Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: ef/diVzClQ8G4ubyYnBxQwGcCJucEfRmFve+mm5atOU=
Subject key identifier: DE:BF:1B:F0:4B:B0:CC:8A:5F:FB:59:73:7C:C0:F3:21:84:89:F9:C5
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0197B6A0E1EA281BECB598193406B814F4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0C47
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: WlYyqL7yn8oR6nGa9iLbpkV7XhO4CmbXc8poYpy1joE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e1:ea:28:1b:ec:b5:98:19:34:06:b8:14:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=debf1bf04bb0cc8a5ffb59737cc0f3218489f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:f3:e1:ac:3e:f6:a3:f9:b9:19:bd:df:50:
12:b1:57:f6:9b:68:c0:1b:65:2e:92:9d:54:09:42:
d9:b6:73:9b:dd:e8:46:fc:cf:eb:61:1c:62:81:2e:
cf:56:eb:cf:5c:95:c1:a4:38:4b:79:41:23:59:da:
58:e4:e7:76:08:d4:88:f1:20:a2:98:de:67:35:4c:
97:07:1b:6f:9d:2a:58:5b:f4:ae:72:85:32:86:27:
88:71:07:33:22:b0:88:c5:55:f0:64:f3:a1:94:b3:
ac:e5:34:93:3a:99:69:41:3a:5e:e8:12:06:fd:50:
a4:b6:18:8f:1e:a2:a1:bd:34:1d:d4:14:be:7a:34:
fa:7a:63:a4:ae:7a:c5:7b:d5:92:30:1a:a0:18:a2:
3f:09:05:5e:8b:c6:70:1a:29:e1:d4:4c:5c:bd:66:
79:d7:47:95:9a:7d:10:3d:aa:10:f8:2e:4d:27:3e:
2f:3a:9a:f8:30:07:ff:2e:bc:96:b6:81:06:69:24:
d5:14:87:49:fe:3b:bc:95:fd:80:3e:2b:89:22:f3:
1a:a3:40:62:c2:1f:4a:92:d6:1e:79:38:84:3b:13:
ff:cb:a2:f3:bd:ea:04:47:ed:08:73:89:e2:1c:8e:
f5:bd:97:03:3b:75:9e:36:20:d9:94:11:ed:c4:26:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:1B:F0:4B:B0:CC:8A:5F:FB:59:73:7C:C0:F3:21:84:89:F9:C5
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:7b:69:0c:8e:e5:fc:cd:ec:9e:da:21:6b:3d:e1:ff:3c:
7a:cf:df:4f:4a:ef:b5:70:e9:ca:a2:88:30:47:41:97:e5:0d:
26:91:c7:4e:13:b7:38:96:c9:ed:7b:f6:e3:05:a4:21:46:90:
d4:07:f6:d1:5e:37:e9:6c:52:76:5c:a2:77:99:18:d8:47:b7:
6a:97:19:70:56:27:9e:10:82:18:5b:16:1a:09:1e:c9:75:71:
ab:21:30:14:cf:72:4f:6a:02:fe:75:7a:e1:8a:0c:19:eb:c0:
ae:8b:0c:83:ca:c1:17:59:ef:70:d2:79:df:dc:4a:8a:7a:05:
d0:bd:4c:6f:40:50:fb:44:a2:e7:4f:fb:4e:85:31:22:a5:9f:
30:09:ac:be:fd:71:38:a4:c6:39:cc:5e:f8:0a:cd:22:e6:93:
df:f0:1f:a4:37:c9:16:4c:1a:1b:71:85:6f:0d:7b:c3:8e:32:
1c:34:cb:ea:a3:4a:c5:89:fc:c5:45:7e:ba:d3:4f:56:42:8c:
47:91:0f:f8:bb:e9:dc:3f:b6:42:84:70:c6:09:c6:cd:76:8e:
c8:11:db:5b:bd:aa:8b:93:74:de:19:50:82:33:2b:be:01:fa:
e1:10:6f:4d:2c:27:1d:61:24:e3:d2:fc:8f:f3:25:4b:5c:cb:
f1:70:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:04 2025 by rpki-client