Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: 9PcUjtCp9p4Uq5xn/DUrzZfdgswuov2adbQbwu2oD2c=
Subject key identifier: 3A:F9:BA:6F:66:08:3F:71:A4:7A:6D:7D:CA:51:AB:B5:BA:55:37:B3
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 0197B8FCECF538659A8A46C207D7B43A5AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0E8A
Signing time: Sun 29 Jun 2025 00:01:12 +0000
Manifest this update: Sun 29 Jun 2025 00:01:12 +0000
Manifest next update: Mon 30 Jun 2025 00:01:12 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: 52h1OvzTvniB5TZi406JweM2qPsteSPi2yAolwPyH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ec:f5:38:65:9a:8a:46:c2:07:d7:b4:3a:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Jun 29 00:01:12 2025 GMT
Not After : Jun 30 00:01:12 2025 GMT
Subject: CN=3af9ba6f66083f71a47a6d7dca51abb5ba5537b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:ac:c3:1e:27:c0:15:15:ad:2a:8e:b8:97:
63:6f:60:1b:f0:cb:f8:30:c5:16:1b:db:bd:fd:fd:
0c:02:7e:24:0f:27:9a:6b:51:38:e4:cf:82:c6:9c:
cf:2b:41:4b:6e:b5:2b:b5:be:e1:01:92:c3:19:a5:
a1:1e:f1:c0:10:d5:d3:82:72:54:b9:29:81:2d:56:
64:e8:64:43:52:5b:1d:30:95:50:b5:58:b4:67:e8:
d9:db:20:d4:a9:d4:ff:cd:21:65:f6:22:2e:d6:b7:
cc:6b:1a:7c:37:d5:b4:bf:cd:1a:2b:68:6d:1e:8b:
d5:a8:ca:07:c5:de:cb:6e:85:1b:0e:98:e9:91:14:
35:2a:27:6b:aa:b4:a6:0c:a8:21:1f:e5:ef:12:d4:
25:ca:e0:4f:be:d2:3d:5c:91:82:07:fb:df:2c:63:
50:4b:e0:19:48:71:e7:d4:fb:b3:d5:31:9c:ec:bb:
2d:70:e4:a2:d5:d1:6e:c8:52:9e:0a:99:e5:81:b4:
6e:c0:c6:f2:fe:e0:cb:82:f2:e6:e5:e4:ba:d5:bc:
77:94:5b:bb:98:e9:3d:f1:5b:93:21:30:a0:cb:f1:
a5:a7:7d:9a:84:c0:5b:93:84:d8:b9:94:53:0d:8f:
a1:c6:b2:8a:27:83:c0:13:aa:bd:77:64:e7:80:bb:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:BA:6F:66:08:3F:71:A4:7A:6D:7D:CA:51:AB:B5:BA:55:37:B3
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:0b:3e:d7:76:83:be:dc:2d:ed:ff:09:19:ee:c7:dd:e7:
c4:bc:fe:06:f5:6b:5c:a4:42:6f:a0:59:9b:6f:b8:84:bf:13:
40:48:75:37:81:65:f4:f4:13:c8:08:87:59:64:d1:a0:cf:b5:
0f:16:1c:18:58:be:d2:86:c6:93:f4:11:e7:eb:98:a1:6d:d9:
cd:02:e7:8b:0d:7a:09:b7:19:02:02:c5:62:6a:00:51:8e:a9:
19:a9:2f:97:b4:7f:54:4e:1d:a6:ea:49:ed:c5:af:fd:a8:a6:
29:63:94:1c:89:70:b0:e6:48:df:1d:7d:aa:0f:52:e2:48:df:
ba:cf:a9:2e:98:0f:5e:8b:15:4a:de:9c:d6:0c:24:5f:7e:51:
ab:3c:44:4d:f0:86:ce:46:b0:b9:ca:fb:09:95:49:94:2e:24:
d8:75:47:7b:1e:38:b9:e3:83:3f:90:73:08:55:68:33:c1:86:
3d:4f:ba:a2:22:05:a9:93:f1:0a:ac:7b:32:c8:c8:01:31:21:
59:ed:36:aa:f7:26:02:a5:ac:e3:72:7a:17:d9:ce:4a:4b:f0:
2e:31:58:7f:ac:b7:77:6e:3b:a3:45:69:b6:01:80:64:92:72:
74:1f:7c:fe:23:d3:fc:eb:8d:ae:30:e4:91:15:a3:c4:84:d2:
28:0f:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:02:56 2025 by rpki-client