Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: ovnrPGh9eNyDJldfLr5rLq67Lth6o1IUKbx1YuPeTVc=
Subject key identifier: 16:82:A7:30:9D:B1:B5:57:9A:B2:59:29:75:6E:53:86:50:CA:F1:DE
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0197CBDF05EE93C9F5D25516FD93F5783B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 16:01:20 +0000
Manifest this update: Wed 02 Jul 2025 16:01:20 +0000
Manifest next update: Thu 03 Jul 2025 16:01:20 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: u2JFzCRPIGRIkR1zhuqBjlAOvi/kji5k+Z2ZIekyXT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:05:ee:93:c9:f5:d2:55:16:fd:93:f5:78:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jul 2 16:01:20 2025 GMT
Not After : Jul 3 16:01:20 2025 GMT
Subject: CN=1682a7309db1b5579ab25929756e538650caf1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:38:b0:3c:7b:14:6c:b3:3f:1b:2e:22:26:
fe:74:8b:aa:a0:29:14:63:35:ca:b3:67:9d:2a:61:
95:76:d4:0c:48:c4:6d:db:32:1a:cc:3e:20:8b:ec:
1c:e4:fa:1f:c6:91:61:60:ef:a4:f4:76:43:91:11:
0f:50:50:9d:d8:eb:db:ee:02:68:12:3a:9c:df:dc:
8d:a5:78:d2:eb:24:42:7f:cf:f8:8b:c3:2e:33:84:
f9:c3:c1:09:75:51:ff:50:80:c1:ca:c6:b1:fa:79:
45:fc:2e:7d:d5:5b:72:cb:55:b8:6e:ba:92:06:c0:
b5:b7:1e:bf:ec:20:d1:52:68:87:cf:7b:ac:9c:9b:
2f:ac:21:35:dd:ab:58:ac:ff:aa:dc:da:bb:a8:87:
90:e9:58:6c:c1:12:b7:8d:8b:4a:9f:69:4f:7f:bb:
4b:2b:a1:45:c0:e8:a0:6d:d4:de:94:0b:f1:8d:4c:
cd:e8:7f:42:56:34:dc:e8:51:a8:59:87:5e:94:cb:
79:c9:f6:ad:7f:68:01:59:77:3f:e0:ef:43:c0:1c:
c2:a8:3e:8c:5a:e7:0f:6a:53:52:b8:ad:38:bc:f4:
ea:bf:27:76:d6:51:c8:30:92:a1:82:6a:ef:17:f6:
7b:f7:04:2f:4a:14:3d:f5:5f:ef:9c:7f:ff:a8:c7:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:82:A7:30:9D:B1:B5:57:9A:B2:59:29:75:6E:53:86:50:CA:F1:DE
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:92:0b:c0:ca:c4:93:97:6f:1d:7e:3d:9a:12:e3:85:c2:
dd:e7:2d:f3:42:6f:00:a0:63:6c:22:b8:b7:b6:fa:60:c1:d7:
97:b4:29:8e:46:d6:eb:65:ed:34:1a:e4:f0:cf:26:95:dc:d8:
8f:e4:6a:ac:fe:76:5e:91:d1:bd:53:25:b9:be:97:b4:a7:b3:
b9:5c:39:53:f4:0d:9b:bc:62:e0:80:a7:38:ab:4a:b9:5e:ed:
7f:e1:b8:91:23:3e:e7:9b:46:70:4b:65:5c:1b:db:06:58:0d:
16:d8:00:83:8a:06:c6:94:7b:d4:9d:5a:22:cc:84:0c:ca:17:
59:e0:8b:c2:bc:4a:60:4d:80:fb:b9:e5:0a:25:c0:5d:61:01:
5e:27:ad:de:1f:fd:db:01:27:b1:62:41:c5:e7:66:6d:22:0a:
4c:31:5e:3c:75:8c:1d:01:6e:d5:fe:9b:c6:79:0d:61:f0:3a:
80:9e:ed:06:02:18:ae:30:1d:51:17:99:69:e4:9b:54:58:29:
93:f7:db:62:24:7d:d7:f9:b0:57:55:80:26:1a:fb:85:e7:80:
5b:c4:e3:3e:49:cc:98:e5:fa:9c:e7:ae:bc:fa:b2:78:b6:0a:
f9:9d:cf:66:b6:c6:b6:f0:f3:c7:3b:67:6a:7e:11:90:e9:3b:
9d:d6:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:33:15 2025 by rpki-client