Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: mBJcOELycALmDTDP379Fc0Qe/zRsqWu99+JD2WObWAw=
Subject key identifier: 19:10:A8:36:C4:40:7B:C8:07:60:4D:39:B5:9E:23:C7:11:92:89:26
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 0197B82136CC24ED7167406820D351DF7027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0C09
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: MY1pmUeGEwNEZ37+AOOldGN9YPk6auQJ/PsKTPA5r1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:36:cc:24:ed:71:67:40:68:20:d3:51:df:70:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=1910a836c4407bc807604d39b59e23c711928926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:fe:10:7c:86:06:ab:5c:02:9c:46:e5:a9:
e9:39:46:8b:6b:f8:9d:c2:3f:b4:b5:2e:6e:42:75:
c5:b0:d9:17:25:2b:94:75:0d:cc:fa:6e:96:df:a3:
7a:8a:ef:33:29:e4:0b:8e:26:40:ee:33:b7:e7:79:
4a:d2:ed:b4:c7:5f:2b:4f:d0:9b:b6:8e:73:b1:a3:
b3:26:f6:11:1d:44:e9:2a:d2:0c:b0:a3:89:90:b6:
f3:ba:bc:62:03:11:5d:78:3f:d6:e5:5e:3d:da:26:
4a:23:38:ce:dc:79:0d:3c:b5:9b:c1:6c:06:d8:43:
fa:96:4c:d0:58:77:1e:99:cd:64:57:b2:78:31:2b:
cc:8f:0b:33:2a:d0:0c:59:3d:51:11:38:40:f5:26:
6a:b7:d1:9a:7d:39:9d:64:85:ce:45:71:b0:ee:f7:
d8:d3:1c:03:78:41:20:8f:1c:66:a8:d0:59:dc:5c:
e6:f7:01:01:a6:8c:d8:c6:50:c4:55:eb:fc:72:ba:
de:39:da:85:ca:03:3d:45:49:72:eb:68:2d:15:55:
aa:50:09:d5:20:a3:b2:c8:1d:0d:f4:12:6b:d0:e3:
14:c6:15:5c:13:ac:c9:b2:82:aa:da:bf:60:15:be:
9a:8e:55:d1:51:fc:c4:88:57:4a:e2:0f:52:83:eb:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:A8:36:C4:40:7B:C8:07:60:4D:39:B5:9E:23:C7:11:92:89:26
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:50:f5:3f:9f:45:62:0a:f6:19:81:3a:de:9e:03:aa:5e:
49:88:50:02:b7:b9:02:7a:12:a6:fc:6b:4c:81:a5:a1:31:f9:
8b:ca:68:8c:d8:61:0d:f9:0b:cd:92:42:47:2a:6a:90:3b:eb:
97:96:02:1a:85:04:b5:da:7b:44:6c:09:66:32:dc:ec:92:fc:
dc:c7:20:8e:4f:75:5c:b3:d4:6e:ee:c3:95:e4:47:e7:e1:95:
40:3b:e4:70:72:a3:56:c2:d6:3f:cf:da:c7:8a:36:61:c7:cf:
05:8e:00:02:f5:8f:5f:1b:be:9b:02:29:ba:05:2c:12:84:0e:
17:e8:5c:24:cc:bc:f2:bc:3d:79:cd:19:21:79:4f:b2:9b:0e:
7c:4a:13:49:a6:b0:0e:09:41:d5:a9:4b:28:4f:b3:9f:1d:54:
e5:1e:b6:1a:d8:54:76:ba:22:fc:d8:11:9e:7e:cd:5f:e6:39:
0b:c7:60:c0:40:55:85:85:0a:93:73:eb:09:c9:00:eb:45:19:
a8:f9:40:85:1d:6c:b5:96:41:72:46:98:88:91:cb:6f:90:db:
bb:cb:e7:99:73:5a:7f:6e:8c:5f:fe:de:a8:4a:ce:41:40:6f:
05:5f:62:23:72:08:58:7e:5d:d9:b4:ab:2d:28:81:91:c4:f5:
65:8c:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:09 2025 by rpki-client