Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: X8eAjlfGSh7KUI+QwgTLWghdl9ivN4pKseLGm4HuT08=
Subject key identifier: 6D:00:5F:84:98:7D:A2:30:44:40:86:BE:7E:EF:52:CF:C2:E3:C8:B3
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 0197B77C8473879881F8AE7AE43B5880BD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 044D
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: GiJYSZmHP4AF_ON-lln6mBkXaRk.roa (hash: C1PRVClAPoLTLOqGEkfYdyI+UReAPqKicWbGHLAUP6Y=)
2: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: wQE2GRk1NEIFKcXk1mRL5njvlXc0TiiVil36Zhwd3+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:73:87:98:81:f8:ae:7a:e4:3b:58:80:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=6d005f84987da230444086be7eef52cfc2e3c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:cd:a5:19:ca:5d:da:13:2c:05:f5:bc:81:
e2:7c:67:f4:38:d8:1f:5a:98:8c:ba:7c:2b:f3:db:
9c:7a:59:5e:0e:da:fa:d0:a5:fb:1c:87:56:19:70:
4c:5a:6e:0f:52:58:ee:40:91:ee:ce:d4:a2:d5:68:
e9:d8:65:81:0b:b2:5d:3c:86:12:d8:27:f2:9b:d6:
f3:6f:01:32:cc:f9:10:61:41:b1:4a:d2:5e:d5:15:
2e:e5:96:ae:01:38:5d:b9:38:db:3e:2a:af:18:40:
fb:65:9b:2b:56:1e:8f:6d:da:33:a0:70:3f:6b:04:
56:fc:bf:7b:97:79:d2:6c:5f:0b:27:2b:38:3b:4e:
f7:75:bb:b0:86:d9:2a:b4:a4:6c:04:5f:5d:f5:0d:
af:e5:0d:1f:47:d0:12:64:25:ff:74:58:98:fd:21:
ee:e6:22:2f:be:29:72:59:66:95:1a:38:fb:75:60:
38:e1:82:d4:0e:24:a9:0f:df:00:7e:f4:44:85:af:
92:a2:4b:ff:54:da:33:8c:7d:34:53:c9:72:92:35:
93:e9:66:9a:93:1a:6d:2f:63:c2:6b:54:96:ad:2e:
33:83:af:14:b3:4b:61:46:9e:c6:7f:56:52:30:4b:
f7:e5:ad:9c:8d:c3:9f:3a:fb:9b:4e:e6:8b:b5:75:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:5F:84:98:7D:A2:30:44:40:86:BE:7E:EF:52:CF:C2:E3:C8:B3
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:69:6a:57:e4:38:53:61:c4:ed:cd:5f:2f:d6:e0:4f:08:
9c:84:e3:12:98:57:9c:a6:df:80:ac:6b:7e:b5:91:3a:41:98:
fb:65:04:ec:78:c3:6c:1c:df:34:ca:0c:ee:86:63:c2:50:89:
f3:ee:65:ee:9a:3f:1a:7c:c0:46:37:ea:d9:e9:b5:c6:5a:23:
55:d7:04:4d:74:04:66:81:2f:e3:29:35:4a:ab:eb:fa:d6:d2:
ea:d7:f2:c2:9b:c2:a3:9c:4b:28:87:89:9d:a4:80:c5:84:f3:
07:f0:4e:85:da:b2:ff:65:d5:42:ad:d7:ce:1f:3d:25:4e:8b:
ce:15:11:ea:30:af:27:0c:b1:e1:3c:f3:0b:c6:a7:c8:66:30:
da:88:b9:37:b5:e3:24:8d:67:cd:b0:df:32:48:5a:de:f9:06:
54:f1:65:1c:b8:f4:34:d0:b1:f9:25:0e:00:86:08:3d:02:90:
0c:af:a6:0a:ee:c2:ca:0c:65:7c:af:e4:78:3c:67:e5:cd:bb:
3f:a9:8e:ba:30:c2:b8:99:c4:16:e3:4f:e8:37:81:eb:7f:ef:
07:4d:31:e8:b6:b9:3e:78:26:53:04:f2:ac:9e:d3:e0:dd:e2:
c9:39:ab:63:ed:61:af:6c:90:03:77:cd:9a:63:df:fd:df:af:
bc:5d:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:51 2025 by rpki-client