Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: CE196LhKt9m0KpCUjSmU3J/v/FjuH6GmcvI1JdzmLSg=
Subject key identifier: B0:A6:08:6B:03:A5:94:36:11:07:E5:2C:6B:68:61:FF:F3:48:05:13
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 0197B70E840F7C98639C4BEE4C2BC445F1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: /SA9NZomXimBdg+imEqlbl9GS+9MJGBaLlB7o15whaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:84:0f:7c:98:63:9c:4b:ee:4c:2b:c4:45:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=b0a6086b03a594361107e52c6b6861fff3480513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:12:c7:85:3f:6e:9c:96:dc:b2:17:e8:3d:
d2:2c:d3:44:95:fb:39:45:23:63:9a:c7:63:8e:81:
67:af:59:22:88:3b:c7:ca:1e:ae:26:1f:c0:ba:f4:
7e:d6:d8:46:8c:3f:94:28:b0:43:59:98:d1:7e:22:
17:d4:63:1b:c3:2b:b4:b4:c7:1d:70:08:dc:fb:cd:
f8:71:cc:ad:a9:cc:22:25:ae:e4:9f:c6:2e:bd:83:
53:13:a2:c1:a3:ca:86:92:11:43:bf:c0:fc:76:6d:
17:c8:2e:41:ac:8a:97:3b:ac:e5:65:be:b8:fd:48:
cc:c4:f9:46:9d:f2:d1:e1:25:5a:83:25:e8:21:1e:
59:da:3b:63:32:37:c9:f1:d2:98:39:40:44:4c:07:
37:25:fc:9f:7e:70:81:e2:1a:a8:5c:80:ab:9f:9e:
fa:2c:52:ea:38:35:55:dd:6d:9e:e3:6b:09:ac:8b:
53:7a:e9:cf:3d:75:8a:92:bd:0c:8d:f8:61:84:38:
64:9e:d5:27:9a:63:7d:73:75:bc:40:2b:23:6f:84:
1a:56:ef:b4:a7:0a:9a:f1:c3:8f:a1:1d:75:c6:16:
02:f0:f4:f0:76:db:57:3f:e0:85:72:b7:cb:66:6b:
bf:3a:c8:93:f8:9b:13:2a:80:44:79:43:a4:34:2b:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:08:6B:03:A5:94:36:11:07:E5:2C:6B:68:61:FF:F3:48:05:13
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:e2:8e:fa:67:62:e0:a7:d9:99:3e:cc:95:df:d0:4f:79:
c4:d5:21:09:66:d3:a0:4f:9e:ed:86:f5:40:59:3f:65:58:ee:
70:90:68:fb:25:ef:62:a8:36:19:c5:7a:ff:21:04:ee:dd:73:
7e:de:ad:12:f2:7c:e4:70:f8:38:bc:dc:21:f2:1c:0a:6e:fd:
86:d0:26:cc:d9:7b:63:ab:6f:1d:ab:bc:28:88:ba:b3:67:23:
9c:d9:fa:38:9a:24:31:4a:fe:ad:a3:74:dd:35:5e:87:6f:f9:
6e:b4:47:bd:35:62:f5:69:6c:52:ce:82:1f:a5:3e:51:4c:62:
a0:60:d5:0a:23:1e:d0:e0:35:81:72:ff:a7:b7:3f:f6:13:46:
cb:91:de:53:1f:15:75:ef:53:7a:63:79:a0:5c:c8:0f:ce:5a:
8f:3d:6c:8c:40:d4:37:24:5f:7d:f4:03:af:2c:1b:2e:47:ec:
9e:93:f6:5c:02:85:62:2e:bc:be:fb:d4:39:a1:f6:7a:61:ea:
62:8b:38:b2:ad:6e:a7:39:38:b7:07:70:26:d7:c0:7c:80:e0:
35:2e:ed:d2:4e:b6:34:ae:38:f0:4d:5f:e1:29:2e:70:67:35:
95:d9:bc:ea:dc:ab:f4:df:2e:91:f9:ac:43:af:e8:49:a2:31:
38:8c:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:29 2025 by rpki-client