Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: 4uZyU/lWjQBQnmXWF3++m5bGnl5E31bi+GVeF1WI/vQ=
Subject key identifier: 8C:62:57:C5:97:7D:13:75:B7:EE:9B:82:75:1B:B2:65:85:B2:A1:95
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019847E4C96F77B7CA7C113069B900BCA859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:00:32 +0000
Manifest this update: Sat 26 Jul 2025 18:00:32 +0000
Manifest next update: Sun 27 Jul 2025 18:00:32 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: D3W3f1tNLJaSg0D2o7fcca+77QyBKEiKyezK/OlIGT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:c9:6f:77:b7:ca:7c:11:30:69:b9:00:bc:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Jul 26 18:00:32 2025 GMT
Not After : Jul 27 18:00:32 2025 GMT
Subject: CN=8c6257c5977d1375b7ee9b82751bb26585b2a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:47:16:70:f2:96:b3:ca:3e:0c:2b:06:41:
1e:45:2e:34:c1:68:b4:80:33:e9:2c:a7:4f:ac:7d:
55:d9:3a:74:6c:82:f3:db:d7:b6:44:20:9b:4f:c2:
d8:71:b9:86:b3:44:16:a9:15:c5:a8:42:f5:8b:38:
62:40:ef:6b:fb:9b:3a:d4:e1:89:14:bb:aa:de:cc:
87:74:f0:63:23:2c:26:6e:b4:c2:2b:57:97:84:d4:
07:5e:1a:d5:ce:ab:7d:f5:f9:58:34:b0:73:ad:ae:
ec:89:71:6e:43:87:c1:e6:6b:77:93:68:82:de:3c:
0e:8f:7e:4f:79:a0:6c:7b:4e:28:b1:b0:da:c8:7b:
a2:7b:66:da:37:68:1c:77:2e:61:d8:e9:38:48:c6:
72:d9:ed:5e:7d:dc:e8:a9:90:f8:79:e0:bc:1b:ad:
ea:f0:a9:50:68:7d:ea:55:7f:da:dd:f2:7f:d9:20:
65:81:8c:2d:79:2f:1b:1b:ab:c7:4c:e2:48:8b:f8:
5f:91:6f:43:97:a8:5c:c2:c0:70:0e:26:2e:d1:87:
68:b5:d9:09:a9:33:ae:06:04:ff:e5:ed:b4:80:df:
b7:8f:a2:44:0a:46:29:27:4b:6f:18:8a:6a:fa:42:
1c:28:fb:45:9b:92:bc:f6:f4:ba:0a:b8:eb:a2:2d:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:62:57:C5:97:7D:13:75:B7:EE:9B:82:75:1B:B2:65:85:B2:A1:95
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:66:08:66:59:bd:be:86:7d:fa:78:7e:c1:ce:fe:d1:b4:69:
f6:9b:8c:e4:a7:ea:34:15:16:bc:35:af:98:b2:ad:9a:e3:2a:
34:ed:d3:1c:e9:a6:35:a6:1c:14:9d:81:9b:61:81:dd:93:ea:
32:a4:9f:6b:97:94:14:87:00:1c:37:e6:46:95:30:a0:5a:ae:
92:0e:77:de:e8:e3:d8:2f:f2:dd:bc:84:e8:28:58:92:e2:fb:
5e:7b:93:d7:16:87:fd:b1:5c:60:4b:6d:2c:e2:b8:b3:f5:b0:
55:4f:75:99:b0:46:0f:77:29:69:cd:08:af:39:20:10:77:e9:
35:52:38:42:25:56:8c:80:51:8e:87:76:0d:f8:cf:b1:d9:9b:
d2:a0:6b:9d:ef:89:02:cb:97:a1:ba:cb:9e:65:4c:cc:fb:de:
6a:e3:92:c5:f4:32:34:89:e7:7e:d3:ff:c1:ec:50:53:c4:ac:
50:f4:9a:63:29:0a:7e:ce:af:ed:e8:e3:aa:fa:68:ee:9c:f6:
e3:b9:9d:da:dc:ba:06:f6:27:f4:e8:c6:a3:89:2f:9d:66:ab:
7d:55:13:ee:84:8a:0a:02:2d:ff:40:34:86:4d:8a:79:82:d3:
ba:cb:a7:b7:df:aa:3a:9a:13:33:23:a3:9e:de:08:b5:ea:73:
55:0f:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:31 2025 by rpki-client