Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: VyMDOD5afpUOlKw4sRu0PeXqQLrjbk28yVxCkZK7rD0=
Subject key identifier: 90:7B:FD:19:F7:B3:6E:FB:FF:36:8D:FB:1E:B3:2E:40:CD:C0:64:A8
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 0198443F0B6B042A5FE608E80790F7C2FA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 1220
Signing time: Sat 26 Jul 2025 01:00:38 +0000
Manifest this update: Sat 26 Jul 2025 01:00:38 +0000
Manifest next update: Sun 27 Jul 2025 01:00:38 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: 7sUKSjnbPcCc2xgoOadpCr6zgvCIfA7akVVpBmEtXxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:0b:6b:04:2a:5f:e6:08:e8:07:90:f7:c2:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jul 26 01:00:38 2025 GMT
Not After : Jul 27 01:00:38 2025 GMT
Subject: CN=907bfd19f7b36efbff368dfb1eb32e40cdc064a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:bb:f4:8f:58:16:ab:f7:6e:cd:ee:a4:a1:
87:7e:da:a1:59:c2:a4:de:61:2b:7a:56:18:54:42:
44:60:12:da:37:c2:5d:6b:86:58:e6:c6:cc:ba:c5:
00:f7:3f:4a:6c:fc:d6:b2:a8:5b:93:42:d2:b9:2c:
4c:a1:c7:15:d2:c6:99:bc:17:47:81:0d:30:a7:3a:
1b:1f:23:8c:5a:d6:1e:be:a1:e5:8e:f1:f5:c3:40:
41:0d:be:02:87:5d:9e:8e:1f:2d:fe:d7:ef:e4:30:
5c:23:a0:5d:d1:c9:26:b8:38:cc:fc:5b:0f:85:94:
9f:e9:f8:4c:97:e1:7c:84:e1:67:ce:f7:e1:e0:b3:
c8:71:00:1b:2d:22:81:4f:6a:bd:46:f3:60:af:72:
45:71:5a:12:cb:29:ad:af:34:43:66:ef:3d:e7:f2:
a7:61:77:2d:a0:67:0b:0f:46:af:ec:cd:62:0f:40:
5c:82:82:72:05:69:26:2f:cc:4c:d5:f1:46:26:35:
86:ce:3b:20:ac:a1:bb:95:ff:e3:81:06:53:29:06:
15:a2:3a:9d:f8:2d:c6:4a:f7:e7:85:3f:04:4c:96:
50:fb:11:75:c9:51:63:54:dc:2b:7b:8e:dc:c1:c4:
e5:9c:93:3c:a7:31:d3:29:92:80:88:08:d7:d6:3f:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:FD:19:F7:B3:6E:FB:FF:36:8D:FB:1E:B3:2E:40:CD:C0:64:A8
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:e1:18:43:07:b4:40:a6:0c:86:63:8b:7a:71:0f:6e:25:
d9:c5:80:2c:f1:7e:6b:a8:a7:c6:a6:3f:b1:7a:43:31:ec:9f:
62:83:61:d9:8e:c5:d8:07:11:c5:73:55:63:50:4f:15:db:71:
9b:0e:b5:51:86:b5:ed:bb:48:93:79:4a:40:b3:2d:2f:18:a4:
0d:62:97:45:54:fe:38:ae:b4:33:81:36:24:08:c5:4c:93:7b:
a2:65:61:0f:ee:9f:0b:66:a5:33:51:bc:67:b8:86:bc:5a:fb:
fb:45:9d:30:88:cb:e7:f8:38:6b:14:d0:30:c1:06:5c:09:12:
fd:b4:01:99:8a:32:c0:49:72:5e:65:b8:97:dc:b8:10:a6:16:
5f:da:b9:a4:8b:1c:e0:da:7b:f3:44:8a:07:47:00:b2:0e:a0:
e9:a8:c2:d2:51:1c:9b:0f:72:af:e7:c8:43:9a:64:d8:4b:20:
61:b9:d2:a8:32:da:de:4e:e3:be:67:9a:4e:2c:d1:d5:44:6e:
52:14:33:dc:63:8a:76:e3:d7:39:15:99:d8:4e:e4:93:24:cc:
73:b8:61:9c:d4:7c:17:1d:27:2b:9f:29:bf:83:58:ea:38:55:
4e:b4:80:8d:4a:1e:7c:b8:c3:35:41:d4:cb:d1:37:e2:f5:1c:
cf:56:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:35 2025 by rpki-client