Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: j2JRY6bbKFHsa4HVN9hdMLzfi1G3aVVRwCN2CHZD9uc=
Subject key identifier: 15:12:AC:9B:29:B1:F4:0C:9A:22:35:26:01:31:78:3F:04:04:29:D6
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 019761391EED56D0CE8A376253009B1D2133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0E87
Signing time: Wed 11 Jun 2025 23:00:22 +0000
Manifest this update: Wed 11 Jun 2025 23:00:22 +0000
Manifest next update: Thu 12 Jun 2025 23:00:22 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: HWrg5Vce1mb01ok388heNjwer11LSScRjpoBmzsOZ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:1e:ed:56:d0:ce:8a:37:62:53:00:9b:1d:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Jun 11 23:00:22 2025 GMT
Not After : Jun 12 23:00:22 2025 GMT
Subject: CN=1512ac9b29b1f40c9a2235260131783f040429d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:b3:26:1d:b4:a8:7d:e3:aa:73:fa:e7:e8:
ff:08:93:42:95:48:49:38:19:24:30:cf:97:92:83:
70:68:ce:35:fd:45:01:68:6f:5d:aa:91:a3:58:f3:
8b:90:7c:85:86:06:1d:82:1c:75:b7:e9:9d:b3:7a:
cf:74:d7:b8:dc:fd:b1:af:c9:37:1c:7f:16:1e:f6:
b7:ec:1b:f2:5d:0e:b8:11:a0:21:0f:af:39:95:c6:
e7:e9:3a:bb:0c:83:72:c3:38:48:09:7a:89:5a:9a:
44:bb:0a:1b:1c:78:fd:dc:e1:0c:28:8e:fe:c8:60:
6b:ff:88:7b:7a:17:7f:23:0c:0b:d9:40:4e:d4:d2:
f2:8a:07:c7:17:66:38:63:48:b0:69:91:89:60:04:
e5:40:a4:69:2a:60:53:87:5c:d3:78:90:f2:56:3d:
e6:c1:9c:e9:78:a2:bc:76:e2:2e:f7:fe:49:63:1d:
dc:05:7a:44:51:3b:5a:85:c3:c5:f0:16:02:12:90:
71:37:3b:f6:2f:7d:94:3d:0d:0a:30:aa:f2:4e:db:
f6:24:1f:3a:ab:d9:c0:05:29:af:96:75:24:c7:0c:
6c:e8:04:fa:60:a7:d0:55:84:87:47:4e:0c:10:02:
d8:1e:f9:b3:60:f2:e6:98:ec:f9:66:ba:95:b2:db:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:AC:9B:29:B1:F4:0C:9A:22:35:26:01:31:78:3F:04:04:29:D6
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:72:4c:e1:5f:60:c1:92:93:c7:95:50:8d:5b:4e:56:70:af:
68:d8:db:d2:60:fc:56:e2:f6:6c:99:5a:fb:c3:5a:6a:d0:3b:
dc:36:9b:e3:82:98:c3:4c:b8:12:95:5f:e8:2b:2b:18:87:f9:
b5:54:ce:bf:e3:74:4b:02:f2:7e:93:10:53:ca:83:6c:2d:88:
52:34:59:a2:cf:69:3f:83:ee:e2:69:15:2a:62:3e:5e:35:47:
97:fa:33:31:c4:12:fe:60:47:f1:9a:fc:40:fa:37:df:e6:fa:
25:7a:d6:e8:19:f8:32:b4:c7:53:68:a0:2e:a9:fb:a7:e0:29:
11:0c:d7:5b:1f:ae:ef:2d:e6:73:89:9c:ac:f8:6e:25:e9:34:
cd:aa:b9:21:4d:b9:23:b6:13:52:04:7a:ed:da:0f:88:ce:26:
1a:b1:8b:72:8b:4c:eb:af:a8:59:2f:91:40:44:de:90:70:3a:
03:85:83:75:86:f4:2b:2e:91:ba:66:9e:31:8e:75:fe:bb:40:
0a:da:fd:17:1a:29:fd:46:ca:e7:e9:b6:09:20:a6:b2:e5:00:
a1:59:3b:15:5b:05:fa:44:fd:6a:c3:08:4a:d3:a5:6b:5c:c1:
22:db:0e:9e:a7:12:94:e1:90:ba:9f:8d:88:c0:39:be:b1:44:
3c:b5:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:14 2025 by rpki-client