Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: X2CrEq9QEtNlQDcW/G/M1ePPe9qSb6kzrY6LG+zLiBA=
Subject key identifier: 56:BA:3C:0A:BA:3F:24:5F:69:16:FE:F3:A4:67:14:B0:D9:AD:14:8C
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 0197CBDEE4BB2C1863683E1A42FAD4859287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 02A8
Signing time: Wed 02 Jul 2025 16:01:11 +0000
Manifest this update: Wed 02 Jul 2025 16:01:11 +0000
Manifest next update: Thu 03 Jul 2025 16:01:11 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: XgPzMhI1/IbKeIVeM866xc6sqC4naQwdVOMsGVtvyNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:e4:bb:2c:18:63:68:3e:1a:42:fa:d4:85:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Jul 2 16:01:11 2025 GMT
Not After : Jul 3 16:01:11 2025 GMT
Subject: CN=56ba3c0aba3f245f6916fef3a46714b0d9ad148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:c3:2c:59:fc:c8:e7:1c:bf:5e:ff:6f:f6:
3d:6e:c6:b3:f6:cb:fd:3c:3c:38:39:d2:f6:23:a6:
bb:dd:12:5b:ec:ba:5c:fd:cb:f1:20:22:1f:b3:71:
e4:43:6e:93:eb:91:53:69:33:59:ce:a3:c9:e0:eb:
33:ac:75:90:93:03:44:c9:cf:3d:cc:0c:3e:0e:58:
46:0c:63:d0:da:16:55:b0:27:96:33:d2:21:75:39:
fa:95:fa:22:ee:c2:00:22:53:5e:f8:79:ca:e1:ce:
4f:44:77:87:17:31:4b:a7:9d:8c:e0:5e:73:23:75:
24:47:e5:48:a6:49:26:a5:6e:f1:29:48:c1:32:b3:
14:97:7d:86:ae:a3:d4:b2:5e:21:97:b7:5a:6e:cf:
84:bf:d1:b4:21:d0:9c:4a:33:61:e9:cd:99:0b:ae:
c0:f9:40:78:b3:bd:96:e0:9a:f2:8d:84:fd:ff:4c:
7d:b7:ce:2c:ea:1c:65:5f:5e:29:b9:30:cc:90:20:
5e:34:23:a3:08:73:af:87:77:7e:71:a9:5e:7b:a2:
85:6a:d6:48:b8:02:ce:c5:90:e9:0b:af:7f:ad:ba:
4d:1e:40:03:4e:12:a9:6b:8e:f6:6a:e3:e0:11:ac:
9e:4f:39:d1:b2:81:9c:0e:32:cd:f6:d4:9a:a4:09:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:3C:0A:BA:3F:24:5F:69:16:FE:F3:A4:67:14:B0:D9:AD:14:8C
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:fc:a2:9e:10:a6:54:98:8d:06:6c:73:93:9a:97:5c:b6:
80:7d:99:2d:99:cd:cc:65:c5:72:48:0e:01:3e:39:0c:19:37:
82:45:77:cb:f4:5f:4e:e1:0e:dd:3e:86:0c:53:e1:2d:c5:45:
ff:d9:03:46:ff:08:f3:ea:ea:81:5b:6f:ed:4b:12:35:b8:5d:
f0:e6:68:c9:02:98:86:6e:c2:a8:07:e4:ee:04:75:22:ca:5c:
ef:60:77:12:73:f6:34:89:58:e6:43:8e:02:4b:2f:4d:4c:c9:
72:09:0b:2c:51:df:06:4d:de:7a:a7:44:78:ff:fc:04:40:46:
c1:f4:5c:74:92:e8:c0:d1:40:3e:35:9c:5d:2d:d6:a3:d9:b5:
79:ed:c2:b7:f9:68:1f:b1:c3:86:e8:63:a3:74:87:6e:af:75:
d6:c2:23:2d:1a:24:70:6d:a2:12:01:e3:87:1d:e0:87:7a:bb:
32:ab:7a:da:68:4f:a1:72:ea:4d:9d:f2:c6:87:fe:9f:e6:be:
93:49:f4:2e:6e:f7:a5:87:79:81:c6:0b:54:b9:8d:80:8f:f0:
95:2d:cf:a2:46:7a:c6:f4:3c:c8:0e:6c:cd:bd:6b:bf:ab:fb:
2c:72:79:fd:e2:7f:d1:c7:3a:a4:39:21:81:72:9d:88:e6:19:
05:7b:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:30:43 2025 by rpki-client