:17:93:fb:d4:13:fc:02:bc:52:64:84:05:e9:
3b:00:27:8a:cb:90:7e:61:8b:b5:51:fa:7e:40:ed:
b4:43:79:35:22:54:d9:87:fd:e3:33:94:ee:10:6e:
ae:9a:4d:36:97:66:ce:2a:28:2a:b4:c8:98:c9:c9:
4e:f4:2b:9e:c6:76:4e:71:1a:ca:64:14:3e:46:d2:
61:52:45:4f:c5:ef:e9:85:88:f1:b6:84:5e:74:b6:
ae:c6:5c:e4:e6:48:2a:35:5e:7e:dc:26:4f:ff:10:
a5:e8:d0:44:a0:20:85:ca:4d:34:70:99:19:6e:46:
f7:ab:d8:85:4e:3e:be:12:c3:1d:dc:e2:7b:51:27:
03:78:d2:63:6f:19:16:1a:17:21:73:dc:ed:14:5d:
2f:cc:69:29:02:47:0a:3a:f4:57:65:b7:f5:da:0d:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1E:00:D4:15:A3:4F:26:1E:EC:4E:3E:6A:DB:29:D9:B7:49:30:68
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6e:e0:bc:f2:4c:c8:8f:ad:8a:65:37:0c:b0:6a:4e:65:3e:
07:fd:bf:ee:92:54:e0:3e:6e:84:60:1d:54:60:24:2b:f2:ba:
6d:a9:fa:5c:a0:12:2b:4f:81:64:46:c2:4c:42:6c:2c:1f:03:
14:71:69:49:66:1c:20:d9:11:98:a2:b1:bc:5d:7b:4e:54:7e:
25:72:64:35:69:12:88:ea:d3:bc:9a:ce:e2:7b:00:7d:91:aa:
07:d2:62:9f:2f:0c:54:9a:b0:7d:d5:16:a9:0e:8a:af:eb:bd:
dd:ed:3a:54:f8:e3:12:ad:54:dd:37:22:d2:9d:c0:b2:25:04:
5e:42:b5:e0:57:b4:c3:8f:d7:ea:26:b3:21:37:0a:14:99:d9:
a2:59:fe:a5:c1:75:c0:af:5e:18:0b:1f:eb:7e:99:0b:4a:48:
3d:5d:79:5a:b9:11:e3:69:6d:dd:f5:6e:ce:d2:82:da:39:89:
c7:9b:15:60:d3:b0:11:7a:fc:40:f0:4f:25:d4:71:d9:14:48:
4e:22:76:0f:39:fd:53:65:19:c2:02:ab:c8:70:c4:13:08:60:
f4:d8:de:9c:42:e6:78:8d:00:05:ea:24:25:09:39:c8:e1:1b:
29:a4:d8:25:8d:2a:f0:d2:39:80:aa:a6:8c:b3:00:ca:cd:31:
d9:91:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:54:17 2025 by rpki-client