Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: +T+raCtG7i4BRytUwhuIVgu6j5sUNEmgHbvpakFcpmY=
Subject key identifier: 74:C8:33:AA:47:17:B7:3B:07:BC:CC:AA:89:D5:04:08:82:D5:57:D2
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019845F607D33E42B42595500E7C4C8F1D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0F96
Signing time: Sat 26 Jul 2025 09:00:08 +0000
Manifest this update: Sat 26 Jul 2025 09:00:08 +0000
Manifest next update: Sun 27 Jul 2025 09:00:08 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: s9FphsdkDJ6MLkq6pOkPvKbvn2GMA4FhRN4DXGQkESU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:07:d3:3e:42:b4:25:95:50:0e:7c:4c:8f:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Jul 26 09:00:08 2025 GMT
Not After : Jul 27 09:00:08 2025 GMT
Subject: CN=74c833aa4717b73b07bcccaa89d5040882d557d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:dc:a0:c6:35:09:9e:cd:1d:44:2d:ea:b2:
c5:3f:e7:58:40:63:b5:fa:d1:ae:6a:b5:e2:d1:f1:
ff:c4:92:cb:63:95:63:16:a8:23:f6:7f:d5:e1:9f:
ee:f1:aa:36:1f:cb:fa:45:18:bb:73:a9:4c:aa:d7:
3c:fd:df:ae:54:30:74:97:7e:f1:f7:dc:ae:7d:44:
c5:1d:cd:79:cc:e0:56:99:65:28:e5:02:ac:d1:76:
c4:60:d9:af:c3:5a:ed:e2:6f:60:b7:cf:25:bd:d7:
d6:4d:26:d3:ff:f0:ca:a1:74:5c:2a:b0:20:2f:c1:
c9:4a:43:43:40:ee:c3:f9:1d:06:72:ff:f7:64:58:
25:72:50:50:40:5e:5e:05:12:6f:51:3b:8f:82:ad:
c2:fc:4d:c1:a8:9c:b7:42:e6:49:30:1b:7d:e9:7e:
6b:1c:0d:b8:35:99:6c:e4:e9:0a:98:81:d8:8c:52:
a9:16:11:30:9c:4a:6d:ad:c4:5c:78:9e:f5:bd:87:
91:3a:28:1e:e7:47:d6:bf:d2:f9:5b:14:d9:b4:b2:
5f:bb:09:b9:0a:da:a9:29:ad:3c:80:75:33:24:c1:
f3:79:94:a9:9f:2b:55:c7:28:87:30:61:fe:82:fe:
31:1b:dd:76:b7:4f:cd:f4:1b:c0:61:ee:a6:59:ac:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:33:AA:47:17:B7:3B:07:BC:CC:AA:89:D5:04:08:82:D5:57:D2
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:51:54:67:d3:36:e1:b2:28:dd:88:84:f4:47:64:99:5b:5d:
8c:94:6f:24:17:3c:2f:ac:e2:a6:99:82:5e:84:0a:60:da:66:
78:0e:fa:cb:2e:de:af:8e:10:b0:7c:b6:7e:25:aa:19:9d:af:
73:90:8e:0f:7b:d8:b5:ea:c1:12:64:75:26:71:a0:f4:21:14:
b9:45:3e:0d:62:9f:57:0c:5b:69:08:0a:36:73:7e:4b:ad:71:
f7:c8:3d:26:b3:49:81:97:e1:19:d6:f0:9b:50:e3:3c:40:b4:
a5:f5:7e:99:26:d7:63:63:0b:fd:44:aa:07:a8:1c:b5:5c:ad:
64:b3:fe:9c:e0:60:6c:17:09:cd:5d:fa:2f:d4:c4:98:0a:90:
3b:62:af:df:af:5f:29:dc:71:7e:8f:83:84:63:84:31:82:9c:
ef:de:0a:12:a5:2b:43:bb:90:9b:78:93:b4:01:bf:52:b6:2d:
7f:c4:f0:a4:66:20:a5:f5:8b:4f:71:32:f9:d3:89:0d:6c:3e:
ba:ea:0a:d6:c5:2a:36:29:45:4d:e4:31:8d:e2:e5:1d:de:56:
fb:fb:db:6e:e3:e8:d4:be:ad:e9:24:ca:90:19:21:e7:93:3c:
c6:49:c4:c8:e5:81:de:a6:f5:32:8a:65:ee:6f:ce:7d:b8:9c:
bb:f5:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:30 2025 by rpki-client