
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier: DvCyJ0jeJDffvXpgYSA12ZoD39zmfosrZl89vJ6PKlw=
Subject key identifier: 3E:86:95:62:26:6B:81:0F:F5:23:89:F3:04:DA:F0:0F:6C:77:1F:42
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 01974C69F80AFBAE330EBD7170059722820A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number: 07FE
Signing time: Sat 07 Jun 2025 22:01:42 +0000
Manifest this update: Sat 07 Jun 2025 22:01:42 +0000
Manifest next update: Sun 08 Jun 2025 22:01:42 +0000
Files and hashes: 1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: WbsuPt+I/+vVG3U4DQUag0Cip9QKLC7eh5cTsc3+fWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:f8:0a:fb:ae:33:0e:bd:71:70:05:97:22:82:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Jun 7 22:01:42 2025 GMT
Not After : Jun 8 22:01:42 2025 GMT
Subject: CN=3e869562266b810ff52389f304daf00f6c771f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:c2:6f:19:18:10:8c:3a:34:80:23:a3:fb:
45:b0:9d:a5:f4:fb:52:91:63:44:cd:60:1f:7d:4e:
24:51:b3:c6:71:cd:70:1a:9d:b0:87:c9:cf:4c:a4:
94:50:ae:e1:63:48:82:24:1f:d1:b7:1f:ea:e3:3b:
ee:ef:a0:e4:33:cf:5a:f9:3d:bd:89:e0:dc:09:cc:
68:96:ef:5b:b5:be:7d:23:5f:64:a1:64:17:56:d4:
f3:ff:5e:43:bc:e0:53:6e:a6:43:95:a8:f2:99:be:
a2:d6:e0:5d:0a:e1:ea:44:47:ff:55:d6:31:a0:9a:
58:11:d5:7f:b7:b6:c7:03:01:db:8e:43:3d:4d:bb:
3c:2e:c5:1b:a6:15:6b:0e:ea:17:aa:02:50:b2:cd:
33:aa:0e:88:44:ac:be:f4:79:fe:e6:31:98:82:28:
5e:2e:91:3a:56:71:fe:4c:2e:00:30:b0:bc:84:ce:
f2:3f:fb:e7:a1:18:15:1a:ff:d2:83:e0:1f:df:37:
55:10:81:fc:8f:72:0f:0c:05:1c:ef:f6:ea:97:7a:
26:62:63:e8:17:47:d2:b2:53:71:ad:ef:51:d4:4f:
24:68:b5:b1:df:78:9e:b1:c8:28:87:83:76:51:07:
ce:e3:aa:f2:44:18:22:6b:9c:f1:6d:92:41:ad:a0:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:95:62:26:6B:81:0F:F5:23:89:F3:04:DA:F0:0F:6C:77:1F:42
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:83:9a:05:1f:8c:41:c8:9b:c8:9e:3d:fe:3f:04:1e:df:
65:da:32:18:d2:be:e8:d3:cd:30:7e:bd:56:33:80:0c:cd:41:
77:3d:48:bb:66:87:6d:c3:67:f8:61:70:63:03:b9:61:79:67:
de:04:7f:5a:80:3b:90:b8:5a:f5:f1:76:ce:cd:2b:2c:f2:b5:
db:90:e7:94:9f:e5:67:0d:53:a2:ba:1d:f4:71:13:83:18:94:
ae:9e:ca:6d:79:ef:9f:a9:a8:20:8e:aa:17:a0:aa:18:55:c2:
21:56:3c:2d:7a:60:fe:ac:3b:c9:ff:8a:65:4c:95:77:f0:eb:
6f:24:38:8c:17:5b:94:23:a1:76:ee:39:76:dc:15:15:36:8e:
91:2f:84:50:29:09:bb:ec:f0:c5:9b:47:af:b9:83:25:d3:c4:
31:a7:3f:19:4a:f8:c9:e3:30:cd:fa:dc:bd:4c:fc:73:08:a9:
2e:a4:e8:f8:68:7c:29:8a:1f:7b:62:75:5b:d5:e9:d9:13:ef:
5b:cc:15:62:13:67:d9:f3:1d:88:ff:a7:c8:af:11:ff:c8:9e:
6c:e0:a2:1a:4b:19:a0:25:16:de:dc:95:d6:45:73:5c:d4:f9:
fc:af:8f:6a:52:56:89:4b:32:89:2d:3f:72:1e:93:3f:90:e7:
8c:f3:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:47 2025 by rpki-client