Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: Kheizj/iKSJE0r4TliMEmPV0CnrRwFb6wsfzk80BZyQ=
Subject key identifier: 57:95:F4:6C:21:ED:FB:EE:09:A2:D8:06:19:C5:E3:FD:EE:40:B3:1F
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 0197B934123FA19D3389C8B612B95E877B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0913
Signing time: Sun 29 Jun 2025 01:01:26 +0000
Manifest this update: Sun 29 Jun 2025 01:01:26 +0000
Manifest next update: Mon 30 Jun 2025 01:01:26 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: 2/M4SoqZwmY4pxOkWCfgLW5pvI09+Jj9ABRjlhChPYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:12:3f:a1:9d:33:89:c8:b6:12:b9:5e:87:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Jun 29 01:01:26 2025 GMT
Not After : Jun 30 01:01:26 2025 GMT
Subject: CN=5795f46c21edfbee09a2d80619c5e3fdee40b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:31:8b:d0:b9:0f:c1:e3:41:9b:ac:98:8d:
b7:64:1a:2c:44:cc:8c:0d:98:39:99:29:3a:77:4e:
7e:d0:04:a5:96:84:a6:70:ae:56:a0:af:90:f0:e2:
59:ac:50:a4:1a:be:f7:e5:64:f8:aa:61:92:39:0f:
d4:16:d0:0b:86:ed:9b:3a:67:f9:6e:d6:9e:49:fb:
b8:a5:2f:df:af:55:36:6c:07:6b:f2:f2:d1:8e:60:
98:72:28:6e:ba:42:67:aa:fc:65:2c:bb:54:ce:0a:
d5:1d:df:9e:3b:7f:30:1e:5e:76:03:d2:fc:66:89:
2d:48:48:c9:d8:e5:f6:a1:d6:2e:5a:73:d6:d1:ac:
a1:e0:ba:12:d5:eb:fa:bd:51:ee:d6:12:08:89:2a:
ab:8f:bf:0e:d9:22:82:01:05:00:e0:97:35:57:60:
93:fd:e5:84:99:04:fd:20:bc:4e:28:24:b0:fd:a4:
bb:87:5a:9d:49:e8:c7:6b:10:df:96:c4:87:c5:92:
10:4b:fb:00:a2:38:99:56:4a:d6:14:10:dd:e9:c0:
5a:ca:d6:f3:cb:d7:ae:7d:0b:ba:41:ba:ef:50:7c:
11:9d:d3:13:74:4f:84:ed:b8:43:8d:4c:b9:d0:90:
cf:f6:a1:f0:a6:3f:30:0d:cc:61:93:c7:f2:d3:51:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:F4:6C:21:ED:FB:EE:09:A2:D8:06:19:C5:E3:FD:EE:40:B3:1F
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:1e:b5:0f:ca:e9:a6:0c:18:d9:f4:84:af:13:03:0c:ad:
89:68:88:e7:29:41:44:79:92:d5:d0:c2:39:bc:db:ae:50:28:
30:4e:e3:f6:fb:a1:9d:d1:a9:1a:dc:70:5e:0c:a6:44:0b:c4:
94:c5:c3:46:7b:e8:6c:46:95:a3:a7:12:00:27:b4:5c:16:b1:
b1:11:d4:4a:c2:b7:9f:6a:e5:0e:24:33:8f:1b:ee:5c:56:15:
b1:3a:09:20:a1:d3:83:7c:98:b0:36:cd:1a:61:f7:03:c8:61:
96:f7:f5:3d:35:6c:39:7c:fa:89:88:7a:02:09:08:d4:9a:e9:
d2:81:63:8a:70:36:02:ee:55:06:60:07:6a:ef:b1:c0:b0:24:
ea:c7:9e:ed:75:ff:f2:9f:94:9a:fa:f4:5f:e3:42:9b:f9:05:
9d:fc:f6:3e:b2:cb:6a:cc:0e:a4:9d:a2:79:ee:b2:8b:5d:f5:
0d:a8:2a:a7:4e:73:5e:2c:7c:3f:b3:3c:d1:b5:19:a4:b0:ec:
4e:a3:8d:0e:90:89:74:46:69:38:8a:29:69:06:64:f8:3d:49:
eb:53:64:40:46:ae:b1:d4:88:fd:8c:0a:0a:06:ff:9a:24:d5:
2d:4f:c6:a4:c2:12:4a:00:fc:d0:75:52:cf:94:b7:5a:fc:56:
eb:d1:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:30:01 2025 by rpki-client