Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: lT2daMdvESe0FrJluC89+UEm2PL6RzkV4Yc32940Hec=
Subject key identifier: 5F:F0:F0:B0:6B:86:28:58:8C:10:07:06:D3:A8:2A:6D:23:6A:E3:7A
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0197B7B31E6C43ECAB53D7ABD5EBF55562DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0BC7
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: YPZ9tWWiWtUTLsy4oyH/OVTOjJM0RpQj1s+X1R/P5TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1e:6c:43:ec:ab:53:d7:ab:d5:eb:f5:55:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=5ff0f0b06b8628588c100706d3a82a6d236ae37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:7c:63:c6:32:0f:c9:26:d9:ff:45:64:ad:
2c:5d:49:b6:95:df:04:10:8e:86:46:fb:40:83:a3:
b8:67:be:2f:a8:87:94:b3:46:ce:bf:97:01:75:90:
14:c2:b1:9b:29:2c:67:6f:2a:76:ae:40:ff:87:d1:
6a:3c:18:f0:be:0b:24:f9:ca:35:a1:d8:16:79:9b:
fd:81:9b:7a:07:4a:27:fe:35:f4:50:a3:3b:0f:ab:
50:85:0d:a2:59:bc:a1:b9:e3:f6:00:5c:20:35:66:
ca:19:53:48:01:f2:8a:b4:e9:c9:9d:98:17:74:ef:
ae:8a:d7:37:db:32:1b:c1:31:cc:9b:59:fe:11:0f:
47:d0:c5:df:ea:25:03:5f:9a:2a:c0:ef:45:3e:1e:
44:b1:af:7d:c0:c3:e7:08:12:3e:17:2e:34:a4:73:
af:4f:28:4b:e7:66:dc:dd:b6:0f:a0:4b:46:52:4a:
60:85:29:97:1c:10:24:46:98:ae:e9:21:4b:1b:90:
60:6d:1c:46:ae:88:8f:7f:80:08:f8:ad:07:0a:3b:
0a:60:dc:ca:46:fe:79:6b:cd:a6:ea:9f:d2:72:54:
ee:40:39:49:c3:43:1e:ab:fe:f4:c1:a7:85:a9:af:
72:ec:1a:2a:b6:0a:27:d9:ad:51:fd:74:c9:3a:87:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F0:F0:B0:6B:86:28:58:8C:10:07:06:D3:A8:2A:6D:23:6A:E3:7A
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:79:e0:92:95:6c:4e:bc:13:ce:95:15:bb:a9:5f:06:06:
cc:65:57:99:1a:94:74:7e:01:f4:8d:9d:b3:d5:20:dc:b3:62:
5d:57:e4:63:23:ae:ca:06:6f:d6:f6:97:ee:2d:4c:86:bd:2e:
67:f3:65:41:7c:8a:42:0c:07:f5:cf:ae:ef:be:10:5e:49:3b:
30:8b:a5:20:dc:d0:7c:23:0a:79:43:f4:d2:f6:06:ac:15:23:
f0:14:72:fe:9f:af:a7:1f:6a:f2:c5:f1:40:e5:8d:6f:a6:94:
8f:18:46:01:d0:f1:a1:d1:e3:1b:ae:81:9e:36:3e:1a:fd:1e:
e6:a1:68:23:0e:12:16:18:dc:0c:1f:ad:63:95:c3:2d:b8:bc:
e4:c8:b7:2f:be:a8:f5:52:03:75:db:f4:11:32:f0:82:ba:10:
67:64:07:19:2a:32:3b:87:a2:cf:e5:48:6c:c7:60:56:8d:66:
ea:c6:5b:36:5c:49:3a:23:36:04:af:f5:60:d1:e3:ee:ce:68:
de:de:bf:35:2c:a3:46:5a:86:d6:65:07:71:76:61:f6:42:86:
df:54:0c:1d:a7:1b:63:31:02:bf:da:82:60:81:16:90:eb:e4:
cd:54:dc:2b:2b:9e:03:da:1d:20:fc:d1:7c:5d:0b:9a:5c:15:
f3:f2:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:12 2025 by rpki-client