Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: ciMEkDO+oMirxwTF4J9BIXq1g1wrDgIViz9StzS6ToY=
Subject key identifier: BC:F4:7B:CF:DB:CE:91:D0:84:DC:04:30:8C:61:63:08:B4:02:90:93
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0198413D8B8552E4DB4C486D81FDEEDB218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 0102
Signing time: Fri 25 Jul 2025 11:00:09 +0000
Manifest this update: Fri 25 Jul 2025 11:00:09 +0000
Manifest next update: Sat 26 Jul 2025 11:00:09 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: c2oyHlmqGl1bfRcJZI3m6khc4BH9kTAxn3Gv94SC81A=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:8b:85:52:e4:db:4c:48:6d:81:fd:ee:db:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Jul 25 11:00:09 2025 GMT
Not After : Jul 26 11:00:09 2025 GMT
Subject: CN=bcf47bcfdbce91d084dc04308c616308b4029093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:ef:64:14:93:96:c3:4c:29:dd:34:d2:e1:
a5:6b:fd:2d:77:7f:cf:72:79:57:93:10:b3:a0:bc:
37:fe:5c:9c:c6:04:0b:a8:f7:ac:f8:0e:41:b9:e4:
b6:16:59:b2:dc:ef:27:70:41:89:a8:24:d2:94:8e:
8f:01:fe:1e:db:3a:d6:08:36:36:f0:8c:81:14:d9:
0a:b1:7e:3b:88:e4:9a:a5:62:9a:d4:87:6f:e1:1f:
af:df:17:b8:9e:5c:f4:26:67:f4:93:49:f6:fc:88:
0a:06:25:60:d1:fd:13:b6:85:50:78:da:c5:b1:f0:
be:99:a8:e5:ed:4a:b8:02:a3:9d:52:f4:01:06:c8:
05:ff:61:05:06:0a:c3:e0:16:cc:22:cb:1a:f8:70:
cf:f7:02:41:45:f3:d5:c9:e0:bb:0b:90:32:4d:75:
b6:53:b1:d3:91:42:c2:fa:dd:25:75:aa:e7:c6:7c:
0f:55:74:66:c2:7c:75:70:91:87:4a:15:2e:33:5f:
77:35:a3:af:b1:14:d8:3e:95:17:54:30:40:c6:1f:
ab:82:04:21:43:96:63:f6:02:72:68:0a:50:56:b0:
c2:79:07:39:11:04:c3:71:f7:87:eb:43:7d:7a:51:
c2:a3:ff:7e:3c:4d:3a:62:dd:d4:d4:1d:8b:fe:3c:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F4:7B:CF:DB:CE:91:D0:84:DC:04:30:8C:61:63:08:B4:02:90:93
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:52:56:81:da:e4:c3:6f:d4:19:6f:9c:d4:33:f8:7e:85:11:
65:12:55:97:82:21:d9:6b:6b:96:d2:40:75:e3:56:24:04:be:
52:4a:91:8d:9c:aa:a3:d4:6a:d4:58:4f:18:f7:95:c9:85:21:
a0:fd:a8:82:5d:d0:bc:ef:21:bf:3a:68:ef:80:58:44:08:c4:
db:3c:11:09:f3:f0:03:55:60:f5:6d:59:26:eb:e2:fa:5a:d0:
74:bb:fc:50:71:96:8f:2c:d4:6b:85:6c:a8:f0:3c:45:13:98:
5a:da:ff:57:f7:94:bb:84:1e:59:a5:ef:98:25:b2:bc:94:fd:
51:1d:e9:05:98:2c:84:0d:d1:af:44:03:37:f0:15:63:37:0b:
38:e9:ee:d8:4b:b5:91:18:82:7d:e5:aa:33:2a:e7:1f:4e:10:
90:5f:98:0e:df:1f:d0:ab:21:bf:f6:bc:b5:48:a1:10:17:0c:
75:35:34:46:9c:5c:01:66:bf:d9:35:ce:fd:fd:65:1f:b5:01:
0c:41:f7:ce:e5:29:47:75:b3:7d:eb:38:f3:36:74:81:c5:0c:
98:b1:44:a0:b4:25:5b:e1:aa:c9:70:f8:6a:f4:4a:3f:d4:cb:
85:0a:66:25:98:f7:cd:15:c6:26:4f:be:07:30:24:73:3c:ba:
a8:93:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:56:01 2025 by rpki-client