Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: K2RJ33xOt8JO5+hKv8KinRHWoPvVLuDcgr2QH3uaOC8=
Subject key identifier: 5F:20:71:6F:A0:27:C3:ED:5E:44:38:17:E3:B1:6A:B3:2E:4A:B2:36
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019849D2D3624722046B6E83892A05E37AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0974
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: gxQ38lNFV3abP0ZrlP/K/Tf9nTZxDOnJa7wDQ83R5ek=)
2: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d3:62:47:22:04:6b:6e:83:89:2a:05:e3:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=5f20716fa027c3ed5e443817e3b16ab32e4ab236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:dd:ee:f6:a4:49:0d:ed:8c:a1:db:2a:0d:
37:e2:2d:e3:b5:ae:5d:78:56:2b:21:76:c3:4e:86:
62:64:a0:a4:dd:c4:5b:e3:0a:c2:ad:24:bb:b5:a0:
ce:5c:67:8c:dc:61:3b:02:8a:2d:ed:64:69:cf:21:
73:f3:18:47:c1:b3:cf:8d:05:d4:c6:31:7a:49:26:
04:7e:d2:1e:d1:4d:ba:9b:5c:9e:c8:6b:71:49:85:
d0:a7:fd:96:fc:2c:15:0a:e7:30:e0:c3:9e:78:c3:
9d:66:00:b7:1c:06:03:91:6b:82:0d:f5:81:34:71:
29:19:88:3c:8e:5a:94:66:0a:34:8a:41:22:c3:dc:
1d:49:c8:83:cf:a9:00:fe:9d:45:3d:ad:e8:80:79:
d7:f8:d3:ff:26:fd:4d:76:c6:2b:66:1f:3d:98:e4:
d4:ec:8b:99:c1:3e:a6:d9:92:4d:5f:ae:1e:e8:33:
6c:9f:28:e2:42:ee:97:26:38:09:c3:b4:41:6e:af:
01:78:c3:72:8c:ea:b1:ff:53:4a:99:90:93:36:ef:
a2:44:f0:2f:fb:cb:48:65:89:59:72:cf:9d:dd:f9:
25:87:5b:28:e0:38:e9:7f:48:16:11:f5:6b:da:cf:
6b:68:2f:cf:26:0d:d6:8b:b9:2e:b1:d7:4b:97:6d:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:71:6F:A0:27:C3:ED:5E:44:38:17:E3:B1:6A:B3:2E:4A:B2:36
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:c1:0a:44:03:bf:14:e2:8a:61:82:d6:c8:6e:ac:f1:70:
a9:f6:9a:de:a6:40:57:a5:b1:94:87:a5:28:1e:93:a2:2d:77:
e9:90:fe:eb:85:13:b3:19:fc:d6:68:6c:5c:ea:8e:d1:2d:ae:
a8:47:b1:fc:fc:eb:e1:bd:f1:28:ba:58:f7:db:a0:8f:12:1f:
77:ce:f0:8d:39:55:7d:c3:27:c7:ff:e2:92:45:8c:64:8f:a1:
24:ed:ad:92:50:bb:0f:2d:1f:f5:65:03:95:09:b8:f8:37:df:
d1:69:e7:13:8d:a7:48:3b:c7:0e:8a:c0:17:65:8e:e7:10:26:
bc:59:76:b3:31:f1:c3:20:5a:9f:dd:f9:10:30:a1:f5:d4:18:
ac:59:c4:f3:09:23:11:9f:3a:bc:e8:fa:64:c6:e8:31:4b:a3:
81:e8:84:97:f0:bd:38:f6:36:9d:42:af:d3:f5:47:68:6c:6b:
1b:f7:18:fe:8f:37:fd:a6:4d:d8:a3:c0:b3:e0:a2:81:18:62:
c4:99:24:95:7b:b4:2b:ef:2a:0c:6c:b8:c9:8e:56:7f:d0:a0:
d1:03:a1:48:14:7b:5b:63:d0:e1:24:28:26:2c:f3:20:0d:14:
fc:81:67:68:c1:1d:a6:09:02:25:82:a6:83:80:f8:49:52:c6:
87:76:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:00 2025 by rpki-client