Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: Ktb9TqF0+25XVlTVS0b9bvK98KrG8UxRlDc/xfxhujw=
Subject key identifier: 1B:C2:A1:80:23:0A:D2:C3:C1:D9:21:8B:28:4F:98:03:32:34:2D:80
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 01984C2F675390865B867F7D8D513538087A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 0208
Signing time: Sun 27 Jul 2025 14:00:31 +0000
Manifest this update: Sun 27 Jul 2025 14:00:31 +0000
Manifest next update: Mon 28 Jul 2025 14:00:31 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: +xhIaPw6wfPCv+45/5c04rlclOPD5A3hv9FwX9UI1Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:67:53:90:86:5b:86:7f:7d:8d:51:35:38:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Jul 27 14:00:31 2025 GMT
Not After : Jul 28 14:00:31 2025 GMT
Subject: CN=1bc2a180230ad2c3c1d9218b284f980332342d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:f6:64:8f:63:c3:0d:54:18:6b:2b:72:7f:
36:f9:88:2c:7d:70:81:68:2d:b2:d4:95:64:e1:0d:
ec:46:b8:a2:d5:dd:57:97:2f:17:94:65:0c:8f:18:
3d:e0:58:bf:f9:71:82:90:5e:3a:a0:79:29:b6:9f:
6b:d8:54:05:28:e4:18:ad:1e:04:e9:1c:d8:98:9e:
10:88:44:49:d3:c0:6f:07:54:cf:91:69:92:c3:52:
5b:be:de:89:22:8a:ed:f1:7d:4d:f4:01:ad:62:8b:
e3:1e:41:74:6b:a9:87:49:2d:4b:55:de:6b:21:fc:
1e:d8:a6:3b:97:0b:a5:91:21:fc:17:61:68:7e:fe:
ab:32:23:6d:e7:80:30:79:09:20:c5:73:1e:2a:e4:
e4:be:a6:29:6f:8d:0b:e1:91:5d:a8:ff:4e:e7:b8:
89:b3:c9:6a:4a:3b:2b:75:14:23:2f:2f:96:0e:20:
8e:a1:8c:47:1b:75:08:b6:ea:b8:25:85:e3:39:6a:
c7:46:c7:b9:7f:03:63:2b:31:99:1f:61:97:b8:5f:
a4:60:3f:00:08:65:bd:5c:c4:7d:cb:6f:14:7c:bf:
7d:d4:82:64:d6:d9:39:36:74:52:b8:18:87:8e:f3:
de:55:fe:45:8f:32:5a:cb:b7:cf:b3:7d:9e:78:32:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:A1:80:23:0A:D2:C3:C1:D9:21:8B:28:4F:98:03:32:34:2D:80
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:fc:bd:1a:5f:cd:9d:9e:7e:6b:72:81:c6:e9:5f:05:30:
a5:51:ff:20:4c:59:b6:12:89:e4:c4:ff:6a:1c:46:6e:46:c7:
d0:45:20:4d:98:2e:9e:9c:c1:68:9b:49:93:73:ee:11:b3:31:
09:72:80:10:1e:b5:00:2c:99:84:81:f8:cb:da:fc:5f:74:ae:
a8:51:f0:f8:96:1e:ac:46:be:21:b4:80:bb:56:a2:ad:cd:7b:
71:ff:0e:17:5b:c1:f9:81:c5:33:97:21:1b:db:93:ad:77:48:
06:d0:2d:be:c2:35:6d:81:cb:18:7e:55:3c:43:fa:b1:35:73:
83:98:cf:04:87:5e:4a:1b:cd:f5:16:3c:91:be:45:e9:92:30:
13:50:47:fc:15:0f:f3:36:15:89:e9:48:ce:28:25:e5:0a:8e:
8d:ab:80:cf:76:4a:f5:cd:88:d3:04:dc:4a:f0:32:bc:7c:7f:
2f:6d:4d:62:14:8b:92:bc:a8:d2:07:1c:44:11:e6:6a:1f:65:
0b:91:c4:4c:a2:a1:a6:34:d8:1c:98:2b:fe:f9:1a:2a:7d:24:
9a:ae:38:93:d9:02:76:c3:ea:5b:19:dc:28:25:da:cc:56:aa:
a1:20:b8:6e:eb:42:36:b2:54:fd:25:cf:3b:03:3d:aa:8f:a7:
41:f8:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:27:13 2025 by rpki-client