Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: TzNXEDxCNl6AT33sLB78uHOSg8yuCD97WQfRclQq8AU=
Subject key identifier: E9:E0:A5:EF:71:74:2E:ED:E5:D8:86:EA:44:17:15:8B:1C:15:E2:B4
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 0197C0B68344F5631FB00F5637A80258FAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 12:01:15 +0000
Manifest this update: Mon 30 Jun 2025 12:01:15 +0000
Manifest next update: Tue 01 Jul 2025 12:01:15 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: mynRIESUaXIoWgAvD4zQwpLtv2XcUYo5dRL9tydiVos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:83:44:f5:63:1f:b0:0f:56:37:a8:02:58:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jun 30 12:01:15 2025 GMT
Not After : Jul 1 12:01:15 2025 GMT
Subject: CN=e9e0a5ef71742eede5d886ea4417158b1c15e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e8:75:de:dc:d6:c4:cc:19:01:5d:fc:e0:ee:
e1:2c:84:b9:37:7f:6e:ac:99:e6:59:b2:9b:13:13:
c0:c2:fd:b5:74:96:6a:ce:30:55:35:c1:c1:a6:dc:
d2:8e:65:6f:96:a4:26:37:9c:e8:b3:5d:ad:44:bc:
07:76:07:2c:3e:16:fa:f6:3e:99:a3:ae:7b:b0:2b:
f3:74:22:0e:09:69:ef:f7:2a:48:74:41:7c:35:e6:
07:a7:f3:69:5b:6c:09:33:85:a4:4a:f2:88:12:8f:
90:38:c8:4a:3e:35:2e:ce:03:9e:1e:1e:cb:89:e1:
a8:aa:50:aa:6a:48:2f:f8:93:35:c8:ad:63:0b:3d:
b8:36:0e:b4:53:61:09:81:57:e3:60:c1:1c:c0:2c:
82:70:0c:3e:3c:91:18:80:d8:da:80:2e:80:59:78:
78:06:d2:33:64:10:02:6a:b5:a0:21:be:a2:2f:fe:
ff:e5:7c:15:ae:1e:4b:9b:12:d1:e8:8f:35:24:69:
a9:f0:c6:b1:3b:e7:35:49:64:64:1b:f9:7e:f5:78:
66:2d:e3:fa:2a:ac:c5:f2:04:bb:26:8c:5d:db:d4:
da:3a:7b:a3:c1:72:1a:2e:c9:1d:f8:39:c0:25:a7:
7a:06:b3:fb:35:1b:93:ee:f1:68:a2:cd:43:29:db:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:A5:EF:71:74:2E:ED:E5:D8:86:EA:44:17:15:8B:1C:15:E2:B4
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:ce:f9:c2:cd:57:ea:fe:31:10:6b:b7:d3:3a:d6:28:c5:
1c:ef:5b:94:c3:b7:e2:f4:f3:e5:49:6a:64:3c:c0:8e:1f:c6:
bc:c0:30:54:a8:ac:9f:79:77:05:a8:35:4b:f1:7f:84:9e:9a:
c9:73:de:81:1f:7d:c5:dc:0e:ef:ec:1b:d7:b1:e4:4f:4d:86:
8e:dd:eb:95:0a:9c:75:20:10:c0:4c:97:32:3e:f0:07:93:ab:
09:8f:4a:c0:e9:d4:4e:a5:75:b2:57:04:a9:0c:8b:a1:69:23:
77:3c:9e:5c:9e:51:dd:27:82:a4:c2:a7:99:31:c7:c1:9a:66:
85:c4:a3:38:94:32:39:d8:0f:a4:ee:f0:26:0e:12:6f:45:35:
3e:26:59:58:91:c8:32:b3:73:30:ac:f0:51:ca:d1:51:59:4f:
93:0a:0d:0a:4f:42:b0:b9:32:86:6c:ec:1f:0f:4e:a0:25:9a:
36:55:a5:f1:a4:19:6f:2d:7d:ca:1c:97:2c:8b:43:8d:eb:f4:
5f:82:92:7d:f0:d1:9e:2b:51:e1:e7:8d:36:19:81:73:93:7e:
f6:89:34:41:0e:51:92:85:61:66:81:7c:8c:93:38:75:1c:03:
3a:e3:eb:01:cb:e8:c0:09:26:cf:ee:c2:57:21:af:50:dc:de:
87:ef:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:36:28 2025 by rpki-client