Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: NY7+moDY2+jn2PIRYvi4d/MsEmLFyXpAo2kjbLYNK5U=
Subject key identifier: 62:A3:4A:5F:AC:2E:D8:6C:82:2C:02:56:EE:1A:1E:72:99:4D:5E:9D
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0197C914F57AA437BA953620F5019F9952B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 01E1
Signing time: Wed 02 Jul 2025 03:01:23 +0000
Manifest this update: Wed 02 Jul 2025 03:01:23 +0000
Manifest next update: Thu 03 Jul 2025 03:01:23 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: 8zX7J5Fq07JUDKuYVtlTo2SX35nV6Ua5TYQybwq1S0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:f5:7a:a4:37:ba:95:36:20:f5:01:9f:99:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Jul 2 03:01:23 2025 GMT
Not After : Jul 3 03:01:23 2025 GMT
Subject: CN=62a34a5fac2ed86c822c0256ee1a1e72994d5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:ae:85:64:a4:1a:ed:de:49:7d:b8:c2:bc:
35:ea:cb:7f:63:0d:07:17:3f:35:b5:35:c3:7b:99:
6e:57:65:dc:f7:5a:b4:7b:48:e1:28:3d:70:57:50:
2d:50:86:4c:e0:cc:10:41:35:8f:b6:43:45:d1:bc:
4e:85:a5:63:0b:44:d9:05:34:93:e8:7c:9b:79:bf:
8d:69:b6:b6:8b:4e:77:69:04:99:e4:dd:3c:35:6a:
bc:3d:db:a4:04:af:c6:90:2e:7b:05:bd:3f:a5:27:
ad:f6:58:68:3b:4c:28:e6:8e:0e:01:f6:20:8c:3a:
8c:c3:bf:63:20:fd:8e:18:76:2e:e0:81:23:f3:c8:
fa:20:51:b6:75:b6:93:09:00:f5:2a:92:6f:53:0e:
a8:21:f0:c4:09:33:dd:f6:f4:df:04:ad:77:b0:9d:
f0:67:06:ce:45:4f:42:b8:48:58:e6:99:2d:ff:95:
7b:b8:3c:94:1d:86:cb:7d:a6:91:c6:53:49:77:0c:
4a:03:03:43:9e:ed:75:83:67:40:df:26:f0:64:2c:
58:44:74:d9:48:76:66:66:c4:9c:00:9a:2a:e5:b7:
e2:32:98:34:a2:e7:6e:f9:de:5d:4a:9c:70:3f:0a:
3f:1c:7d:68:62:f6:7b:bf:90:d0:6a:4f:69:bd:55:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:4A:5F:AC:2E:D8:6C:82:2C:02:56:EE:1A:1E:72:99:4D:5E:9D
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:52:f5:4d:dd:3e:fd:b2:73:4d:cf:bd:05:0f:75:44:b5:
34:b8:22:26:8c:50:a9:95:e3:31:72:76:17:d2:18:62:49:ac:
e4:33:f2:dc:0c:e6:42:5c:73:51:60:91:27:41:0f:61:2f:9d:
63:50:c3:e4:a3:23:9d:23:64:60:34:15:72:5f:44:0e:9f:34:
12:ad:27:92:0f:dd:76:aa:c8:ae:be:d5:04:a3:5c:16:55:c9:
d0:db:f1:17:b9:63:a6:6f:b9:b5:39:6e:7e:4f:b6:8e:9f:58:
af:04:78:54:1a:9b:93:f3:57:6c:28:43:b3:a5:c0:3c:65:79:
24:02:63:83:ad:9f:33:ec:5d:9a:78:74:b8:d3:be:76:17:9f:
78:96:be:50:26:9a:5d:f9:5e:08:39:8c:7a:af:c7:ee:f9:6e:
a4:da:6f:22:9b:01:1c:6a:e8:05:4c:34:39:ed:ee:1b:e4:bb:
c8:db:0e:dd:4d:3d:05:65:29:0f:62:12:45:2c:2c:2b:b8:98:
c2:19:96:50:65:d2:94:0f:a5:18:a2:30:81:68:f0:e6:f3:20:
3f:a2:b1:9f:e6:de:d2:6d:5d:56:3c:b4:77:31:4e:40:2e:07:
1a:d9:93:e9:2a:30:ac:43:b5:21:68:06:34:63:d2:26:5e:52:
6f:d7:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:25:30 2025 by rpki-client