Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: qVxlHVyukYYsUqGVR026E6zL1OmeMSEwfpZQCwKrjqw=
Subject key identifier: 20:B6:2F:14:D2:C0:0C:F6:BE:A3:6D:4B:B1:C2:4C:27:EC:1C:9A:88
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0197C5A57CDD568D42D81E0A2B052F0CE851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: C2
Signing time: Tue 01 Jul 2025 11:00:46 +0000
Manifest this update: Tue 01 Jul 2025 11:00:46 +0000
Manifest next update: Wed 02 Jul 2025 11:00:46 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: loKWlRAY2eozo3MngTD/ivyEwzPlYIR9o6q08Z60FBI=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:7c:dd:56:8d:42:d8:1e:0a:2b:05:2f:0c:e8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Jul 1 11:00:46 2025 GMT
Not After : Jul 2 11:00:46 2025 GMT
Subject: CN=20b62f14d2c00cf6bea36d4bb1c24c27ec1c9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:77:69:40:35:12:33:f6:41:13:eb:28:d5:
31:f7:5b:bc:8c:37:09:91:9e:6c:bc:2c:e9:ec:c8:
3f:2f:65:36:16:63:bd:e7:59:11:19:b9:c3:f4:c3:
bf:62:46:fb:3a:a6:af:c4:9b:84:cf:17:88:bb:08:
f8:eb:1f:25:67:3e:d0:92:b0:ae:b7:3a:05:97:47:
47:80:c5:a0:f3:42:c7:d8:72:3a:94:61:38:74:71:
9b:d6:f9:84:a2:02:38:73:84:3e:b1:25:3a:5e:fc:
8f:82:b6:e7:86:4f:1c:c7:4f:05:59:83:a1:fe:40:
d1:99:d9:54:9e:e7:b0:c6:e2:fc:6b:73:d0:ec:18:
59:36:86:ab:f3:45:a7:f5:ed:28:b5:44:86:f3:fa:
d7:a3:4f:41:92:55:ce:5d:e0:b2:7a:c2:93:df:2b:
d6:95:41:8e:d3:84:de:b1:a3:26:b2:2d:a8:25:d4:
8a:f7:9c:7e:9d:35:ae:db:e2:11:ab:d6:7b:4a:db:
45:ec:82:5d:99:4d:8e:2c:9a:17:57:6b:d1:23:ba:
25:63:41:71:c9:16:12:d6:f2:a6:b0:28:2a:73:70:
c8:4f:60:ec:b2:bd:c1:8b:71:3f:9e:9e:58:fa:a7:
51:8c:8a:66:c8:c4:d5:29:1e:21:f1:e5:da:a2:56:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:2F:14:D2:C0:0C:F6:BE:A3:6D:4B:B1:C2:4C:27:EC:1C:9A:88
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d5:be:ad:83:32:8e:7f:7a:3b:86:c7:d4:99:15:42:db:70:
87:8d:b5:a8:3f:ea:92:15:ff:a1:75:65:d0:6f:aa:c7:91:14:
4a:fb:74:dc:9f:02:48:a1:59:e0:5b:b1:bb:5d:aa:85:87:08:
07:bc:3b:4e:cb:92:2b:e1:6c:20:4d:53:1f:86:07:73:76:5b:
0c:4f:51:5e:c3:ad:b8:fc:ad:ad:89:8d:39:a5:dd:5d:02:f1:
bd:db:6e:84:89:b2:41:8c:f6:1f:25:70:0e:27:f6:5a:61:e8:
a2:35:bc:2b:fc:d0:f2:44:cd:d7:59:63:e2:8b:22:56:92:9f:
35:22:c9:0b:b2:53:03:1d:8f:4d:71:89:c8:32:28:1d:cf:95:
b9:e3:be:c8:f1:35:93:8f:ac:7b:f8:1e:d9:20:29:a3:0d:a6:
d4:41:a4:36:34:23:57:87:d2:47:49:6a:5e:14:f3:ee:05:2f:
4e:7c:e1:a7:1a:2c:49:fa:92:07:3f:82:49:7e:bb:32:67:23:
db:4d:b0:cc:d7:97:49:d5:07:c1:2a:52:8d:69:19:1e:ec:a0:
26:8d:0d:46:59:08:32:8c:3a:91:f0:21:10:d3:65:1b:f4:01:
e6:41:b1:53:07:77:2f:cc:2b:c4:60:64:00:ae:8c:c6:e8:84:
a2:8d:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:27:07 2025 by rpki-client