Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: Ior2lOEoemBvlZ1PkWgZshH+rzuOy80BO5yLUdzTCMo=
Subject key identifier: 69:0C:60:D1:9A:9E:76:C1:7C:7B:01:79:E4:1F:9E:53:7A:98:38:AA
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 0197CA5EE7A2D18E4DE1290B7FA201F903A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0B8B
Signing time: Wed 02 Jul 2025 09:01:46 +0000
Manifest this update: Wed 02 Jul 2025 09:01:46 +0000
Manifest next update: Thu 03 Jul 2025 09:01:46 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: ddo567Fo89X5OWxHVmoEuctTUowre1X5vTbpSAW6U5s=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:e7:a2:d1:8e:4d:e1:29:0b:7f:a2:01:f9:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jul 2 09:01:46 2025 GMT
Not After : Jul 3 09:01:46 2025 GMT
Subject: CN=690c60d19a9e76c17c7b0179e41f9e537a9838aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:2e:a2:ab:75:a4:fb:e2:d8:be:d5:96:53:
c6:ce:61:b7:1e:86:f2:5d:53:96:22:ef:e8:9e:6c:
c6:4c:4f:5b:d4:8e:bb:ce:86:92:1a:d0:45:09:44:
dd:6d:0a:f2:6a:ea:3f:c9:f8:ef:0f:53:eb:36:ba:
0d:ee:7f:a5:45:2e:ab:b2:4f:a2:7a:a9:48:27:bf:
50:24:29:0d:eb:0c:98:5c:dd:1f:08:34:a8:6a:19:
db:bd:e4:76:ce:8f:ef:31:17:b4:18:21:12:86:cf:
fc:b7:be:64:79:47:ed:f5:11:98:77:18:e9:f4:e4:
71:d2:7c:d8:1d:73:3f:3a:8d:6b:1f:ad:a3:7b:ee:
e3:75:b2:2d:53:23:52:6a:21:48:56:5b:cc:2d:f7:
6f:e0:66:a9:57:98:f1:7b:b2:69:5b:3a:82:b8:5c:
c5:e9:20:5b:ae:3f:fa:d0:ed:86:73:78:30:cb:5d:
01:71:c1:7e:da:48:51:90:f6:db:f5:3f:4e:aa:fa:
df:af:f3:a2:e7:95:3d:da:73:a6:33:d8:b6:0f:20:
dd:03:88:d1:c6:b5:31:24:60:ca:ea:dd:fe:5d:ef:
b2:db:7a:99:3d:be:57:6a:dd:4d:95:61:67:39:17:
80:28:98:0e:72:67:33:6d:cf:9f:b8:ec:17:43:a8:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0C:60:D1:9A:9E:76:C1:7C:7B:01:79:E4:1F:9E:53:7A:98:38:AA
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:7d:d3:07:38:a7:c2:50:cc:8a:d2:fb:e7:8d:23:52:ef:
89:e6:a0:e4:45:be:d9:46:35:61:c2:a4:ee:4c:68:19:8b:2e:
24:a9:10:70:38:7e:db:29:5e:9b:03:23:73:37:98:87:61:ef:
19:6f:c7:8c:c0:a6:f6:82:27:31:a0:28:84:b5:76:cb:c4:bc:
19:19:d1:9c:5e:6d:3f:a8:94:55:db:b4:fc:24:59:03:b6:99:
67:56:6c:dd:08:2b:6d:0d:af:35:58:95:b0:52:d9:25:f4:10:
3b:4d:28:60:ac:dc:1c:9a:16:47:89:85:f9:99:f4:cd:92:7b:
ca:46:28:60:84:58:c7:95:11:fc:32:00:ad:41:8e:0f:a5:21:
1e:41:17:dc:d0:b1:87:84:18:61:26:eb:da:e5:4b:50:74:52:
40:1b:51:1e:4a:ac:34:a3:9a:20:21:b0:9a:69:27:10:06:d3:
8e:28:36:19:d1:8e:49:0d:be:36:1e:85:2b:4e:a5:ea:9e:f6:
e0:bf:44:1e:48:ba:f0:17:7e:4b:1e:95:b1:f6:fc:8f:ee:95:
8f:03:a7:3a:8b:07:77:b1:ec:f8:85:f0:eb:52:e6:22:bc:3f:
58:ed:46:60:07:ed:9d:48:1a:7c:23:9f:14:a4:0d:10:35:b8:
46:6c:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:46:19 2025 by rpki-client