
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: qYFXSU1QgQIV/MZ2Kvfer6XI2KpMrNdIjWQISrNL5cQ=
Subject key identifier: B1:75:33:69:8C:7E:D2:0E:15:1B:A4:62:A4:F2:64:11:7E:E3:3F:BA
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 01984965D55EC6DCE487EDF31B226A204C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0B75
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: 6q4xkdH5qvA9ltV43FtIh6UAfoErmdst2LADok87POE=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d5:5e:c6:dc:e4:87:ed:f3:1b:22:6a:20:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=b17533698c7ed20e151ba462a4f264117ee33fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:fa:02:03:84:c9:f2:25:f3:3c:b4:6b:87:
33:cf:3a:34:01:4f:98:5c:9c:3d:89:fb:27:ed:af:
8a:35:ec:5f:f6:39:6d:2a:86:f5:71:c0:be:39:c8:
7b:a8:a0:2c:ea:d4:25:a3:71:39:3c:30:e9:18:a7:
16:53:a0:ce:32:ae:57:c7:4c:62:1b:87:f8:f0:1c:
88:fb:20:71:96:35:f7:bb:16:dd:3d:2b:fd:59:b4:
40:2d:d9:da:1b:ec:6d:50:89:c9:3c:71:83:31:8a:
bc:5b:b0:d5:02:c0:06:e3:36:69:5b:7a:ba:39:61:
b3:fa:7e:20:d4:60:3c:6f:3b:23:d5:c3:82:ee:0a:
b3:4b:5d:db:37:33:04:f8:75:63:36:e9:89:7a:d3:
aa:6a:46:4d:c2:6a:0a:b7:85:e1:ad:ff:03:6e:34:
1a:f1:b4:32:76:58:d7:1a:db:a3:ca:e6:24:4e:8d:
d1:d2:f1:3e:81:74:96:b8:70:f1:cc:22:49:00:4f:
75:f4:a5:31:8f:10:9d:02:3b:34:cc:18:ba:80:3a:
cf:df:6a:df:5d:3e:20:ef:c0:54:d1:f9:ce:6f:10:
18:d5:ee:fc:8e:c3:4d:a6:47:89:71:7c:d8:37:3f:
72:94:fe:56:f4:a5:59:14:82:4e:81:e8:d0:2f:b7:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:33:69:8C:7E:D2:0E:15:1B:A4:62:A4:F2:64:11:7E:E3:3F:BA
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:61:87:f1:8e:58:f1:ed:f1:4a:3c:79:1a:82:b1:5b:91:71:
20:07:ce:a2:34:7b:1e:40:86:a7:c0:c8:d8:68:90:08:67:c5:
7a:86:17:18:bd:dc:fd:a5:1f:c6:d6:c2:78:1f:9d:51:41:ef:
cc:19:59:67:a4:32:da:85:63:14:16:f7:c8:00:ae:65:3f:56:
98:b9:c9:4e:11:f8:04:e8:a6:b3:9f:40:1e:86:21:de:23:4d:
29:2c:8a:56:03:35:cd:b5:dc:58:54:33:8f:04:ad:5a:06:d2:
6b:6d:0e:3d:d3:b4:fe:b0:a3:3e:b1:a0:13:9e:6d:4f:66:02:
61:6b:48:22:46:9e:46:56:de:1b:fa:e4:1e:30:7c:40:65:2e:
e8:4c:cf:5a:e9:d4:d7:3a:4b:fd:58:84:26:17:04:fd:a3:fe:
fb:d6:3e:bb:01:53:d3:34:75:78:2e:87:73:f9:68:cd:0f:c0:
a6:e2:1a:22:c7:d9:2e:11:78:81:16:0f:f5:93:3b:39:42:dc:
5e:67:ee:4d:2a:fb:43:e9:92:85:34:23:86:1b:0a:9d:49:f5:
b5:bc:d9:da:b2:8d:55:16:00:c1:09:5f:d1:09:1b:7b:75:ff:
6b:ad:20:36:7e:f4:c0:66:1f:72:ad:1d:77:ee:57:1b:db:c1:
fb:7d:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:57 2025 by rpki-client