Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: SHgZDVwXpBmstYJBit6nE0p8Wt/VqOsuVSLsA1Yi+jQ=
Subject key identifier: 9C:42:85:FA:4F:D6:3B:6E:55:73:09:43:0D:BE:7E:81:03:1D:0C:06
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 0197B6A0719D5BFA035EE1EB30878902E7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0BDE
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: lx77rgY34oGYa/ywaNstlEb1tT03M3Hotxfy/vC7488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:71:9d:5b:fa:03:5e:e1:eb:30:87:89:02:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=9c4285fa4fd63b6e557309430dbe7e81031d0c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:74:9f:3f:1b:fb:d6:90:33:82:79:5e:88:
81:05:f4:bd:06:39:e3:ff:d2:07:c9:06:05:5e:cb:
fd:90:26:01:14:40:b0:af:8a:08:26:ad:32:a0:49:
64:07:19:71:b5:b0:9c:b0:9f:78:58:e1:7f:8b:47:
9b:ed:fe:45:ec:11:34:06:bf:ec:fa:2b:30:13:6c:
91:f8:40:cb:ff:0b:90:dc:4a:68:58:74:f0:8e:0f:
65:1f:2f:48:95:53:a5:6d:94:b0:ca:1f:0b:6a:12:
ea:c1:85:09:d6:90:ee:a8:24:d9:3b:8a:9d:51:3c:
4c:ad:17:bc:5c:cd:53:9f:07:18:86:36:e1:cc:bc:
d8:44:c2:fd:89:45:a3:ae:56:41:a6:d1:30:fa:c9:
9c:21:4a:10:bc:ed:79:9f:f1:55:52:3c:ac:14:f1:
23:c9:d8:fe:56:2e:b3:b0:23:cc:98:3f:10:fc:55:
06:0d:ff:5d:34:47:3b:e8:e7:1c:cb:ef:bb:6e:a0:
97:8e:00:5b:cb:9b:be:67:07:33:94:95:10:25:32:
e7:1f:54:ee:79:fb:a2:d7:1c:b9:1f:ba:53:45:40:
da:e3:31:49:b5:f0:c0:de:00:78:1b:ca:d3:21:ab:
05:59:b7:7f:af:ae:18:20:ba:18:c4:e2:07:fb:3d:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:85:FA:4F:D6:3B:6E:55:73:09:43:0D:BE:7E:81:03:1D:0C:06
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:50:57:6b:94:2e:be:03:07:17:d1:9f:5f:10:ef:14:b9:
3c:d7:50:54:8d:34:c7:53:b2:55:b6:ad:31:e3:eb:6f:7c:63:
82:e8:17:ed:51:54:86:d4:97:73:2f:9e:01:61:89:a0:d8:50:
03:9a:0b:c8:13:b3:e6:ef:ce:79:7d:af:b2:e8:fc:4c:df:8f:
ca:10:c1:3d:49:9b:91:f0:4a:1f:1c:f8:1c:80:81:5d:13:ac:
1c:98:5e:b4:88:e1:75:1d:b5:4b:4b:08:da:b3:df:93:fb:9b:
d6:60:33:a1:b0:e6:d4:44:b6:c9:ae:84:6d:78:f1:a1:62:a5:
96:2a:7c:32:cb:c8:38:08:8f:3f:5b:17:d1:66:f2:05:af:fa:
e6:e7:e4:9b:a3:66:6d:65:55:5a:d5:13:98:64:05:67:ee:35:
b5:84:07:2b:8f:6d:c1:76:21:9b:da:f2:9c:fa:21:8b:68:7f:
bc:4a:56:6e:c4:67:9b:d6:08:46:e5:9b:b5:04:c7:9c:40:32:
1d:80:c3:ee:45:00:02:a6:82:df:f8:5a:78:3d:36:c2:20:66:
ad:ae:55:f0:3a:e9:a4:61:36:eb:c3:91:9f:3f:02:5e:94:f8:
2e:68:ae:86:ef:31:3d:29:af:95:e6:fe:1a:cc:78:cd:99:c0:
74:a0:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:24 2025 by rpki-client