Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: gizW1T04VBzFEZrm2xm+xc0eVOSwI4m+/DRF11vHqlw=
Subject key identifier: 32:23:5E:7A:67:D4:49:6D:9E:18:F9:B0:6E:2B:58:84:1A:69:11:8A
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019846D2448558778CD3F9880CEE8ED7C0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 07C7
Signing time: Sat 26 Jul 2025 13:00:41 +0000
Manifest this update: Sat 26 Jul 2025 13:00:41 +0000
Manifest next update: Sun 27 Jul 2025 13:00:41 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: gx1oBetRZ/iJXW1U5M4mTYI6KBDQRufzayLegTw5q8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:44:85:58:77:8c:d3:f9:88:0c:ee:8e:d7:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Jul 26 13:00:41 2025 GMT
Not After : Jul 27 13:00:41 2025 GMT
Subject: CN=32235e7a67d4496d9e18f9b06e2b58841a69118a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:fa:c0:6b:73:22:36:28:99:eb:69:c8:8b:
c1:0c:ce:2c:21:47:cb:2b:ee:bb:ca:23:24:62:e4:
b7:9c:0b:2f:22:4f:90:19:b8:89:f5:a1:0f:b0:11:
01:46:5e:c0:fd:d1:45:07:7a:42:bc:b6:4d:14:a5:
f1:50:d9:0a:88:8e:b4:82:c4:d1:c0:e3:62:b7:5b:
a4:9b:e2:46:61:4f:24:1d:d3:73:d4:b0:6e:38:6c:
b7:5e:53:9e:9d:5d:c6:d9:da:1f:13:a3:83:51:82:
b4:93:76:ab:93:aa:6c:9f:d9:d7:26:68:1f:6d:31:
72:1e:71:b0:d7:e5:52:94:6b:b0:d1:df:76:14:97:
de:01:4a:32:86:cc:ed:b8:9d:da:93:a6:4b:98:9f:
51:d6:12:9c:23:1a:c4:df:77:88:4b:e2:d5:53:9f:
a3:a8:51:7a:55:bf:dc:8f:5a:15:80:d6:7f:8d:53:
40:97:09:63:0e:27:3e:a8:ac:e5:93:83:98:15:b6:
6c:48:d0:88:12:b9:c8:fd:33:d9:b2:60:a7:9c:b1:
7b:c9:15:a9:9e:4c:0e:a4:d4:b7:c5:a7:d6:eb:7b:
f3:f1:97:59:0e:6b:4c:6c:4d:c9:92:0d:a0:72:55:
d1:37:6a:e4:99:ab:80:86:ed:78:4e:5d:8a:9e:b8:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:5E:7A:67:D4:49:6D:9E:18:F9:B0:6E:2B:58:84:1A:69:11:8A
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:79:05:19:92:7b:a1:85:f7:ed:67:e2:2e:5a:9d:7f:15:
8b:aa:f0:40:c2:48:1b:16:a5:7f:e0:c9:e7:9f:21:2d:fb:80:
06:fa:71:cb:cf:5b:ac:de:04:e8:ca:07:1f:1b:36:ee:3c:63:
72:dc:af:3d:7f:cf:97:aa:49:ca:b6:b9:bd:ef:53:30:80:d9:
2e:de:4f:3b:88:11:22:d6:11:b0:f0:b1:d9:55:17:39:83:a9:
83:d3:45:44:b5:75:fe:a4:d2:f4:3b:2b:a6:2c:0b:b8:eb:dc:
ca:ae:7c:e0:24:4d:db:4f:e5:ac:f0:94:02:dd:47:a2:ab:b2:
7c:57:ea:e4:e9:c2:4e:51:35:c6:21:1f:92:c1:64:26:56:81:
0a:65:4a:1d:ee:ff:79:2d:8b:50:c8:9b:21:16:50:15:90:2b:
b3:03:d6:bc:3a:8b:b9:56:42:d1:59:74:47:38:20:bd:ee:1c:
32:92:5d:c3:06:47:b8:5f:74:10:42:22:1e:9e:a9:ce:00:8f:
e7:32:1a:a0:d5:b0:6c:6e:4b:45:cd:59:3f:2a:67:9e:c3:59:
0d:8a:ce:a6:99:63:56:4c:e7:31:28:21:7e:f6:af:c1:47:75:
c6:0d:57:aa:b0:31:24:67:24:9c:b2:f3:91:49:91:59:16:88:
11:29:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:34:43 2025 by rpki-client