Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: /qB5P5ii5e9TrUmNMT6Xf0q3dnudfzYRup5Dcn2+rmU=
Subject key identifier: AC:CB:A4:E9:65:4C:C5:BA:0A:3D:F1:39:C8:5F:E6:6C:CD:B0:EB:68
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0197B7B37FD204C0CE4CDDCC90D4A867567E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 1145
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: BrGlB7s+2cLGGmuNjiorld0EF1OnGQv7Y7PlAmHnTpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7f:d2:04:c0:ce:4c:dd:cc:90:d4:a8:67:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=accba4e9654cc5ba0a3df139c85fe66ccdb0eb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:fd:24:24:e9:2e:29:ce:e4:0b:6d:eb:5e:
3a:f6:81:f9:ab:dc:05:44:51:5c:f4:d6:ad:1a:97:
b7:83:ff:bf:fc:38:c9:c5:19:40:b3:66:7d:c0:26:
68:b2:c3:ca:3d:af:f2:c1:bc:a0:4d:f3:31:61:1a:
27:4a:b1:f1:ec:a8:b9:a4:ed:1d:16:aa:3e:f5:c2:
07:b0:27:a6:c2:79:b6:b0:96:27:6d:13:7d:a1:b1:
35:5d:0c:7e:88:6c:83:00:12:36:18:3e:5f:49:12:
ec:09:5c:01:72:09:eb:7c:3d:32:a2:f9:9d:21:7c:
a6:8f:ac:c8:b7:4f:27:26:74:e6:c3:7f:67:fe:19:
0d:a4:ac:1c:8a:8e:93:c9:5b:af:3b:03:08:b8:62:
60:ca:f1:e5:9b:17:89:a0:3d:e1:8c:dd:cb:48:d1:
3c:da:8e:36:27:c8:e7:f5:d0:0c:31:93:d1:c8:25:
2d:81:d8:03:de:02:a4:35:1e:50:4c:3b:72:11:16:
bd:d1:85:b9:94:87:15:d9:d4:3f:05:56:a2:21:ab:
c2:8b:48:82:c4:0b:c9:03:c8:f6:fd:fb:60:71:a0:
b8:be:dd:3f:1d:e7:9b:aa:f7:64:4a:9a:cd:b9:51:
bb:42:75:f2:75:8e:ae:57:e9:91:41:98:7a:57:95:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:A4:E9:65:4C:C5:BA:0A:3D:F1:39:C8:5F:E6:6C:CD:B0:EB:68
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:fb:c0:fd:1b:9e:d8:ae:47:2f:53:78:4a:6a:8c:10:01:
0d:a3:3f:42:7a:5d:9a:0a:ca:ec:cc:d0:a1:f0:75:4c:56:fd:
a4:3b:34:07:c6:54:9e:29:88:00:ab:d2:73:49:1d:b7:ed:a6:
7b:20:2d:ff:f3:7a:89:13:51:f9:c7:06:ed:1c:2a:17:37:67:
bb:75:a8:f2:01:63:52:ac:c9:8e:fc:a8:b7:5a:78:d2:88:6b:
fd:2a:42:32:cc:7a:b6:82:99:0f:46:e3:33:c1:bc:46:ce:f6:
00:a5:38:d8:65:74:bf:7f:cf:6d:9f:fd:63:ed:b2:89:6a:56:
29:4d:bd:bd:ee:51:ec:ec:a8:5c:19:7c:7b:39:f3:12:e0:23:
2f:2c:ab:d6:ac:f2:24:74:5a:11:d0:c9:85:2b:3d:7a:de:c6:
3b:3a:34:50:fa:85:6f:ff:8a:27:41:fe:b8:a3:fd:54:49:c0:
96:c3:ae:8c:33:86:60:fa:17:05:49:b9:5d:e8:2c:65:25:6f:
da:e5:71:9e:55:26:9e:49:f7:43:73:e6:05:23:d2:58:ce:bc:
20:cc:61:66:1b:ba:ea:8e:b3:fc:5d:01:b8:ef:3b:e2:a0:df:
99:d3:d5:eb:3e:13:04:c9:46:24:c2:d4:06:e4:4e:5e:11:e4:
9b:a8:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client