Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: ZwY/d0I0ibX0JAMhc//gbq9XupMEexc/mU3Ah6zKWoI=
Subject key identifier: 8E:16:BF:66:F4:53:86:9E:31:18:20:D3:45:4A:37:C5:9E:BF:CD:5A
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 0197C0ED798E647101164F0A5F65694BB05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0BAB
Signing time: Mon 30 Jun 2025 13:01:18 +0000
Manifest this update: Mon 30 Jun 2025 13:01:18 +0000
Manifest next update: Tue 01 Jul 2025 13:01:18 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: nFWupnFinduC4PZl/p9rfroedSJEGSxbpeN8LmsyXRo=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:79:8e:64:71:01:16:4f:0a:5f:65:69:4b:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Jun 30 13:01:18 2025 GMT
Not After : Jul 1 13:01:18 2025 GMT
Subject: CN=8e16bf66f453869e311820d3454a37c59ebfcd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:28:31:79:99:b9:6e:f7:50:1e:f7:58:ad:
f1:fc:93:64:f1:cd:ce:4e:0b:be:6c:31:4f:fd:0a:
81:aa:17:a3:92:7d:63:8a:7a:87:9c:7e:8d:a6:72:
8d:9d:6d:cb:3a:9e:19:0d:fe:50:79:cf:53:2b:93:
45:27:5d:3f:e2:13:b8:71:2e:97:b7:df:86:eb:44:
8a:a9:65:16:be:9e:5a:a5:23:aa:e8:b6:9b:b4:5b:
ad:fa:f9:3a:00:5e:76:83:37:1e:d5:98:05:3f:10:
eb:16:06:8a:0d:f3:a4:09:b6:a9:b6:16:0e:d6:ee:
43:e6:b7:13:96:88:23:01:10:7d:68:e4:6d:d8:cd:
08:b4:e8:31:83:35:c3:a2:ef:fe:de:48:0a:36:57:
4f:07:26:61:11:97:da:1e:a1:d7:74:aa:e2:4a:bf:
74:18:dd:3d:0e:b3:da:8d:86:c0:f4:48:31:3f:0c:
f0:9e:b4:9e:0d:30:47:15:be:b7:e5:df:48:36:be:
4e:59:fc:f9:a9:bf:2b:e0:63:88:a4:cf:2b:97:64:
d7:f0:b8:56:6e:1f:48:2e:55:23:48:37:b1:87:1b:
c6:77:e8:0a:7b:2b:1e:6a:19:7b:9a:95:b9:8d:df:
b7:43:a7:a6:7b:37:34:60:0e:69:39:43:56:75:33:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:16:BF:66:F4:53:86:9E:31:18:20:D3:45:4A:37:C5:9E:BF:CD:5A
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:99:a9:cd:33:8e:65:0d:d7:d9:cb:4c:e2:7c:80:e6:e9:
93:1c:ca:fe:b4:42:22:5c:62:d4:3c:41:a4:f5:78:4d:ab:cd:
08:52:cf:71:74:95:f7:ac:7a:32:1b:80:c6:b8:a6:15:11:99:
ad:6c:b5:ea:38:a7:05:29:7b:63:81:1a:1d:9a:35:70:d7:46:
d6:4e:01:47:5f:a0:ad:bc:69:ce:48:b1:f5:08:71:73:f9:88:
3f:ad:f9:7f:83:f6:fe:b0:40:80:a9:a6:db:94:a7:2d:27:df:
b6:34:58:67:15:ed:15:f8:9a:5d:2b:d3:95:83:00:64:16:9d:
12:87:fe:96:8b:64:63:66:2e:fb:9d:2c:12:4e:02:68:50:43:
ae:e1:4a:b3:05:12:6f:c1:e6:8d:06:77:43:6b:39:da:c8:6d:
95:f2:42:10:9e:39:a3:77:78:40:a1:51:97:d1:f3:b3:71:a5:
7d:83:8a:b1:09:e6:25:25:04:bc:5b:47:96:8f:ee:1a:1c:59:
1b:92:5a:e6:31:12:2d:89:7d:a8:8d:de:46:dc:ec:b7:42:d1:
2a:86:1b:7e:0b:e0:5a:27:2b:97:a4:97:4a:48:28:95:38:5a:
78:cf:05:41:a2:52:57:09:2a:83:b3:ec:38:42:b5:65:a9:97:
b1:25:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:11:35 2025 by rpki-client