Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: wJW+pb/e42ePJRbYFLoa85X0P7jd4MEePm9KBADUbCI=
Subject key identifier: 49:53:F9:88:41:68:92:86:9E:44:EC:24:12:D6:F1:2C:AD:54:64:F5
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0197C048EB3B52C9DC9E64CF2D8008F49078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0D31
Signing time: Mon 30 Jun 2025 10:01:33 +0000
Manifest this update: Mon 30 Jun 2025 10:01:33 +0000
Manifest next update: Tue 01 Jul 2025 10:01:33 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: 91I+1YBFaCCyVDbQNA31g+ygnRAlL5P+EzJGr+KDgYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:eb:3b:52:c9:dc:9e:64:cf:2d:80:08:f4:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Jun 30 10:01:33 2025 GMT
Not After : Jul 1 10:01:33 2025 GMT
Subject: CN=4953f988416892869e44ec2412d6f12cad5464f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:45:34:24:19:a9:d9:9d:76:f7:85:bb:cb:
81:80:99:7d:1c:2b:19:dc:aa:99:51:9f:eb:54:b7:
89:18:45:45:cb:68:73:dd:f7:0f:ce:aa:4b:e4:90:
22:7b:7e:52:dd:c4:7d:94:dd:99:0e:dd:36:d8:e6:
b9:f9:b1:2a:d2:1a:45:05:3a:12:3c:00:c6:66:6f:
61:87:53:2e:49:b8:c7:28:d4:ef:0f:37:b3:c5:6f:
67:af:c1:d7:18:ef:a2:1c:00:fa:93:c4:7d:f5:f6:
10:a1:05:09:93:88:51:03:84:03:b6:7e:61:28:ba:
72:ac:cd:bd:fe:3a:68:7e:e6:16:38:15:e9:da:fc:
02:d3:a7:51:a8:de:6a:8c:b8:1a:d8:d9:3a:5a:88:
22:2a:72:4d:71:11:c1:e8:32:aa:80:74:97:2b:a9:
2d:5c:8b:3e:7a:47:b9:b5:6f:10:5e:05:ff:49:3c:
d3:03:3a:e0:93:af:09:5f:40:89:ae:ad:23:db:2b:
3a:f7:fb:80:c2:2c:14:1c:00:90:07:60:6e:14:a6:
31:1b:90:40:ef:8b:02:3d:46:c2:dc:14:6e:e3:f4:
1e:53:0d:1f:63:53:c2:ce:ad:e7:f9:59:05:6d:5c:
5b:52:86:e6:dd:53:aa:f4:93:18:93:e3:a3:a1:13:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:F9:88:41:68:92:86:9E:44:EC:24:12:D6:F1:2C:AD:54:64:F5
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:10:b0:f0:0a:d8:c6:9b:8b:34:58:7b:a7:b1:ab:77:4f:2a:
f8:58:3c:70:ac:ab:0b:08:7b:8b:8a:03:55:78:81:a1:a2:97:
93:3b:30:84:3e:77:3a:ff:e4:81:60:cc:52:23:95:d0:c9:5f:
52:59:ca:18:21:80:c8:4b:81:82:01:a1:3b:26:d6:46:d1:78:
64:ef:5f:0b:fb:de:10:06:c7:fc:33:31:4e:e3:1b:5b:99:2e:
ae:84:44:1d:3a:a7:fa:af:50:90:60:a4:a1:21:68:c5:ce:65:
a5:f6:fc:e1:cc:da:42:a5:45:27:5c:aa:89:a6:10:e1:ec:c2:
40:af:83:1e:7a:8b:10:71:0b:9b:92:97:1c:e5:a4:59:91:63:
2d:b9:cb:5a:9c:2a:a2:20:c0:15:e3:0b:1e:58:d4:56:7f:ec:
0e:68:a4:5f:91:0d:67:4d:8a:d1:44:22:9e:b3:e5:32:62:5f:
f9:28:d5:25:a6:af:3a:47:c6:91:b3:72:04:02:0c:4c:e7:11:
6a:fd:98:bb:90:5b:cc:a7:3e:24:46:b2:60:39:b6:65:ed:56:
a8:2c:e2:e0:64:e2:8a:56:3c:8d:fe:77:2c:a1:50:ef:a3:72:
d1:ba:7b:d7:4a:a2:77:54:87:fd:99:d9:0e:61:e9:ad:a4:fc:
f1:49:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:23:27 2025 by rpki-client