Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: YqgcMDQQapqVMjPkR66dI8ADAbV6eFXq+6PflDGNuew=
Subject key identifier: F2:46:F2:90:4C:C3:34:7F:8D:79:66:8A:14:34:C1:EE:7A:A9:F2:CC
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 0197B77C8C89760CFE6DBC213626B6311BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0C44
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: VRvjNpYOLUxwre9tusXE63pI4Gu0PP/d7OX1hIBaW7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8c:89:76:0c:fe:6d:bc:21:36:26:b6:31:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=f246f2904cc3347f8d79668a1434c1ee7aa9f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:e8:03:1f:9b:bb:92:19:38:8c:4f:55:e4:
3e:eb:c4:08:21:52:6e:85:c8:ad:c0:85:03:f9:18:
6e:83:e3:4d:d6:23:82:66:60:82:26:69:cb:70:92:
83:9c:aa:ec:69:de:d5:5e:d3:5c:9d:ea:46:33:a7:
5f:1b:64:8f:b5:bb:55:22:c3:d0:5f:a3:57:d3:da:
da:e1:58:15:46:1a:23:be:cc:56:14:74:39:3e:df:
23:c6:e6:59:dd:4f:ba:1b:43:14:f0:25:d9:bb:ef:
0c:c0:1f:b2:d2:85:c7:bc:87:3b:c4:d4:33:f7:61:
3b:dd:cb:f3:86:90:a1:01:ea:97:aa:bd:09:bf:7a:
6f:8a:51:e6:52:c2:67:b7:57:64:62:b0:0e:bf:4e:
02:fb:89:65:1a:25:88:ff:c8:65:4a:a2:73:ba:e1:
7c:78:50:11:dd:23:d3:d0:41:c5:2f:f2:ec:9d:27:
f2:f5:d2:a0:fe:46:fd:81:1c:6a:f7:db:c3:45:a3:
0b:a5:c2:40:f9:56:73:c7:bd:fb:c2:23:b2:96:a9:
3c:e0:28:a5:45:04:04:bf:ba:85:87:4d:f4:d7:00:
b9:d5:4f:de:b9:98:99:dc:5a:fc:ca:eb:0d:4d:b2:
3f:a3:08:0d:14:32:ac:cc:8c:1f:ed:0c:2d:ce:ff:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:F2:90:4C:C3:34:7F:8D:79:66:8A:14:34:C1:EE:7A:A9:F2:CC
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a5:bc:99:f5:6e:09:ce:d3:4d:7f:88:06:a5:f7:3c:c0:58:
e8:14:8a:b2:86:99:ce:3f:42:f2:70:4d:5f:6d:98:9e:af:ae:
b5:ae:d7:6c:d2:a6:a7:d7:4e:16:ea:9d:3e:82:1e:4f:97:c0:
d9:f3:2e:5a:b7:47:72:a8:86:d9:f1:7f:7d:c7:5c:33:9b:93:
b2:79:62:78:17:3b:1b:b4:0a:80:57:ed:bb:6e:4e:21:16:06:
13:7a:dd:37:8c:94:b3:1b:83:e6:86:3a:88:d2:1e:4d:17:0b:
49:58:20:48:0d:9e:1e:8c:67:5a:79:7f:dd:7d:a7:48:aa:d6:
27:d9:7f:bc:f8:07:ab:54:5d:cf:aa:87:03:95:11:f1:cf:e0:
fb:75:34:db:9c:c3:01:8e:d6:1d:eb:ab:b4:d7:eb:f7:52:8c:
e7:7f:22:ed:ca:11:4f:7d:99:14:7a:15:6d:d4:35:da:52:1c:
72:e2:e3:4c:65:13:61:eb:b6:71:de:a7:b4:d6:36:d9:00:94:
fb:7c:50:c8:24:f6:db:dd:65:54:39:7f:00:b7:e6:c8:6f:d2:
e6:00:d4:34:1e:1f:43:ea:46:c8:87:8a:bc:4b:18:5f:9c:54:
e1:43:80:95:1b:f0:59:0a:58:cc:b8:a1:26:46:c1:ad:02:5c:
78:16:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:09 2025 by rpki-client