Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: WeArbRlZ/NKH7Xen9HqllOqz8SHYxhY2ddW4nQkrfY8=
Subject key identifier: 91:FF:C5:98:B7:B4:A3:41:BA:A3:10:D0:D5:3C:A9:16:D4:29:2A:0D
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 0197C42663B365BC899831772CC9950EDD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 04:02:19 +0000
Manifest this update: Tue 01 Jul 2025 04:02:19 +0000
Manifest next update: Wed 02 Jul 2025 04:02:19 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: 5UNDHpRjlO9uR5QEvLpABAhBp2TUWUpkPSLY3w1XSyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:63:b3:65:bc:89:98:31:77:2c:c9:95:0e:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Jul 1 04:02:19 2025 GMT
Not After : Jul 2 04:02:19 2025 GMT
Subject: CN=91ffc598b7b4a341baa310d0d53ca916d4292a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:48:8f:7f:04:93:92:ce:58:14:31:6e:fb:
8a:7a:62:0b:37:3d:24:97:22:5e:9f:97:c6:dd:25:
75:49:aa:9d:3d:25:32:e9:5b:d9:eb:2f:13:d3:d6:
89:34:36:a5:a9:cf:fa:8c:d7:10:ee:7a:71:2d:11:
8c:33:19:bd:91:b8:32:fd:ea:98:02:29:fe:c8:c2:
c0:d8:e0:a9:cb:e8:f0:3c:0e:38:c1:e2:e8:c7:60:
9e:24:2d:d4:83:34:c9:c0:02:23:76:70:99:bc:7b:
34:8d:f4:aa:c4:f9:0a:b2:69:27:a5:0f:b5:38:d7:
d8:5e:7d:e7:b9:e3:ae:6c:17:11:31:70:07:16:65:
eb:b0:91:fe:c9:ee:98:cb:e4:db:a5:ea:84:8f:92:
35:62:24:53:1e:4f:bd:fa:43:57:22:ef:48:9e:37:
ba:d9:6b:c4:d7:d9:5a:db:e3:2e:fd:67:7f:d2:8a:
34:ed:dc:dc:61:2e:a8:69:3e:83:7e:95:84:e3:8c:
a7:03:3b:d1:1d:a0:cc:4a:1e:c0:08:0d:e2:06:24:
a8:c3:41:b5:15:b7:8d:ef:f4:50:ab:9b:d5:50:00:
0f:28:be:1a:f5:8a:b9:2c:dd:d1:8c:c5:f9:3f:0d:
ed:2a:5b:26:23:22:69:2f:8a:16:e2:21:7f:71:08:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:C5:98:B7:B4:A3:41:BA:A3:10:D0:D5:3C:A9:16:D4:29:2A:0D
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f7:82:bb:ad:84:fc:cb:12:d8:11:2b:73:85:67:a4:31:1c:
c9:dc:88:e8:9b:df:c2:11:7c:16:27:c6:99:96:f5:09:b2:12:
3d:82:e4:49:00:95:ef:14:f9:ac:67:29:dd:4f:c3:37:db:0e:
20:40:b2:36:06:36:4c:7c:d5:f3:62:0b:d8:6a:20:21:e4:f7:
56:c7:1e:a0:73:75:c5:d7:ab:2a:94:62:ca:54:8f:0f:dd:46:
10:5f:9a:13:a2:cf:a4:84:23:b0:dd:cf:0f:0a:9d:60:fb:a2:
3c:74:39:43:c4:8a:af:79:e3:12:21:58:4c:1d:92:6a:66:a4:
b6:6a:05:a9:8a:30:e4:88:e5:bb:cb:94:7c:23:7d:6c:af:1f:
95:d4:23:fd:53:0f:82:13:9f:30:a5:7b:31:4e:22:41:fa:9f:
f9:51:d4:c5:5e:7e:6c:c0:11:a8:d2:66:d1:05:52:23:a5:44:
99:be:ca:ed:0d:cc:45:95:8c:40:7d:5e:69:6e:82:4e:d0:97:
61:66:ae:77:47:8c:43:b4:68:c5:52:29:fe:9c:be:8d:98:3c:
aa:f4:f8:4b:4e:b3:06:43:66:2f:da:86:8b:a9:a4:01:44:7f:
b3:3e:60:0b:20:f5:a3:d1:fb:00:eb:aa:32:d3:28:55:59:d2:
85:c2:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:10 2025 by rpki-client