Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: B568NOtHg4ExwImX4hvnuhSRwhUdFQdRMq2c5ITaMwk=
Subject key identifier: 1C:AE:FA:1C:88:59:B7:B7:A2:A8:AA:80:E8:2C:80:02:81:B1:96:7B
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 0197CB70FB32DD445B1832E104322320E380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 0F9C
Signing time: Wed 02 Jul 2025 14:01:08 +0000
Manifest this update: Wed 02 Jul 2025 14:01:08 +0000
Manifest next update: Thu 03 Jul 2025 14:01:08 +0000
Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: b+TMFwFFgfQmfzcF4LIeIbHULr3hryK+0F6jhJRVYzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:fb:32:dd:44:5b:18:32:e1:04:32:23:20:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Jul 2 14:01:08 2025 GMT
Not After : Jul 3 14:01:08 2025 GMT
Subject: CN=1caefa1c8859b7b7a2a8aa80e82c800281b1967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:44:46:43:10:98:78:48:b8:ed:d6:63:12:
d6:39:af:43:86:d5:57:7b:bb:33:c0:c3:89:b2:dc:
8c:ed:41:ea:f8:d2:a4:ef:90:e1:af:85:b1:70:f1:
14:c6:b7:7f:65:84:8b:5f:7f:0e:9f:6c:1b:1f:3d:
f6:f6:91:6a:56:fd:f8:bf:4b:68:e9:eb:35:dc:04:
09:e9:69:0c:a5:d8:98:ab:cf:cc:0e:6f:17:4b:cc:
53:c3:ed:70:7c:92:d5:e3:f4:b1:e6:60:d6:47:08:
b7:24:09:2c:88:bc:ba:26:60:a2:a3:d7:92:da:01:
30:33:8d:e8:5a:76:82:1d:86:24:59:50:61:a9:76:
a0:82:66:87:c5:ea:53:4c:99:c2:dc:46:f1:48:36:
df:a4:16:3e:39:7b:81:8f:ad:2c:c1:71:9b:cf:90:
f6:5c:f7:df:a4:e1:c9:da:4c:be:8d:a7:8c:a7:54:
0c:d0:bf:bc:61:35:1b:6b:f6:d0:96:4d:0c:d4:59:
fb:0f:3a:26:d1:76:34:7e:a4:e6:ed:96:cd:1a:91:
04:c5:7e:9d:8f:55:19:52:44:6c:40:3a:43:90:d1:
61:e9:db:24:e8:2c:a7:ee:25:da:dd:d1:83:46:b9:
89:b3:b2:42:3c:a6:d8:ba:84:7e:90:43:82:69:01:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AE:FA:1C:88:59:B7:B7:A2:A8:AA:80:E8:2C:80:02:81:B1:96:7B
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:55:f6:bc:50:a3:b4:e3:e7:41:8d:9b:8a:66:d8:3d:e1:
9b:bf:94:3f:c2:51:2f:73:c6:41:c6:2c:47:97:cb:82:9d:dd:
5f:fc:83:27:c1:7a:ad:20:50:89:51:ea:ef:8b:cc:25:ac:6a:
f3:60:0d:0e:94:5d:ab:56:05:32:6f:87:ae:3a:8b:b5:a9:de:
14:ac:e2:1f:c2:b7:30:80:dd:df:82:83:2c:31:a5:18:02:f8:
01:17:73:65:ed:79:6b:78:f3:44:85:5e:67:c2:d6:5b:ce:1f:
4d:96:5f:82:52:87:fd:43:e8:d5:bb:95:31:8e:21:56:78:80:
37:85:22:ff:69:d2:d7:a3:76:dc:a6:74:f4:48:3e:a8:40:70:
1a:37:10:5c:85:c5:3d:9a:e1:a9:30:60:4a:33:62:0f:1f:4e:
2a:e9:df:69:02:65:69:24:35:76:ef:ae:a1:78:38:07:ee:46:
44:40:9b:e2:75:2e:29:14:09:c9:b1:ac:96:15:0f:ae:90:94:
d1:62:4f:43:9d:66:f3:a0:62:73:ba:11:24:bf:a7:6e:d6:ba:
3a:f4:b4:b1:23:38:c6:9e:b5:02:be:5e:3d:46:cb:6b:3d:45:
a8:92:44:9f:3d:be:fd:9c:91:f1:27:eb:18:46:b5:f7:a1:6c:
f3:be:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:10:50 2025 by rpki-client