Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
File: NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft (raw, json)
Hash identifier: Rd3NjBoh7sbnLbnE1HJlW8P4bcLjshmxS8g9oqPxINo=
Subject key identifier: 9C:96:51:BB:16:14:4D:80:0D:A3:B6:ED:F6:37:63:85:75:04:A7:6E
Authority key identifier: 34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
Certificate issuer: /CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Certificate serial: 01985569AB75CA5451A60072B12C9F52DF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 09:00:45 +0000
Manifest this update: Tue 29 Jul 2025 09:00:45 +0000
Manifest next update: Wed 30 Jul 2025 09:00:45 +0000
Files and hashes: 1: G75hDgiyd2LwDpJ76o2-U8H3uNQ.roa (hash: S5OSLsFsbCnXpNSoGI0qFyRFbDiGy+ql70CMoNWtluw=)
2: NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl (hash: 5G55VFy1MtqSuo7TrbNZxvcAoEBKXHXxIXHr72HqJ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:ab:75:ca:54:51:a6:00:72:b1:2c:9f:52:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348c2f0d9677a4d15865601f18e6af1ff7c7ea4f
Validity
Not Before: Jul 29 09:00:45 2025 GMT
Not After : Jul 30 09:00:45 2025 GMT
Subject: CN=9c9651bb16144d800da3b6edf63763857504a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:ff:38:87:09:37:f8:85:a1:fd:ca:15:45:
df:48:c8:f8:9d:3c:67:bd:e1:d1:99:c3:ba:30:4b:
12:50:4b:59:d5:93:30:99:b9:ee:35:87:cd:c7:72:
f6:93:ab:d9:0a:b2:53:c1:6c:49:97:0f:3b:04:f0:
43:f8:f0:9a:e1:9e:ac:d7:32:1c:fb:0f:0a:6b:41:
1c:de:0f:1d:b6:a8:65:98:d4:5b:ec:ca:11:d5:1b:
4f:3e:c6:44:46:27:07:b1:77:f4:b5:65:c3:46:77:
69:39:3f:24:72:73:11:12:6c:9c:60:27:b1:8b:1a:
82:7b:f9:7e:21:33:15:c0:d8:7a:8a:b2:d6:55:e9:
30:f5:de:81:78:56:73:f8:b8:ca:fa:e8:5f:0c:e0:
25:02:88:58:bd:a8:7e:51:58:d3:08:6d:f5:90:16:
11:97:b8:2c:bf:90:54:bc:e9:15:0a:c2:ec:88:5c:
14:b4:3a:e0:a7:28:c1:39:3b:a8:53:3c:88:77:83:
5f:99:46:be:9b:33:a5:81:66:ec:b6:bb:e3:bb:f8:
18:06:0a:01:54:eb:3a:22:3a:7a:18:f7:d4:4c:76:
ef:07:3a:cf:79:08:ce:09:e8:a1:cf:81:09:b2:03:
83:b6:6e:1f:7f:f1:38:8f:e9:92:aa:40:55:5c:1e:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:51:BB:16:14:4D:80:0D:A3:B6:ED:F6:37:63:85:75:04:A7:6E
X509v3 Authority Key Identifier:
keyid:34:8C:2F:0D:96:77:A4:D1:58:65:60:1F:18:E6:AF:1F:F7:C7:EA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIwvDZZ3pNFYZWAfGOavH_fH6k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c60ba7-796b-4140-b0ac-addd65bc5a6a/1/NIwvDZZ3pNFYZWAfGOavH_fH6k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:08:7b:63:8c:08:95:0b:bc:e2:9f:14:14:5c:52:74:0e:1e:
8d:65:d3:b6:e7:2d:5a:03:06:64:65:9d:5b:25:e6:e5:9f:5e:
57:42:a2:f0:e2:7a:76:5e:41:71:a3:dc:6a:77:ae:8f:6c:94:
0a:32:48:14:9a:69:ba:9f:e5:ae:56:7e:c7:cb:92:a7:e6:de:
77:15:f8:c1:b1:c0:3e:c8:1d:8a:9e:cd:fb:b2:bb:62:9a:fc:
bf:89:7c:e8:2d:ea:86:cd:e4:1a:bc:90:53:8d:ce:c2:9c:bb:
a8:39:a9:d7:d7:9a:19:72:32:00:ff:91:3e:3a:36:13:19:19:
4c:95:23:f0:03:8c:7a:20:00:e5:0e:b8:ba:da:01:c7:8d:84:
33:2c:b8:98:68:ee:cd:54:5a:fc:fd:44:b8:0b:86:9b:82:b8:
6b:86:5b:6b:6d:4c:b8:e9:fd:76:c5:3a:5e:bc:f4:57:90:da:
9c:ce:11:db:b1:9c:3a:cc:8f:5b:bb:21:15:c2:7b:4a:5f:08:
fc:a2:9b:cd:14:ca:ee:7a:ab:90:1b:80:9f:97:f6:22:11:7d:
5e:1f:29:9d:1a:e5:54:e1:1c:23:76:7c:71:a4:f0:d8:c7:fa:
d5:67:5f:86:02:4b:6a:df:c4:a2:ff:53:90:fa:04:51:96:29:
ae:ab:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:01:19 2025 by rpki-client