Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: Z7b8s+fbWZnCMkrI0vhEkT1Rn5UGGAOW536BO14WIVI=
Subject key identifier: BB:94:EF:B4:E9:8D:56:22:75:D6:0F:DD:17:E5:59:AB:9B:31:D3:E4
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0197B96B1011569C15962E911FA9DEDE6F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 6D
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: YTpoV1KFBd5SVzA2mkwbL4DNq9VVHqtrlz+QSNwqQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:10:11:56:9c:15:96:2e:91:1f:a9:de:de:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=bb94efb4e98d562275d60fdd17e559ab9b31d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:a7:47:2a:bc:b3:66:f1:41:75:98:f7:0a:
dc:cd:6f:70:1b:75:dd:43:a9:9c:84:ab:8a:51:42:
73:e8:d8:eb:44:f5:80:ec:f0:c1:8d:74:f6:75:e5:
17:c3:69:1d:47:f0:fe:d4:28:70:be:a9:dc:13:6f:
4f:35:79:0e:22:9e:21:4e:bd:8b:20:74:9a:62:6a:
89:4d:66:f6:9b:6b:33:32:ae:e1:36:b6:85:82:93:
3d:ac:4e:f3:61:01:b6:ab:8b:fa:9d:68:65:55:8e:
56:c8:ed:db:6f:49:18:1e:5a:3b:20:6b:0a:f0:ad:
3d:49:87:3d:20:d8:28:d8:16:14:63:db:e8:50:d4:
3e:fb:e1:3e:76:91:4d:6f:1c:3b:c1:ce:d1:5c:e3:
c0:f0:5b:06:e6:2b:90:5f:8b:b7:62:19:ce:72:b7:
c7:88:73:29:ae:96:bb:75:13:18:1b:66:f2:36:54:
ee:9c:7f:44:0a:8d:59:61:e5:6d:ee:4c:97:f4:7f:
93:64:fd:6a:5c:8d:0e:7d:40:01:02:9c:66:45:24:
be:32:43:51:d6:8b:e3:96:7d:bf:b5:30:43:f7:7b:
c8:ab:d7:5b:63:aa:2f:e3:28:7f:c9:cb:a1:64:24:
9d:3f:e2:c9:b0:8d:7e:35:f6:2a:ae:53:26:6a:84:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:EF:B4:E9:8D:56:22:75:D6:0F:DD:17:E5:59:AB:9B:31:D3:E4
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:8b:58:3d:e4:63:dc:18:f5:b9:3f:95:9f:28:b4:12:88:
07:92:d5:98:07:e4:05:6a:ef:cd:f1:c0:ab:7c:31:f8:83:65:
ea:17:b2:89:11:85:75:9b:ce:07:cd:7e:57:7f:20:84:5b:6d:
40:85:0e:d2:01:48:b3:2c:05:61:cb:9b:d8:ad:7c:cc:20:b0:
58:df:eb:35:11:5c:3d:64:6a:e9:d4:0d:7a:9c:f9:67:d5:1f:
09:95:5a:6f:c1:99:04:cc:8f:d8:36:ac:d7:42:05:c6:cd:52:
d6:c3:83:46:32:b1:a4:c5:64:5d:1a:85:7e:8d:81:15:e6:5b:
5a:bf:b3:37:46:45:90:06:ea:47:38:71:56:f7:f6:9c:69:f1:
67:dd:68:c1:3a:59:6f:cc:10:32:09:f7:c1:7f:6d:95:ac:53:
61:a5:a2:1c:e6:6a:fc:0d:f0:88:94:e6:1c:8f:77:7f:f1:1c:
00:43:8d:e9:0e:cf:f1:4b:b4:7e:14:92:11:bc:35:a1:58:63:
a3:06:ca:e7:30:2e:90:83:f5:5d:27:8f:d1:87:19:90:b8:87:
ae:e7:e6:ae:c8:55:26:f4:96:a2:67:ec:cc:96:a3:c4:d0:d2:
90:81:b2:c4:a3:52:9a:d5:dd:cd:3e:64:8a:54:d3:c8:a8:d3:
fe:34:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:10 2025 by rpki-client