Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: I37E9kuOW5QYHBIvL95tfa+Y4YpDh6/bL9beHJ9mxpA=
Subject key identifier: 51:03:73:47:C7:3E:AB:5A:4F:7C:6E:19:2F:65:52:D5:85:A9:DE:BD
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0198530E959A069EED35D93205CF6A419293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0EB4
Signing time: Mon 28 Jul 2025 22:02:01 +0000
Manifest this update: Mon 28 Jul 2025 22:02:01 +0000
Manifest next update: Tue 29 Jul 2025 22:02:01 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: xRyL5z30STwQ6PDD1g4/ptTjTYxht5ji7hRE+7bL0nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:95:9a:06:9e:ed:35:d9:32:05:cf:6a:41:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jul 28 22:02:01 2025 GMT
Not After : Jul 29 22:02:01 2025 GMT
Subject: CN=51037347c73eab5a4f7c6e192f6552d585a9debd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:e9:8a:57:7a:68:46:f7:98:f6:c8:60:c9:
17:df:00:c0:8d:38:27:96:b3:18:15:db:56:f7:94:
f2:73:ce:db:d9:57:dc:1d:81:00:cc:0f:81:91:a0:
83:49:68:90:9d:90:39:c0:88:1b:d6:6b:dd:86:ad:
7b:fe:29:9b:84:c7:76:3d:b3:04:e1:b8:35:57:ad:
6e:09:b5:39:35:78:67:d9:f2:47:c3:61:98:de:97:
7f:86:3e:9f:32:47:f3:0c:10:05:91:c7:e0:16:4b:
95:2d:f6:28:b9:c9:4e:c2:2d:88:b7:d7:59:a9:43:
1b:d3:f7:24:83:88:b8:2c:8a:5e:c5:ff:bf:6f:d6:
bb:c9:2d:b7:1e:cb:6a:66:1c:97:c1:de:60:f3:9e:
f9:2f:03:b0:93:8a:9f:4c:9b:71:97:d3:3e:05:5f:
95:7e:f0:89:90:6d:29:da:db:87:d1:29:79:94:5d:
e7:bb:be:9a:00:9b:ea:59:56:3c:68:74:23:49:87:
8d:55:9e:e0:ab:ab:ce:a2:04:0a:f5:ce:82:eb:80:
85:be:1b:0d:4c:62:f6:e7:61:d9:6e:09:b1:90:a8:
81:03:4f:cf:88:be:f9:b6:c4:ff:f6:39:5f:42:34:
b3:b9:1f:4e:72:d4:20:6d:43:f3:fd:8b:64:4a:9c:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:73:47:C7:3E:AB:5A:4F:7C:6E:19:2F:65:52:D5:85:A9:DE:BD
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:cb:5d:27:48:3d:6f:b8:1e:35:17:b4:09:c2:1e:90:8b:
a1:3b:91:2d:0f:1f:d4:12:bc:af:2f:93:8d:dd:2c:44:f3:ca:
be:52:c1:7a:7b:76:e8:be:37:3f:58:fb:a9:72:d1:fe:d0:3e:
10:dd:8b:05:12:7f:b8:c5:89:4b:57:1f:da:cb:89:02:be:fa:
41:aa:30:a4:83:0a:3c:7b:f3:98:e3:d0:c3:28:da:b8:5d:ce:
56:c9:82:d0:6b:40:da:0a:65:2d:5c:6a:02:25:81:f5:64:11:
d8:25:e1:13:54:ee:2e:1b:af:98:d4:ef:90:17:dc:6d:07:d8:
65:69:5f:2b:b8:29:0c:9c:ce:66:50:18:68:a7:98:95:1c:78:
66:e1:2b:98:c9:da:06:00:8f:0c:3e:ce:43:24:92:3f:d2:b7:
d9:03:36:bc:ed:26:4d:8f:7b:50:ab:1d:79:74:50:fa:36:d4:
21:bb:13:0c:c4:03:a3:13:c5:ae:3e:c4:6e:09:de:e3:69:ba:
74:75:16:e4:b8:3d:82:35:80:b0:31:da:44:03:f2:d0:dc:83:
af:9f:d7:53:35:5b:9e:1c:9e:fe:1e:c2:6d:4a:fc:51:d9:40:
ef:d4:ab:e3:fa:28:15:64:af:3f:53:f3:39:31:a6:8e:73:f5:
92:90:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:31 2025 by rpki-client