Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: PgaprsZTT+Hk5NMzECqtkdKUT9p3T+UgbsKLxzxZIN4=
Subject key identifier: DE:A7:BB:86:61:71:70:B7:E4:2B:17:F3:92:96:AF:39:3C:F6:A7:B7
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 01974AB16F40C39C02740389CD55B02EF344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 082D
Signing time: Sat 07 Jun 2025 14:00:31 +0000
Manifest this update: Sat 07 Jun 2025 14:00:31 +0000
Manifest next update: Sun 08 Jun 2025 14:00:31 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: eYz6SK9hIPLRnv837eq5xsp60cZNQFu4gC9HYjYq7Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:6f:40:c3:9c:02:74:03:89:cd:55:b0:2e:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Jun 7 14:00:31 2025 GMT
Not After : Jun 8 14:00:31 2025 GMT
Subject: CN=dea7bb86617170b7e42b17f39296af393cf6a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:b8:5e:a1:63:c0:1d:3a:f7:c9:05:ae:89:
2f:21:3a:f3:72:14:df:08:8e:51:af:36:85:24:4c:
8d:25:e3:6f:5e:48:0f:e0:90:2b:7d:78:6d:f2:69:
c7:7b:be:e9:3a:6c:c9:3e:73:21:56:6f:98:66:48:
46:46:c5:50:8d:09:b3:45:d1:5e:87:71:9d:53:5b:
b5:d4:30:f4:16:c9:cd:c4:07:80:4e:02:01:a9:de:
ec:f5:4c:5f:dd:b6:b1:77:82:f9:c2:3d:26:51:3d:
3c:d6:b6:02:20:b7:88:a0:f1:5d:71:4b:25:4b:94:
73:0f:b6:8b:7e:40:01:c6:fb:ea:7d:d3:d5:84:25:
5d:4e:ef:d3:2a:5c:2c:d7:38:72:02:e9:5b:37:f9:
bd:05:f4:06:f6:f3:51:d8:2c:37:c2:8c:bd:7d:91:
e0:85:5b:af:2d:8f:f8:7d:cd:f5:6e:29:d2:4e:b1:
32:27:84:5c:ed:56:45:80:02:42:31:06:e2:74:b3:
6b:18:55:a8:70:17:3c:0c:fd:49:64:0f:39:5b:e1:
22:b6:3a:b0:ad:46:3b:cd:e8:db:7e:c0:19:a8:15:
08:9f:d6:7c:cc:ae:63:51:a6:9a:42:73:38:23:71:
c9:5f:6b:67:df:a5:41:a6:b1:07:5f:e3:e9:4d:cc:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:BB:86:61:71:70:B7:E4:2B:17:F3:92:96:AF:39:3C:F6:A7:B7
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:93:37:ce:20:98:7b:c6:b8:a2:52:92:48:8f:ce:51:66:
e8:90:2a:83:93:4a:d0:dc:49:89:59:dc:57:53:d0:e1:0d:9f:
a9:5e:10:f1:c3:ca:d6:bb:61:47:75:58:be:e2:17:cd:6a:33:
a3:9d:b4:cb:ee:15:84:4a:0d:5b:8b:20:93:68:b2:47:23:24:
ad:12:b7:ec:9b:6b:11:cc:8e:63:d6:01:5e:f2:4d:d2:92:ee:
aa:5c:60:28:8e:ec:5b:5e:bd:c6:61:c5:7b:6b:74:6e:e7:44:
6c:88:01:b2:31:6d:18:73:8a:fe:9f:d9:e8:78:93:87:39:ce:
22:48:5e:d6:71:80:a7:29:dc:7d:ab:61:88:96:fd:ad:c8:38:
48:28:62:7f:43:b1:ec:b5:df:df:b0:c0:4d:23:4f:da:13:34:
80:8a:92:c5:54:d2:ac:bb:44:b0:c9:ef:61:bc:05:ed:cc:87:
48:7c:7d:a3:d0:a9:58:a6:fb:b2:54:7b:c0:a6:68:0f:44:ee:
45:7f:0a:1f:54:c8:8e:42:27:c6:6d:8e:8f:5e:40:29:34:9d:
a7:74:bb:11:bd:1c:24:1d:05:6a:d4:e8:5b:ce:f9:b3:5b:ff:
d3:27:76:72:35:f6:7f:03:d8:8f:58:b7:10:58:f4:0d:42:91:
28:1f:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:18:18 2025 by rpki-client