Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: c0Wn7Tu727UECETA3DY2/RENzaDpbhgX8PKP9I8fOZc=
Subject key identifier: A5:84:23:5C:DF:C1:D4:8B:DA:24:19:22:42:5E:55:51:7F:B9:A2:E1
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01984A415B4FB577936FB17967F8111CB79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 1382
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: uXubIypE55WXmyXnmbLgWB6I8hch7mAYZ8EZc09u034=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:5b:4f:b5:77:93:6f:b1:79:67:f8:11:1c:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=a584235cdfc1d48bda241922425e55517fb9a2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:ee:60:df:56:29:8a:eb:93:5e:e9:49:5f:
9e:f4:5b:46:d8:06:38:ec:b5:11:a0:76:20:5a:3f:
f6:7a:a3:b4:c8:ee:37:04:3a:9a:74:fd:5b:2d:c5:
43:2f:c7:5e:ed:72:a8:19:49:44:68:55:6e:66:a1:
8b:4b:fe:96:94:57:64:3e:91:bc:85:8b:03:f6:ea:
8e:b5:34:4e:2e:59:5d:38:56:10:55:c9:99:7f:fd:
ba:51:50:4d:a8:76:a8:94:81:20:a5:63:95:97:f9:
72:ea:ea:aa:d5:7f:13:56:7c:5e:fb:5e:4e:fb:48:
0e:16:96:57:2c:8c:50:c1:74:44:80:00:15:40:97:
2a:2a:0d:96:a3:b8:fd:a3:3d:92:40:80:d4:21:09:
1d:57:60:dd:f2:c8:15:e1:fd:50:b4:83:51:90:36:
eb:0c:dd:c6:3c:cc:cd:13:08:58:65:f3:67:4b:d7:
2f:f2:8d:6d:55:03:99:8c:91:72:ae:a3:96:2c:b9:
09:95:ec:40:65:1d:42:8d:85:6a:04:07:49:a1:70:
fa:c2:b5:7d:16:a2:6b:f5:99:c8:c8:a1:b9:e5:11:
a4:be:ee:c9:2f:b0:73:91:37:a6:7c:66:9b:8d:f6:
ab:50:c0:8e:80:6a:fd:a6:82:13:0c:80:ee:c3:71:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:23:5C:DF:C1:D4:8B:DA:24:19:22:42:5E:55:51:7F:B9:A2:E1
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:07:5a:29:5a:a9:d7:bc:10:f9:8e:3c:81:23:66:f1:87:6f:
e5:eb:66:4d:81:ec:fe:d4:09:2a:d0:7c:5d:6b:92:85:bb:13:
71:dd:df:7f:01:d6:b2:4e:f0:3f:36:f6:19:14:2f:f6:54:8a:
d1:a5:8d:01:cb:5c:42:d4:bc:39:d0:64:bc:1e:ba:e5:27:d0:
48:41:74:7d:8a:0d:0e:3c:f3:23:f7:03:b1:1f:3b:1c:58:6c:
fe:f5:84:89:c7:09:35:7b:ab:0c:a8:b2:29:5c:26:03:16:76:
95:8d:f1:91:db:37:fc:58:b8:87:32:76:c8:85:92:11:35:64:
65:75:a9:3b:df:b1:87:a1:50:7d:bf:81:2b:f4:14:2f:b8:a6:
fc:20:d5:46:8a:68:41:2b:82:92:ed:98:21:ff:83:81:bf:ec:
bf:1b:b3:84:4b:90:8d:7e:ef:b8:86:53:99:97:68:8b:6c:e1:
d4:a6:3b:08:c4:d9:1d:e8:29:88:6c:c4:6a:4f:cc:d0:1f:ab:
32:c2:19:94:82:b6:8e:f0:ab:c1:da:2c:92:d9:5e:b6:ac:4a:
e0:91:af:45:91:cd:01:ea:12:ed:e7:2c:d2:e6:e5:51:f1:ca:
d6:8f:76:ba:96:a4:21:ee:e8:de:fd:44:4e:69:f0:6a:1b:5c:
e7:d5:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:21:07 2025 by rpki-client