Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: yP3kotIl3bmU7yDqN0mIfg1uaQ+tsk7ygXEtY1nwa18=
Subject key identifier: A5:27:2E:B9:8E:4B:A3:4E:A7:57:96:78:3A:30:84:DC:68:70:F0:82
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 0197B6D734DBCE687C903A192DDBBF3F6C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1321
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: uU9Kl1D4+miJ27n8R+AHc78x0Qy8lBv/RVtT8ZkEwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:db:ce:68:7c:90:3a:19:2d:db:bf:3f:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=a5272eb98e4ba34ea75796783a3084dc6870f082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:65:18:7e:18:f2:cf:33:ae:90:bb:6f:2a:
47:a0:f2:1c:5b:03:b5:0e:8b:9d:ad:dd:bb:dd:4e:
c7:a9:54:ec:6a:42:76:7e:37:df:2f:99:5d:f1:3f:
c6:05:fe:10:dc:b6:f4:2e:64:01:dd:ad:8a:ec:d7:
1f:e8:0e:de:36:39:1f:72:a3:eb:aa:ee:b3:eb:50:
e5:b2:b4:7f:b6:8e:95:de:ea:57:24:ab:f1:a9:e9:
94:be:71:e8:61:3e:9f:64:ab:5d:28:3f:b7:87:c0:
d0:49:98:7f:fa:9b:60:50:19:8e:bf:fd:76:1d:65:
fd:47:de:01:f3:82:f2:27:8a:fa:33:31:90:68:70:
19:56:c8:54:92:1a:05:6e:d3:a2:72:8a:26:31:f3:
c9:9b:8d:66:75:30:65:9f:4f:7b:e5:38:44:ec:51:
2d:9d:17:f4:15:31:4c:6e:71:ee:38:36:b4:ae:8a:
33:59:5b:f2:9f:f8:51:01:8e:19:18:63:13:75:a6:
3a:5c:1a:3b:65:3e:67:39:4b:3e:59:56:cd:bb:bb:
53:a7:7b:12:4c:c4:49:0a:39:c8:55:05:0e:0c:66:
a8:a3:46:78:bb:0c:4a:0a:a4:94:0e:85:dc:ef:5d:
ce:e1:bf:fe:a7:ef:5b:f2:76:71:3d:1c:c1:8c:fc:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:2E:B9:8E:4B:A3:4E:A7:57:96:78:3A:30:84:DC:68:70:F0:82
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b2:e4:3e:ae:66:ca:0a:c3:31:2c:56:c7:03:70:c0:7e:48:
a1:ce:0e:18:af:f7:ba:d4:8f:f2:37:98:bf:fd:91:db:b9:e2:
93:65:50:a6:a6:85:40:cc:e6:33:41:17:66:a0:25:7a:1e:4b:
45:77:3c:b0:2c:e7:cf:e9:2b:9a:1f:88:e0:b2:1a:35:69:2f:
97:18:b3:86:40:47:56:04:74:39:73:66:43:b0:38:da:66:b6:
9b:4b:8e:26:89:1c:7d:44:31:66:4d:f2:60:96:b3:2f:85:fc:
b0:fe:7a:ab:72:5a:25:d3:d2:43:da:b6:36:85:8f:b4:f7:ad:
85:c5:6d:11:cd:c2:23:85:4e:94:67:80:7e:cd:01:da:79:75:
06:65:12:8c:77:cc:87:df:3b:ea:1f:39:83:e5:14:d3:5c:5c:
f3:50:ce:07:c6:1b:ec:e4:7d:2f:d3:56:b3:f1:2d:5f:cb:e4:
17:03:09:32:16:b2:94:b4:91:72:94:0a:98:b2:5f:53:b1:ff:
13:f9:d9:4a:e0:88:37:00:5a:5e:b0:08:3e:ab:84:4f:e6:00:
6a:de:8f:23:72:5f:8e:9c:f4:5e:ce:1f:fd:71:95:06:7a:72:
0b:98:9d:0f:ad:85:32:c6:d9:26:b7:fc:29:af:2d:2c:21:59:
f4:64:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:21 2025 by rpki-client