Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: CWC2wzNE4yiLNfk/FMZJ8Tz1hyxO2B+4svawGRM/tro=
Subject key identifier: 99:82:BB:92:08:00:66:46:F7:2A:C8:02:0E:B0:0B:A7:47:26:56:77
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 01984B54F31A38658EC76664EC0511547FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:54 +0000
Manifest this update: Sun 27 Jul 2025 10:01:54 +0000
Manifest next update: Mon 28 Jul 2025 10:01:54 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: Su8FZrbYWl8aN21bz0mJ7hYIRCfup+YvzaDOVuyiVkM=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f3:1a:38:65:8e:c7:66:64:ec:05:11:54:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: Jul 27 10:01:54 2025 GMT
Not After : Jul 28 10:01:54 2025 GMT
Subject: CN=9982bb9208006646f72ac8020eb00ba747265677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:04:c8:de:2b:82:58:5f:f4:11:cf:6c:43:
a6:cc:d0:fd:cc:95:ba:e3:b1:1d:08:e7:9c:53:a1:
8c:0d:8b:b5:45:20:96:4e:69:3a:e3:63:ef:51:71:
9f:fa:e3:c4:09:2d:fa:d5:bd:37:9b:b1:bc:1a:94:
cb:10:20:21:7c:f4:cc:ce:7b:9a:57:20:de:bb:66:
ea:bb:26:c7:00:bf:95:dc:3b:35:e1:c1:b5:f4:6a:
74:7f:2e:c0:cc:e9:46:48:29:36:ec:47:38:51:a2:
89:62:70:36:32:bc:fe:13:a6:3d:02:12:d1:74:35:
1a:0f:87:8d:04:27:57:2d:39:48:e6:2f:e0:cf:b9:
39:c9:24:8e:32:95:4b:cf:1f:f6:09:ed:a0:8f:a6:
39:02:76:1b:bd:90:e3:23:7d:ff:bf:d1:8d:82:66:
2b:11:2d:36:7e:10:b1:0f:86:a0:ec:54:11:3d:d6:
fb:34:b6:f8:e1:fa:44:a8:db:5c:1e:5c:6a:3d:ec:
db:0e:85:88:c2:d9:c7:7e:87:70:e9:fb:11:e4:8d:
0b:0f:00:f6:b7:2c:e2:e9:25:0b:dc:c4:be:c8:76:
5c:60:31:7d:53:a3:00:b9:25:9d:8d:69:19:e9:e3:
f8:93:f7:42:bc:3f:bd:4e:fd:8e:83:4c:e3:16:50:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:82:BB:92:08:00:66:46:F7:2A:C8:02:0E:B0:0B:A7:47:26:56:77
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7e:48:a3:b3:ab:ec:35:6c:97:1d:84:6a:dd:c4:9b:0a:ae:
2d:ff:ff:93:65:60:0b:ee:f5:89:fa:1e:37:27:d6:f4:04:9c:
7a:ce:f7:11:d4:dc:de:ba:ed:56:67:84:41:cd:9a:de:d4:8b:
d2:0e:a5:8a:5b:83:bd:cd:a4:b3:45:7c:9c:ea:45:d5:af:38:
8c:2a:f7:d1:d2:d8:e8:be:ed:9e:1f:56:05:7b:ed:1c:26:71:
ca:7a:c2:5d:18:b7:cf:3c:0b:c2:c1:f9:8c:b3:6d:ea:f3:df:
21:b0:9f:6c:53:48:68:e2:2d:9b:67:1f:3d:f4:e3:1e:93:b9:
b9:19:05:a3:2c:a5:0c:bb:7d:9f:01:d9:2d:a1:83:76:9f:f5:
b9:53:c0:90:ce:6a:0a:98:15:18:be:87:a4:83:2a:f0:6d:e1:
47:e8:84:31:27:a1:85:6c:d4:b2:c6:bd:d6:8a:d7:94:a8:81:
b2:a5:31:69:17:e6:e7:35:37:be:fd:62:e3:4a:d0:b9:d3:df:
3a:d0:4e:0a:0e:fe:23:30:e6:42:6f:c2:a1:1c:27:25:00:15:
f5:34:7d:90:60:0a:fb:e3:30:b3:e0:41:81:32:65:3a:88:0c:
9d:3d:45:d1:10:94:44:fe:7c:e8:ff:1b:3a:8d:bd:24:b9:91:
fd:35:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:40 2025 by rpki-client