Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: p1zZXVLFvJKI5ZBKbYYV1MzB5g4e8P66D86uGMho+BI=
Subject key identifier: BB:72:23:67:6A:79:E6:AB:47:02:10:77:6A:A7:37:63:00:E7:C1:0D
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 0197B70EF353961512E1139DEF5115FA2767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: z7WOCF4Xd9qQnq4dE2kbntckCsILGbl5hHxhIJG4D5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f3:53:96:15:12:e1:13:9d:ef:51:15:fa:27:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=bb7223676a79e6ab470210776aa7376300e7c10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:60:10:d5:07:40:8d:83:f5:59:38:6d:93:
8a:16:1c:88:36:be:af:ef:8a:30:c1:0b:2b:b1:c7:
24:a7:6c:49:5b:49:97:8c:98:53:c2:28:fc:02:d0:
26:e8:9d:82:8f:66:c0:6f:aa:53:0b:0d:e7:cc:37:
4c:d5:2f:7b:15:c8:42:fe:b1:f8:d9:9c:92:f4:ec:
cc:51:41:dc:b9:0c:d4:6e:1b:10:98:99:5b:ed:f6:
d3:8d:18:cf:f9:fa:e9:48:60:c1:2f:09:26:07:20:
3f:ea:97:0c:2f:3d:69:db:0b:1f:20:58:b2:0a:b1:
36:1a:b0:53:de:13:a0:09:c9:e7:1a:09:02:de:8e:
f1:17:e5:d5:01:2f:0c:82:7e:c5:f6:b0:27:91:e7:
d3:8d:da:fa:d7:84:64:6c:f0:d5:0d:2f:ec:5b:d0:
2b:3c:a8:c8:f6:5d:9f:57:8b:7c:4b:17:50:2a:ab:
2f:e3:1a:1a:b1:74:02:cf:68:3d:b3:96:2c:6d:1b:
9e:e9:f9:fa:69:7a:d4:9a:84:9d:7e:87:39:79:80:
18:55:65:dc:e1:1b:1e:ac:2b:ca:ff:30:45:a9:ed:
15:87:c5:12:c5:59:f3:2b:9f:84:0c:d3:87:78:49:
9d:3b:62:f9:b8:91:8f:0b:2f:63:3a:36:fa:85:40:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:23:67:6A:79:E6:AB:47:02:10:77:6A:A7:37:63:00:E7:C1:0D
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:8e:8b:d3:ab:7c:30:b9:e9:d1:a2:87:57:7a:13:cc:f3:
b8:3b:d2:0d:4a:d2:0d:09:11:30:01:5c:08:75:d9:83:cf:60:
1a:2f:77:cb:10:9b:82:80:92:72:ed:20:90:19:2b:33:18:28:
3b:5e:ce:7a:82:de:be:3a:56:1d:8e:a9:50:3c:f9:72:d4:23:
7d:7c:bc:89:b5:ef:17:bd:ab:0d:c0:98:61:1f:cc:91:f7:47:
d2:92:28:ee:cc:0a:74:a9:74:bb:9b:f4:12:60:de:85:a7:0a:
99:e5:ee:a2:5f:a2:ab:1c:b4:d3:14:5f:23:e3:6f:05:94:dc:
05:db:7b:ee:f6:ac:31:7d:32:12:5c:6e:4f:ad:07:a7:d2:e4:
a5:00:05:6b:f8:f5:46:e8:b8:60:6a:d7:67:b5:8e:f4:08:bc:
7f:27:5a:24:bf:aa:05:d9:07:bb:31:ea:4e:9a:c9:d8:3a:00:
4c:15:5f:a7:c3:7c:3c:b0:e6:17:47:24:58:27:14:e9:a4:09:
b4:7b:88:73:fd:08:2f:1c:88:10:0a:ec:02:51:e1:d7:6a:4f:
29:ab:9e:9e:1e:54:1e:63:25:20:08:ff:d4:ea:d0:34:68:f1:
d8:2b:52:b6:98:39:f5:11:68:32:e9:d9:76:a9:0e:3d:b8:f9:
2b:5b:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:23 2025 by rpki-client