Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: 9MncI4ioxX1vx4RljJN3aZU6OCuZzQ7ngRB33JZWIJE=
Subject key identifier: B4:57:32:8A:F5:E8:A8:40:87:36:3C:61:9E:84:5B:96:B3:67:C5:00
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0197B70F67B88B190AD17A987C1E20F46F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1503
Signing time: Sat 28 Jun 2025 15:02:09 +0000
Manifest this update: Sat 28 Jun 2025 15:02:09 +0000
Manifest next update: Sun 29 Jun 2025 15:02:09 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: M3gF3zx7Ip46jqXCSLXtsxLlA60ZF3+y+6nRsydVsYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:67:b8:8b:19:0a:d1:7a:98:7c:1e:20:f4:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Jun 28 15:02:09 2025 GMT
Not After : Jun 29 15:02:09 2025 GMT
Subject: CN=b457328af5e8a84087363c619e845b96b367c500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:53:4b:b4:af:bc:4f:18:ca:83:0e:a1:f6:
7f:6d:3d:01:dd:9f:3a:76:8d:30:72:f8:03:72:f2:
a7:fd:78:f9:4e:13:1d:53:ec:bd:c4:7f:36:16:d5:
9c:0b:01:c7:33:7d:23:0e:cd:be:c8:58:95:1e:69:
6b:6f:7c:45:c7:ae:57:c7:16:68:7b:ee:a8:de:77:
6c:4d:a7:95:fc:b8:77:a3:52:41:5e:25:89:26:4e:
bd:89:b7:ab:6e:ba:98:d8:65:a9:de:ce:99:4c:0c:
66:83:9b:7f:fa:13:2b:0f:06:f4:19:24:3d:84:3c:
8b:6c:54:7c:f9:5b:84:f8:e8:dd:7a:3b:7f:35:b9:
bc:47:fe:ba:63:96:a5:54:88:32:04:69:4a:ab:68:
cf:ec:c3:60:82:e2:8e:9e:9e:1d:78:68:a2:fc:9c:
46:e5:d8:b4:50:b2:69:91:71:f8:ee:ac:c6:cb:8e:
d8:84:05:b2:65:4e:eb:84:56:ab:59:4f:31:4c:c7:
99:19:f0:4c:d9:ee:03:78:bc:19:ef:ad:b2:17:52:
6a:ef:b1:d4:f4:9c:8d:b2:ff:f6:e5:36:1a:b0:85:
78:70:c0:b8:63:8e:fa:7d:6a:ef:63:39:e8:0b:24:
1a:e2:8f:cb:bc:8b:c6:ef:82:97:07:0a:4c:4a:49:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:32:8A:F5:E8:A8:40:87:36:3C:61:9E:84:5B:96:B3:67:C5:00
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:67:e1:42:15:68:c3:77:f3:fe:aa:d3:b7:74:80:63:75:
c9:93:c2:c6:79:b6:5c:25:a9:bf:48:2e:9d:11:23:b3:0b:c0:
0e:b6:a0:a0:60:41:34:da:e8:de:5e:db:b5:29:55:50:6b:4d:
17:76:a6:c1:a8:c9:5b:61:66:f9:1c:d2:c2:45:a3:41:93:44:
b6:55:dd:21:68:54:7c:39:6c:3e:b3:86:dc:04:e3:52:08:bc:
fa:3e:b7:48:cb:24:b6:f1:7e:63:ae:bf:bc:54:46:6b:04:b8:
b9:b5:76:f2:40:31:15:1f:76:20:9d:18:6c:6d:c7:0b:39:2f:
0a:bd:8f:23:78:34:94:d9:e6:ff:8f:6f:a3:76:a6:d8:b3:18:
b9:18:ef:9d:9e:20:29:91:e8:86:89:d9:60:4a:fb:3b:67:f3:
8b:1c:f4:86:2c:8c:c7:3e:79:99:50:7d:ba:45:cd:8a:28:b6:
ba:21:bc:54:13:00:5e:ff:d5:0b:23:95:1e:cc:3e:78:3b:c4:
71:23:65:9c:ff:a6:6b:8e:ef:60:32:99:6c:0b:5b:a4:95:e3:
28:fa:c9:96:d3:06:c5:3e:78:ac:0b:62:ba:f6:6b:ae:93:af:
b7:ae:bb:a4:12:49:03:43:a4:12:9d:38:4a:7e:ae:f6:9f:d9:
82:4e:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:27 2025 by rpki-client