Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: CT6JUpchI927pHyK1nASx3CoRrBfnDiI03xR7vDeH2o=
Subject key identifier: 5A:AF:53:46:5A:96:40:83:7A:2E:29:01:25:2A:96:88:A5:E7:AD:A3
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 019857FCB96C085BDD7D32F6400EF51D192D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 113D
Signing time: Tue 29 Jul 2025 21:00:36 +0000
Manifest this update: Tue 29 Jul 2025 21:00:36 +0000
Manifest next update: Wed 30 Jul 2025 21:00:36 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: L3Xu34mYYBCrCgEhp1c3jQk3NgY2ms9yCIAzSC++DLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fc:b9:6c:08:5b:dd:7d:32:f6:40:0e:f5:1d:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jul 29 21:00:36 2025 GMT
Not After : Jul 30 21:00:36 2025 GMT
Subject: CN=5aaf53465a9640837a2e2901252a9688a5e7ada3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:a8:6a:07:16:ff:23:e4:8f:3a:02:a1:22:
df:08:5a:28:3d:02:1f:61:62:05:39:1c:89:68:53:
8f:e0:1d:a5:be:5e:99:83:2c:7a:92:a5:52:a4:6e:
90:c2:c1:d8:f4:c0:0b:e7:75:fd:ff:97:f9:4a:85:
91:89:31:ad:4d:74:98:8e:17:e7:99:b9:16:26:83:
45:f6:5a:8a:69:6b:03:af:63:78:8e:92:fd:cc:a2:
cd:66:ed:b2:5a:fa:16:9d:83:3e:d4:74:df:c7:dc:
cd:32:26:e2:9c:22:a0:6d:f1:98:e1:1c:e8:3b:c2:
55:5f:05:69:f8:94:08:28:41:2d:e3:f0:71:b6:6b:
d0:51:4c:95:3a:04:8c:c6:cc:0d:46:59:ab:ad:94:
69:7d:9b:0a:88:cd:15:8d:77:e4:4f:01:5f:aa:ba:
0c:ed:1c:b4:40:12:e3:cb:dc:07:f1:b8:fb:ff:5a:
f5:bb:60:38:c3:46:9a:4e:b0:3d:f0:d4:e2:78:4a:
21:0e:7f:16:4e:42:68:0c:de:58:1f:95:e8:19:52:
dd:cb:ee:67:9b:14:38:6a:2e:77:7d:37:f0:1e:7d:
ca:77:d4:83:05:1f:c5:ee:03:af:22:c3:5e:cf:28:
f1:c9:76:81:32:45:63:f8:d6:45:1c:d8:b3:65:7f:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:53:46:5A:96:40:83:7A:2E:29:01:25:2A:96:88:A5:E7:AD:A3
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:93:89:98:36:8a:c9:22:48:56:28:b4:99:ac:27:4f:c6:ae:
05:ea:9c:5a:66:7b:d7:e2:2c:9f:cf:b2:ac:f5:da:d5:41:d9:
98:97:c0:2f:1b:a7:37:83:03:0e:af:10:40:47:20:86:50:9d:
48:c3:1f:bd:78:bf:f9:2c:13:7e:56:51:8f:bf:4f:9c:54:9e:
e7:50:44:fa:62:7d:38:cd:76:31:ef:de:97:6f:13:8e:46:a8:
c2:18:40:1d:5b:7a:3e:c8:7d:29:24:7b:83:43:c0:1f:fb:25:
f4:8d:ff:45:5f:05:03:a1:3d:ad:0c:34:cf:71:6f:2e:82:db:
7e:61:7b:af:18:79:ef:6e:65:22:88:3f:63:1e:7d:ab:da:76:
ad:35:5e:5f:87:81:99:69:fd:7e:66:7f:65:d0:4c:78:d7:9f:
56:32:1e:d2:d6:8b:d3:3d:e4:55:15:6d:bc:97:9b:05:a6:8b:
21:5c:38:2a:4a:bc:b7:56:0d:14:78:45:b6:f2:ad:62:3e:38:
59:63:3e:3f:57:ce:c7:bb:52:2a:67:f8:f1:81:0f:21:0f:30:
3d:26:82:5a:04:7b:8d:66:54:6e:88:58:ea:5b:49:3d:42:0c:
67:a2:de:44:40:aa:77:49:29:e8:d2:50:88:1b:e7:c1:e0:98:
7c:f4:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:43:05 2025 by rpki-client