Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: MeSqjGr1mDb1Qi8m+hSxSSoa27VBZjXg2IWKUugtqZQ=
Subject key identifier: 1A:DF:AE:8B:7C:DC:AD:9E:95:B7:9C:89:C0:8E:68:FB:46:9E:C1:4E
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0197B74590EB4DA8BF5D3B8DF878DA194108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0E75
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: oxnDPIR/63Dnwy0XX7T+7E8UpnUXxoA8E4LzENye4r4=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:90:eb:4d:a8:bf:5d:3b:8d:f8:78:da:19:41:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=1adfae8b7cdcad9e95b79c89c08e68fb469ec14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:e6:1f:8e:7c:d1:ca:a8:41:17:84:0f:66:
5e:72:cd:6d:3e:e5:ad:42:be:54:6b:f8:98:e7:e1:
fa:fe:06:12:3a:22:04:34:d1:32:6d:6a:a6:77:0a:
da:59:ca:d9:d7:0d:14:ac:37:56:bc:ce:fc:6f:8b:
13:f1:8f:58:a5:a3:6d:03:bb:af:17:e3:c3:8b:da:
c7:ea:95:5f:c5:58:49:46:e4:28:fb:b9:a4:66:33:
61:32:72:5d:35:6f:f0:f1:a0:b7:5a:6d:a0:50:c1:
e4:e1:f5:6c:53:e3:97:21:94:36:58:4e:a3:42:6e:
b8:af:0f:1a:c2:16:84:2c:ce:9d:49:4d:78:2f:39:
3e:26:55:f5:18:6b:6e:f7:78:76:3d:41:f6:a8:2d:
37:2f:93:30:b4:54:e5:b8:a9:95:3c:bb:26:f0:28:
58:8c:70:1e:ab:8f:b2:1b:ec:01:4e:ad:ee:fe:60:
06:b3:4f:b0:51:ae:7a:15:83:92:41:6f:96:6d:e7:
ae:30:5a:42:fe:3c:12:a3:0a:62:49:05:75:00:22:
10:7b:bd:d0:92:c9:96:12:72:c1:2d:7e:ae:eb:ab:
9b:5f:9c:88:d6:d2:fa:b8:2b:d8:8a:c4:0a:31:af:
8b:8c:97:8d:c6:36:a4:f5:d3:f5:07:7a:9c:1e:29:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:AE:8B:7C:DC:AD:9E:95:B7:9C:89:C0:8E:68:FB:46:9E:C1:4E
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:09:ba:fe:e0:28:d6:8e:ff:bf:db:69:b4:b7:b4:a3:a6:
d7:45:02:40:15:c0:89:1d:df:f8:57:5e:e9:5f:f7:65:ae:7b:
51:c8:a4:71:da:36:00:f9:1f:c8:75:05:c7:9b:61:e7:61:d3:
0a:b5:ca:61:ea:b6:e1:00:56:1e:9b:ac:26:4e:b8:a2:33:8f:
8b:21:ac:2f:25:77:94:a9:1f:17:24:d1:e8:b0:70:90:2c:af:
23:20:41:26:b1:71:5c:84:14:be:54:88:ed:86:72:ea:53:a5:
f6:a7:3e:a9:4e:67:86:13:3e:f8:5a:ec:68:19:2d:b9:c9:42:
82:fb:09:b0:84:a9:d1:e1:e0:84:11:a8:1f:dd:9e:30:f1:d4:
1b:61:d3:ed:cf:bb:9c:5b:4f:fd:59:8d:5d:de:06:87:57:d7:
19:bd:19:46:d0:49:31:b6:f8:c5:e3:fe:47:4d:f3:0b:d8:1e:
0c:15:74:bd:a1:ba:7b:c8:49:98:02:9d:53:9f:20:07:87:61:
b5:a9:0f:7b:5c:f0:dc:33:d5:e2:ec:b0:9b:96:c5:08:dc:98:
86:1b:99:90:fe:c2:9d:ce:e8:f5:85:ae:21:95:37:0c:5d:bd:
a8:79:05:f6:a6:46:92:e8:f5:e1:84:5a:b2:ff:42:f5:33:3a:
a5:1e:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:17 2025 by rpki-client