Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: tItasSMhsCmg2xj90YcLnCDT10Vnj4Oo7J6hjypjl7Q=
Subject key identifier: 03:2E:5C:51:C2:1D:AB:BA:DB:39:2A:AF:98:B4:98:BC:A4:87:9B:F1
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01984AE5AE0D321E5FBE8AB859832F91670E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 01F4
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: 11O4lsYqhtye4ttU9RIzOTygEr4hhdWPQs+BTvgEQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ae:0d:32:1e:5f:be:8a:b8:59:83:2f:91:67:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=032e5c51c21dabbadb392aaf98b498bca4879bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:b6:d5:87:95:03:88:ad:e4:7c:5e:f7:10:
e1:e7:4b:2c:5d:9c:7e:91:a8:5a:dc:19:e6:85:6c:
b2:02:7b:ec:98:fe:d3:90:b6:87:e5:00:b5:1c:ac:
23:9c:80:28:5d:d9:ba:ec:c8:4f:f9:00:2c:9f:8e:
48:8c:9d:20:cd:1a:a9:75:76:96:58:94:1f:54:fb:
4c:b9:d9:ed:7f:1b:a5:e8:00:2f:9c:f8:83:54:1c:
94:e3:45:9a:b5:15:9f:5c:a7:c5:d1:3e:d8:b2:92:
89:1a:e7:e1:82:c6:99:38:de:d0:3d:90:11:a6:12:
d0:bb:06:41:e5:87:1d:92:ef:7f:25:df:60:f1:4c:
4b:5c:73:54:a7:a3:8b:37:0c:f3:8d:49:83:e3:21:
7e:e8:84:43:ea:48:58:29:bd:9b:81:e3:0d:2f:97:
ed:01:81:da:de:80:cc:61:21:25:2e:22:e0:29:6f:
5e:05:25:f3:1d:e9:c7:1b:99:14:7f:47:22:07:ac:
09:49:00:28:08:d5:f4:31:65:91:cf:e1:4a:fd:60:
8b:f2:4c:1e:07:a4:75:70:81:eb:db:dc:b1:38:2f:
e5:5d:db:31:24:7d:30:6f:a3:82:86:7e:85:9d:12:
41:87:33:1b:3f:56:bd:7e:2e:91:27:4e:c9:c1:2a:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:5C:51:C2:1D:AB:BA:DB:39:2A:AF:98:B4:98:BC:A4:87:9B:F1
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:af:8b:3a:79:7e:9e:cf:40:0a:57:12:e8:91:4e:eb:3d:
fc:28:55:2e:de:70:46:23:ca:bd:dd:f5:b5:01:3c:e1:68:24:
8c:06:14:90:7e:29:2c:74:86:33:bd:11:33:2c:cc:2e:d9:06:
46:fb:a3:f1:75:08:f7:e4:3f:db:a3:2d:20:52:ca:0f:26:7f:
20:79:cc:1c:9a:28:80:ab:36:1f:cf:65:37:d3:df:5d:9d:0d:
d7:fd:16:e9:ec:d5:3f:1a:ec:b6:57:e1:af:d5:2a:8d:df:4e:
60:4c:e7:c9:fb:c3:19:a5:e5:e2:d7:f8:d2:b5:f4:65:ca:27:
19:ce:15:c4:e3:70:fe:0f:c7:90:cf:1d:66:5a:ec:33:e1:5b:
3d:7d:03:6d:fc:90:8c:b0:6e:09:6e:65:ab:2e:e1:8a:0f:ce:
7f:33:f3:f6:29:e0:b6:15:ab:9b:7c:eb:18:92:44:70:b4:d1:
21:a2:75:d9:f5:e4:0d:7b:ce:e4:a8:09:bc:55:04:a3:bb:88:
87:82:72:2a:e2:85:37:3b:d3:bb:3d:17:be:07:b4:f5:3c:06:
b8:27:ae:40:72:35:be:4a:25:97:72:ec:c0:6e:90:27:cd:a5:
1a:60:81:3b:f3:db:dc:70:69:d4:e0:ae:5d:ac:77:64:49:96:
fa:c0:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:19 2025 by rpki-client