Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: n0KZpSBPcmlKTXna93GmQGF13e8FiphylMXx6zK9+Co=
Subject key identifier: 23:87:86:47:1C:37:2E:E0:2F:B0:21:8D:67:B6:4F:8E:CC:C0:13:3A
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0197C2DBA63BC1DD2D9A9674CDAFD855C572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 0578
Signing time: Mon 30 Jun 2025 22:01:04 +0000
Manifest this update: Mon 30 Jun 2025 22:01:04 +0000
Manifest next update: Tue 01 Jul 2025 22:01:04 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: ypCOGy8Zk7PT87itrfuD1zgHUY6cchYh1GIFkMhI3Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:a6:3b:c1:dd:2d:9a:96:74:cd:af:d8:55:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jun 30 22:01:04 2025 GMT
Not After : Jul 1 22:01:04 2025 GMT
Subject: CN=238786471c372ee02fb0218d67b64f8eccc0133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:24:85:db:25:c9:90:aa:cc:e5:86:f5:3a:
07:3c:df:d0:d1:f8:fa:ac:52:10:4c:7e:05:34:08:
ac:00:3c:b0:55:cf:58:d3:ba:5b:2e:b1:39:ff:e8:
f3:26:f9:c4:52:97:df:a3:a2:47:23:ad:a2:ec:42:
5c:b0:6d:f5:6e:3f:92:cb:d2:5f:a0:55:ac:ad:e8:
1c:bd:2c:8a:e1:a3:e8:ff:9c:51:b3:26:cc:ac:6d:
41:f9:41:4c:cf:21:5e:a4:71:2b:81:f0:af:8d:54:
81:97:d4:a5:cd:9a:7c:7f:53:c1:90:b3:0f:73:7b:
44:57:c1:3d:1b:74:ab:62:f9:af:6f:02:d5:df:f1:
c5:35:9d:db:bc:f6:1e:b1:5d:f7:ac:2e:6e:06:e7:
ef:30:ea:3a:86:71:cf:30:42:5d:0c:d1:f9:42:66:
47:56:cc:50:5b:e7:e6:e8:0b:71:41:2c:28:f5:6f:
84:03:f4:ad:cf:20:17:05:35:30:a5:e6:42:23:3a:
0f:fc:35:b6:02:06:e3:c0:d3:b9:bf:a8:6f:28:e2:
b4:be:ce:1b:a8:a4:d2:3d:e3:8e:9b:37:85:70:54:
5e:36:15:2a:e7:98:31:22:83:98:f4:0e:a6:a2:64:
8d:d7:e3:fc:4e:4c:a1:ca:31:9f:67:13:b2:b1:d8:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:86:47:1C:37:2E:E0:2F:B0:21:8D:67:B6:4F:8E:CC:C0:13:3A
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ce:5d:cf:d8:62:b3:79:72:aa:4a:65:32:ed:a0:45:24:d0:
94:d7:9f:cf:f4:65:c2:3b:8a:b7:67:f3:1b:21:50:55:96:51:
d9:25:5c:b0:77:59:2c:93:de:02:6c:d5:10:b2:e1:05:17:57:
b9:66:61:0d:af:94:99:ab:3c:81:b5:61:fb:71:ef:5c:80:5a:
4e:cf:57:20:ba:78:a0:6a:96:09:6f:c0:63:7e:c5:78:fa:fa:
40:b9:8f:8f:2b:57:b7:47:45:67:08:cf:a7:1c:57:44:f8:cd:
1c:74:db:77:b7:c5:24:d1:f2:ce:9a:11:0c:42:ad:57:47:b6:
df:4d:aa:fd:5f:66:49:9a:82:20:cf:a5:33:40:78:c1:fd:e9:
15:f6:ec:38:4f:3c:e3:44:98:5f:8c:73:ed:6e:4b:cd:3c:e8:
e3:55:48:db:8a:a9:5a:6e:b4:71:dc:1d:45:b2:2a:14:cf:39:
8b:a0:f9:05:36:fe:28:6f:49:01:a2:e4:32:80:54:b0:0c:15:
8b:b4:7f:c5:f3:ed:94:fb:19:6e:35:48:19:13:e4:d9:bf:42:
a5:58:cf:2a:ab:c3:ab:7b:c8:89:b5:56:14:43:db:e4:91:25:
63:6f:e5:13:d3:8b:4e:1f:7c:dd:6d:49:71:46:46:54:6b:e1:
8d:4a:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:28 2025 by rpki-client