
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: QFf9yJCcmBCzjPphRrcDYEE6MQAKL2Wk5w6LDAGgcW4=
Subject key identifier: AB:00:00:D5:35:D2:B8:93:D0:67:8D:F3:34:4B:D8:C5:35:A5:F4:FF
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 01984966F3091CFC9EFBA8A569A64D1C9F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0D94
Signing time: Sun 27 Jul 2025 01:02:20 +0000
Manifest this update: Sun 27 Jul 2025 01:02:20 +0000
Manifest next update: Mon 28 Jul 2025 01:02:20 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: ys++QBiaNSSdDkOuSaFyGHaz6e7Id+Zk1i2fB6plsR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f3:09:1c:fc:9e:fb:a8:a5:69:a6:4d:1c:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Jul 27 01:02:20 2025 GMT
Not After : Jul 28 01:02:20 2025 GMT
Subject: CN=ab0000d535d2b893d0678df3344bd8c535a5f4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:a9:c3:b8:e8:12:db:d4:59:5a:0c:ab:2d:
6d:35:c7:f9:61:ee:19:c2:86:05:20:e0:2d:22:e1:
ef:72:af:75:57:60:2d:f7:a2:0d:4e:1d:f0:7d:c6:
d2:c0:ff:74:a3:66:0e:42:e2:ff:b4:ac:a3:d7:69:
e9:3e:97:0e:46:a3:77:f7:04:ef:e6:86:15:5d:cc:
f1:b6:01:e8:29:36:3b:55:40:d9:2e:ea:3b:9a:63:
8c:80:75:ce:f0:a6:be:88:69:6f:88:1e:01:af:5a:
ae:69:5a:41:ea:1c:aa:50:5a:91:2a:1c:e0:79:73:
d2:f3:7e:20:c1:8d:82:6d:1f:2a:98:bd:05:2e:ab:
98:0d:b2:de:45:e6:d6:56:07:b0:bf:79:9f:4b:13:
a3:ba:c5:b7:7f:66:80:61:08:7d:b4:42:e5:ff:9a:
77:e7:90:a1:55:a6:01:33:56:66:29:2b:be:57:fd:
4d:23:3b:c1:79:db:44:a0:4e:e1:0f:4c:30:84:14:
ef:21:4b:ee:b8:21:66:7b:09:51:9e:82:24:6d:56:
68:88:9b:7e:b6:33:2a:3d:0e:8d:10:33:da:d3:f1:
0d:9b:8e:59:ad:b6:bf:95:8c:2f:06:a7:fb:28:42:
d6:f7:f9:c0:b0:86:31:f6:38:74:d4:61:9d:3e:56:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:00:D5:35:D2:B8:93:D0:67:8D:F3:34:4B:D8:C5:35:A5:F4:FF
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e4:ce:fb:3e:40:5a:86:72:a1:70:98:c1:3f:00:33:32:b0:
7b:60:49:1f:0f:4e:00:ef:ea:10:39:ab:f1:f7:dd:39:a7:55:
3a:16:b6:71:17:0f:33:47:29:e0:76:69:8e:bd:4f:1c:e3:ad:
9a:08:e1:03:4b:9b:23:3b:08:42:53:7f:b8:c2:5f:ee:7b:e4:
3a:32:28:0b:cf:89:03:69:88:55:9d:af:a8:68:35:f7:08:c4:
f7:30:74:60:10:8d:45:21:46:ee:eb:d3:e6:49:4f:2e:59:2d:
39:a2:3d:e5:d9:bd:ff:15:3f:fb:6d:d1:f2:f8:e7:fd:46:0c:
c5:61:02:0f:9c:a6:ea:cb:e9:7d:5c:6d:0c:26:74:fc:7c:05:
91:89:d2:83:86:18:1e:73:79:8d:e4:28:7d:c6:5c:a0:71:1b:
98:6f:6b:5e:ad:54:21:18:6f:8c:1b:e0:97:56:b9:4b:b5:09:
7b:2b:2e:23:6f:91:a7:ed:b8:1a:9c:d3:8e:01:de:47:f8:01:
71:f5:cd:14:78:e1:6b:14:9c:27:69:15:64:0c:83:15:d1:ba:
41:5c:ec:aa:65:cd:a7:89:72:27:2e:e7:bd:ef:a9:35:81:7a:
fc:a0:a5:b1:7f:84:3f:c9:e4:fa:cd:d4:1d:24:34:85:4b:58:
af:b0:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:56 2025 by rpki-client