Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
File: nlY8Qm0ark7R5_WVNnSQIgiehHk.mft (raw, json)
Hash identifier: ou5Db1Xe7fZpNBw2Kls+uxGqOwmMjvtxsFxvZVIky5E=
Subject key identifier: C3:76:43:92:5D:0E:AF:6B:17:F6:0C:FA:72:7C:D0:FF:D7:B8:1D:95
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 01984AE5A32A087E09C742D4D79C89361988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
Manifest number: 0AC3
Signing time: Sun 27 Jul 2025 08:00:20 +0000
Manifest this update: Sun 27 Jul 2025 08:00:20 +0000
Manifest next update: Mon 28 Jul 2025 08:00:20 +0000
Files and hashes: 1: DLPCyIKM7jz79PsqVnrxNoMgYXE.roa (hash: +QgaTeTZpZ2fDtls8hcOtAF0lYWHQbDmqjy56TBm3AY=)
2: nlY8Qm0ark7R5_WVNnSQIgiehHk.crl (hash: /RHtnMpxwqPoKWfNt4tSQXFXnuCRoiPH2EbLYntXSLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:a3:2a:08:7e:09:c7:42:d4:d7:9c:89:36:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Jul 27 08:00:20 2025 GMT
Not After : Jul 28 08:00:20 2025 GMT
Subject: CN=c37643925d0eaf6b17f60cfa727cd0ffd7b81d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:51:7a:09:68:10:35:82:8e:9b:49:c1:df:
e9:e5:55:10:cc:57:2d:ea:b1:69:24:87:39:87:de:
98:f3:c7:ea:c6:53:65:bf:eb:47:38:d1:d5:9c:3e:
bc:39:c2:54:7f:3f:41:a9:62:98:49:e8:be:58:40:
f0:d6:29:08:d5:5f:31:eb:68:3c:f0:6f:2e:5e:1b:
18:32:72:ef:61:03:69:e7:29:10:dd:a1:88:c0:69:
3c:49:b9:2e:c3:91:21:7c:cf:af:d5:08:a5:19:ae:
b7:56:e0:2d:73:6d:38:82:9d:3f:a5:73:d9:7f:40:
8d:da:c6:77:92:66:47:50:f1:7e:65:ba:3f:44:ad:
83:ef:57:cd:09:fb:1b:97:7f:c2:22:e5:c8:8a:a6:
43:bf:23:2b:9b:0e:00:0b:52:9d:88:55:b7:04:b2:
83:1e:b5:fc:e9:cb:c0:33:ad:6b:01:cb:98:6f:b5:
0c:e1:4d:02:9e:c8:db:ff:f6:3c:26:e9:ab:63:d3:
4a:59:84:00:65:65:37:0c:ed:bc:23:9f:73:73:bc:
dd:8b:30:a8:43:63:20:e2:fa:17:bb:1e:83:1f:66:
17:23:d5:c2:5d:b1:ad:56:6a:2c:a0:4e:e8:e5:92:
5c:1f:a5:62:1f:38:47:bc:13:5e:4b:34:8d:86:06:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:43:92:5D:0E:AF:6B:17:F6:0C:FA:72:7C:D0:FF:D7:B8:1D:95
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:32:01:7b:7e:1b:13:3a:a0:42:09:78:7f:be:07:4e:f0:
11:65:07:42:02:a7:30:1d:23:d7:98:1a:28:98:f1:40:66:df:
cb:a7:81:97:9c:90:b3:f6:4f:4b:04:a6:eb:4d:d5:bd:bf:3b:
36:af:ff:b4:c1:2d:a7:fd:92:63:c8:40:ac:32:12:3b:f6:a5:
d5:f5:e5:5b:62:ff:75:52:0d:b8:1f:b9:11:b3:65:2c:87:15:
d5:25:76:4a:f1:29:18:4f:7f:8d:5e:32:c0:3f:2b:04:c6:79:
36:a4:0f:a1:00:8f:8f:fb:2d:ed:c3:09:6d:6b:c2:49:dd:cc:
c1:93:45:a4:4d:8c:ad:21:aa:d0:aa:9d:17:52:08:95:60:06:
a8:8a:df:b3:ee:e4:21:b9:a9:b9:67:31:51:2f:58:78:ac:77:
6e:36:09:bf:09:14:8a:ba:4c:6b:23:87:d2:61:49:45:76:5f:
07:6f:94:24:52:a2:99:db:1f:1b:5f:fb:5c:0a:50:8f:90:09:
65:21:11:82:2f:c9:ef:af:4e:52:57:d8:ad:53:b9:03:25:a6:
dc:ff:2d:89:4c:16:9b:eb:09:6a:06:52:6d:01:ed:e8:ef:46:
d1:46:c9:d6:d4:98:10:9e:39:71:6d:f0:df:b9:c5:4e:da:c4:
aa:cf:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:10 2025 by rpki-client