Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: CZRdi8XGXGlwFymeAD2lmmcye0g9mcCAkyfDOVdQYqU=
Subject key identifier: 74:68:32:6A:DA:F6:06:17:59:0B:07:F9:C9:51:B1:F6:B2:F6:69:38
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 0197C45C53C042F8FFCD012F80BB2A9246C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 0248
Signing time: Tue 01 Jul 2025 05:01:14 +0000
Manifest this update: Tue 01 Jul 2025 05:01:14 +0000
Manifest next update: Wed 02 Jul 2025 05:01:14 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: x/dfOF8uidMpbSct8cZi+gmn+5nBfMjSJkVA/R9yjaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:53:c0:42:f8:ff:cd:01:2f:80:bb:2a:92:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jul 1 05:01:14 2025 GMT
Not After : Jul 2 05:01:14 2025 GMT
Subject: CN=7468326adaf60617590b07f9c951b1f6b2f66938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c0:da:9a:d2:bd:f2:99:22:90:ef:61:30:
f0:55:9e:bd:08:7d:da:9c:cc:f6:a9:f4:a0:d7:f1:
87:e5:94:ab:9d:00:f8:20:b2:b9:d0:57:88:91:59:
d1:12:14:3c:82:d7:95:fb:2d:7d:52:d5:ad:49:6e:
47:52:6b:31:8e:21:28:b1:04:3d:78:dc:46:5f:9c:
08:9f:df:bc:e4:77:62:62:06:7c:83:ba:d3:3d:1e:
9e:30:94:1a:33:ad:d4:94:e8:a0:97:61:86:04:c5:
e2:a4:b9:ad:6a:d8:84:52:30:54:a4:c1:f2:bc:a4:
37:03:62:86:3a:f4:6e:bd:df:c2:a8:97:fe:a6:36:
68:2e:f3:d3:2c:c8:e8:b0:5b:55:52:82:0e:c2:d4:
90:74:dd:d0:ca:20:3f:b2:06:12:f1:cf:8c:b3:4a:
99:27:e6:ba:19:0f:7e:b3:00:d1:fd:3e:97:a3:e4:
23:46:f7:ae:f3:70:c3:76:f4:85:5e:06:45:ee:c2:
cc:05:20:df:5f:60:d7:b1:18:81:b5:d3:72:6d:5c:
62:ac:2e:5a:cc:65:50:7a:8d:14:83:22:4a:24:fd:
46:39:8a:c7:6e:ee:ed:08:32:24:77:5d:ff:58:18:
5c:b0:0c:73:93:7a:da:b7:3c:56:c7:b2:a2:53:55:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:32:6A:DA:F6:06:17:59:0B:07:F9:C9:51:B1:F6:B2:F6:69:38
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:37:6d:3d:17:40:9a:e0:1d:c5:01:e5:51:90:e0:70:e9:
82:af:14:c0:5e:af:a8:d2:44:21:ee:05:08:77:4c:9c:0f:99:
6b:5e:b6:0d:e1:4d:88:19:cc:35:70:70:79:41:2e:7e:2a:3f:
9f:7b:b1:18:b0:8e:98:3b:c5:40:ac:63:9a:39:de:c7:2f:d7:
2c:c4:28:fd:cd:7c:93:f2:69:bf:6f:a4:1b:4b:be:da:cb:6c:
9d:57:2c:22:70:48:e5:fb:9f:d7:37:7d:25:d6:9f:3e:2e:a5:
8c:fc:76:05:b1:a3:23:47:54:26:66:90:8f:68:36:7f:33:17:
fe:73:ab:0f:b4:80:81:00:c5:8c:e2:2d:5b:e8:8b:ba:c1:43:
ec:97:a6:ea:75:ba:00:cc:b3:36:36:6e:f1:70:e5:03:4a:79:
bd:13:1a:78:3b:51:3a:63:35:cc:0b:c4:d3:94:2c:dd:54:1c:
e8:1a:2a:d8:2e:5c:1d:b7:c3:f7:a4:bb:45:45:96:48:83:18:
1e:e3:20:9b:64:53:00:6b:ae:a0:1b:9c:20:7f:b9:48:21:b5:
5c:cb:69:e0:71:37:f3:97:75:43:08:b5:a3:bf:02:62:e0:99:
8e:07:58:8b:7d:1d:25:2a:6b:df:3d:55:73:66:2d:0a:0e:7d:
f8:d3:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:30:53 2025 by rpki-client