Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: MeeZKvWsMWCBoPFsLon5wJvU1zqPVLAds9Rz5J1/MIQ=
Subject key identifier: 44:CD:9C:33:07:CB:7E:B4:72:06:8E:D5:CA:C4:D6:4B:0A:7E:6D:F6
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 0197B70ECE6A468C3D8213CE1A0225D865EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: /wECxX6JgrnB5VhwtA8MZD4dufiRa017Xr8WRkNkizY=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ce:6a:46:8c:3d:82:13:ce:1a:02:25:d8:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=44cd9c3307cb7eb472068ed5cac4d64b0a7e6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:14:9b:97:0f:e6:67:f0:93:f0:e9:a5:fa:
02:af:99:d4:43:57:bc:36:a8:58:5a:57:12:bb:e5:
bd:da:ba:d5:0d:a3:04:99:84:fa:b2:2f:e4:90:b9:
83:6d:97:65:54:a8:59:9f:f9:cd:f0:1a:99:58:1f:
7b:d9:7b:ff:8a:21:77:ad:96:fe:75:34:aa:17:52:
17:7b:fd:87:44:f8:df:7c:9c:2e:9f:e8:10:1c:a6:
27:5e:49:34:9e:30:94:f6:57:83:a5:de:15:bd:53:
b6:16:bf:14:f2:40:c0:1b:60:21:a1:72:e8:f7:65:
a5:f6:5e:b4:7b:99:04:8b:cb:b0:c7:1a:ce:47:00:
6a:f1:85:be:ac:9b:bd:eb:48:2a:c1:3e:3c:87:50:
e1:45:58:a1:43:30:32:ec:bb:6e:e4:d7:39:fe:b7:
52:76:76:35:0f:4c:12:ec:1f:44:6b:da:e8:6c:b5:
44:79:03:87:fa:45:23:55:86:72:84:f7:c7:5f:7e:
fb:8d:dc:94:65:cb:7e:20:ce:36:95:3e:a7:9c:09:
f1:67:f0:1c:65:53:82:41:cf:65:62:d2:1f:e2:30:
3f:75:37:91:cd:ea:5e:53:25:52:7f:6e:1f:df:89:
d3:2c:3b:69:fd:1c:bb:88:cb:f8:84:fa:6f:c8:24:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:9C:33:07:CB:7E:B4:72:06:8E:D5:CA:C4:D6:4B:0A:7E:6D:F6
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:20:e0:ce:25:07:43:2b:18:cb:38:2b:39:ff:3f:ab:9d:
bc:5a:78:a3:ce:68:b6:1d:d8:a2:31:f4:1a:0b:82:b3:b4:79:
52:9b:f7:18:f6:2d:a0:18:28:fe:bf:05:31:64:6e:26:ac:f2:
5b:fc:ec:a9:b5:2b:03:5d:f8:dd:44:c6:f6:cc:97:c0:5a:dd:
cf:be:02:e1:6f:c5:98:24:5e:b8:47:cd:c4:aa:e2:3a:5c:8c:
d4:35:32:9f:51:71:ed:63:cd:ad:1f:11:c8:21:c2:05:c6:c9:
e4:7f:41:a3:d8:ca:e4:bf:a8:42:01:bd:5f:2e:a7:b6:56:80:
bb:1c:46:a8:34:b1:6f:b6:77:b2:70:78:e2:c6:32:20:0a:72:
fd:db:53:5b:f9:7c:f6:d6:3c:e7:f5:02:61:fd:ce:56:fd:94:
93:07:f7:e5:5a:c2:bc:d5:ec:00:61:da:69:c6:b3:0f:15:49:
33:d3:d4:c3:92:e0:42:91:c8:67:14:4d:12:6c:4f:bc:71:94:
0c:3f:f3:6c:2a:28:9d:10:9e:a0:c3:9e:7c:44:20:90:0d:70:
a7:d2:6b:24:33:a5:94:40:45:ab:19:4f:2f:be:2d:a6:78:87:
4e:f9:f0:b9:a5:b5:4d:02:39:38:d1:9e:02:84:18:3e:30:2e:
fb:41:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:06 2025 by rpki-client