Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: 6p4VptfMvjM1C/9qoLUePF5EvTvlPnYWjAICIIRf1ZE=
Subject key identifier: B5:DC:E4:27:C2:CE:A3:BE:B8:52:45:3C:DC:1D:49:12:B7:85:58:70
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 0197B6A20DD4C3F6FEEDFED864729DA3C9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0F15
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: iFiV6OYV2M7O82JOff7qv8tSfJ5bJtQgzWxu9ENXKyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0d:d4:c3:f6:fe:ed:fe:d8:64:72:9d:a3:c9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=b5dce427c2cea3beb852453cdc1d4912b7855870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:b9:9d:92:9d:76:56:8e:fa:b6:a7:72:d2:
f8:bf:45:57:fc:0f:e5:06:0a:b8:2f:4e:97:fd:ae:
c4:a0:2e:ea:71:92:c4:09:44:b9:de:35:c3:ba:95:
d1:cf:1d:b6:33:6a:a2:2f:71:db:b0:9c:f4:88:49:
9e:bb:aa:b7:15:bc:be:d0:dd:fe:76:cb:6e:e4:b3:
ca:69:42:46:7e:29:0f:6b:fd:c5:77:00:5f:b7:33:
4e:70:86:f8:5b:0c:00:07:99:76:13:ae:b4:ef:6f:
a1:74:7a:6c:62:6d:37:2e:d1:4b:32:5d:42:91:cb:
25:15:fa:b0:54:e3:42:36:18:a8:2d:3d:23:a5:50:
53:32:bc:71:cc:92:cf:59:79:d7:69:e9:af:3f:19:
ee:de:ad:a2:c1:be:4d:04:96:93:b6:b7:8b:13:31:
f3:e3:aa:1b:d3:f6:09:8d:55:17:59:2d:f7:fb:4c:
f3:2b:01:46:dc:87:98:c5:3d:ac:bc:db:6a:c9:09:
5a:a4:44:73:ac:26:17:85:e6:f8:16:f4:80:19:0a:
a6:6f:92:18:6c:89:eb:4f:e2:7d:cd:98:1f:2e:b1:
e5:e2:e8:5c:7a:0c:21:5e:b6:7b:4e:64:d0:57:7e:
e1:34:c8:2b:09:5b:8d:5c:23:07:f8:9c:a7:03:8b:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:E4:27:C2:CE:A3:BE:B8:52:45:3C:DC:1D:49:12:B7:85:58:70
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4b:e3:7c:cf:98:23:8d:47:28:e3:4e:cb:e9:1b:49:f3:c4:
9f:e4:4c:5c:37:43:93:d9:c4:09:96:ad:c5:e1:c5:79:5e:ad:
52:6f:cb:19:56:7f:02:27:6f:8b:95:51:01:1a:03:2a:0e:23:
f9:f2:48:9b:80:fa:b8:dd:8f:da:1f:ad:19:f1:d0:05:fc:0f:
2a:a0:f8:8a:4e:de:b7:73:7f:5d:9b:74:c5:f5:5a:72:76:5c:
c1:90:d1:8e:7f:9a:8d:e8:2c:10:ed:a9:a0:7d:4b:1a:9b:ef:
12:46:bc:e4:a1:80:c0:74:b6:89:b4:6a:9b:5d:f5:d6:fd:5b:
67:34:43:4e:7e:ad:5d:b0:7c:8b:b6:c3:00:40:49:59:0b:d6:
d6:23:d1:8e:4c:6e:4e:41:d7:ba:0c:49:40:98:38:39:c0:54:
1a:32:23:1c:2c:7d:1b:16:df:8d:c7:f3:6c:ed:de:4c:b3:da:
2a:85:26:14:80:5e:a4:62:11:14:fe:98:c6:79:36:94:7d:c7:
22:34:51:78:92:0e:c6:fb:66:66:a5:57:67:90:1d:66:fc:69:
c5:35:bf:24:66:ef:73:7f:89:21:63:74:20:ec:ae:5f:fa:eb:
1c:21:3d:b4:ee:b4:15:b7:50:b5:c4:bb:40:12:7f:47:cb:fe:
3d:fb:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:32 2025 by rpki-client