Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: UdcGPN5iNRdp7Tqr1xFCwdrT+pHiL0bWCOiUso0QRfI=
Subject key identifier: CD:97:C9:48:07:B4:37:65:8F:8F:37:A7:DD:BF:FD:22:FE:24:8C:1D
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 01984B54CA7F61D6EA2B64E3C1262839A276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 11C0
Signing time: Sun 27 Jul 2025 10:01:44 +0000
Manifest this update: Sun 27 Jul 2025 10:01:44 +0000
Manifest next update: Mon 28 Jul 2025 10:01:44 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: ec+//25kz2xC3mJsG4LG8tnc+/M0E+gAAsDFyjr2tFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ca:7f:61:d6:ea:2b:64:e3:c1:26:28:39:a2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Jul 27 10:01:44 2025 GMT
Not After : Jul 28 10:01:44 2025 GMT
Subject: CN=cd97c94807b437658f8f37a7ddbffd22fe248c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:bf:31:45:cf:96:51:f1:7d:3e:56:11:b4:
9c:e8:5a:d8:d1:cd:75:07:18:9c:e1:c3:ed:11:2f:
22:31:c3:68:2d:60:dc:56:05:03:ef:4e:24:6e:11:
fd:22:f1:2a:f4:5d:f4:bd:da:95:ee:80:94:0e:ba:
67:18:56:66:d4:39:f9:12:73:3b:e6:5a:63:17:d4:
6b:83:63:ed:db:f0:0f:ec:3e:6a:08:c4:b1:7e:aa:
cb:73:df:a8:cc:ba:33:5c:21:44:19:2a:62:16:59:
9e:65:67:05:f5:29:c6:16:de:4a:b6:b9:cd:36:bf:
c2:42:bd:91:91:a8:b4:c8:7f:21:1b:35:74:50:4a:
af:f6:cb:19:78:a5:03:b0:32:76:48:be:fd:07:aa:
67:9b:fb:e4:b1:df:06:23:c4:75:9d:13:7e:fc:a8:
3e:f1:90:c7:60:54:2a:75:e6:19:cc:b8:19:7d:a4:
be:b6:75:08:09:1a:25:0c:7d:89:25:40:14:33:90:
ce:24:c2:cc:41:de:12:cc:f9:90:fd:78:d7:e2:94:
de:d1:87:26:2c:ac:98:9c:7e:68:5f:00:f4:c5:3f:
96:c9:bd:0e:e5:28:f9:b2:0b:b4:5e:72:12:00:80:
19:16:63:3c:e8:e6:7d:86:13:67:6f:5d:a1:59:3a:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:C9:48:07:B4:37:65:8F:8F:37:A7:DD:BF:FD:22:FE:24:8C:1D
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:25:22:c6:41:d5:6e:e0:ed:63:2e:bf:22:65:7f:b3:ac:
59:fd:8e:b3:e7:63:2d:9b:02:1f:41:c6:45:06:e1:2b:ee:39:
5b:86:01:9d:12:33:b6:c7:f8:89:af:02:8f:6b:c0:86:7a:c5:
65:2b:9c:d0:97:b8:46:c5:25:3d:65:08:d7:8e:9a:80:4b:a1:
51:a7:c6:a7:8a:73:51:38:0b:46:11:1b:16:69:cf:09:b4:49:
24:7e:1e:d2:3f:b8:56:11:33:78:01:25:75:9c:2b:cc:3b:70:
ee:7a:9b:c7:4d:36:b8:51:77:a9:c9:e8:0f:6e:66:91:68:dd:
91:7d:4e:b9:d0:7d:08:ca:e8:ee:89:b7:6c:9b:09:f8:9a:1d:
db:7b:2b:f0:98:c6:14:3b:02:06:5c:64:b8:97:4a:d7:2a:19:
86:fa:da:b5:0d:3b:02:5b:6c:e6:18:e8:37:b2:cb:03:05:26:
27:be:24:f7:3f:b0:25:89:b9:dd:49:e5:83:16:0a:4f:84:83:
b6:63:10:1b:df:5b:0d:f9:a4:83:a4:6d:b3:76:3d:dd:10:3e:
d4:10:f5:e4:d1:1a:da:59:6b:dc:17:bf:be:6d:1f:3f:64:cd:
4d:59:90:6d:93:2f:c1:7b:6d:02:39:b3:1d:c8:a1:b0:58:7d:
98:f1:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:13:22 2025 by rpki-client