Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: Z0qM8j7QdZJwtimzIeM5Ba4FlprJ27ntqOZW00PpqkA=
Subject key identifier: FD:CA:E9:E7:CC:6A:20:D8:37:4F:4B:E8:1D:8A:44:14:57:60:3D:05
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01974FD8121C04EE3FE7B19FA37C6E233854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 148C
Signing time: Sun 08 Jun 2025 14:00:49 +0000
Manifest this update: Sun 08 Jun 2025 14:00:49 +0000
Manifest next update: Mon 09 Jun 2025 14:00:49 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: rKS383+d7RPRIxtVx5ppD1SwYq3q5Z1Qkc2EoRoRHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:12:1c:04:ee:3f:e7:b1:9f:a3:7c:6e:23:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jun 8 14:00:49 2025 GMT
Not After : Jun 9 14:00:49 2025 GMT
Subject: CN=fdcae9e7cc6a20d8374f4be81d8a441457603d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:c2:3f:e1:af:63:72:dc:ff:f5:de:48:a9:
e6:73:1a:37:01:7e:28:9e:4b:07:d6:22:a9:a8:b9:
df:a2:d8:c4:1a:9a:2f:41:90:9f:f8:29:07:d0:8b:
38:0b:fe:5e:8b:b7:05:0f:44:5b:b3:e6:94:15:28:
2f:23:93:3b:4e:73:48:87:94:e8:01:c3:8d:71:88:
b3:ad:68:a9:98:03:f8:ff:55:b1:38:24:87:8d:33:
d5:28:ca:18:8c:cc:b4:b4:b4:de:c7:10:d2:37:b1:
0c:b4:93:5d:48:69:ba:bc:fb:4c:84:c2:80:54:70:
fc:c0:60:3e:e4:c7:8a:10:aa:cd:cf:b8:a5:31:e4:
b7:6c:db:c6:3c:2f:f3:40:5c:4c:f2:27:83:6d:4c:
58:07:50:a2:2e:e1:29:0c:0d:6c:65:d5:24:46:c0:
35:16:b3:20:e8:b0:3d:91:b9:d6:13:d6:e2:a0:5a:
10:7b:00:7f:e4:66:48:0e:3f:d5:ea:f9:99:55:ee:
b9:57:44:3c:db:ab:ac:4b:63:97:b8:6f:96:c2:80:
90:df:1f:cd:71:05:3a:ff:a2:c0:b9:ee:7f:a9:4a:
14:11:55:61:93:91:bb:ec:5c:1b:39:9c:79:25:6c:
55:ea:52:6f:f5:a2:3f:fe:36:fe:3d:d8:5e:c6:0a:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:E9:E7:CC:6A:20:D8:37:4F:4B:E8:1D:8A:44:14:57:60:3D:05
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:c7:59:d9:a9:03:78:21:57:df:60:f0:71:5e:d9:92:c1:
e1:37:b2:d0:13:97:51:7e:9b:ae:5e:62:2f:b7:88:ad:04:59:
d7:4a:01:ab:06:8e:56:dc:ee:ba:a3:11:d9:46:e4:f0:34:c3:
a5:6b:a0:7d:9b:e3:cf:a6:63:c9:58:8a:b9:95:5a:cc:e6:a2:
8e:c4:5f:b0:27:ef:e6:fa:8c:4d:fc:4c:ff:03:87:74:aa:ec:
eb:55:46:ba:69:8c:9e:cc:ce:aa:2a:b2:a3:ee:ed:20:d3:a1:
b3:fc:ab:9f:26:12:8d:40:0b:80:95:85:95:00:6a:70:80:18:
5e:03:12:2e:d4:5f:32:1c:69:84:c7:ed:93:71:c4:b2:02:25:
09:36:a1:ae:fd:db:31:f4:37:b4:fd:90:9b:49:0f:8c:8a:93:
c1:bf:3a:aa:e4:b0:ee:31:58:1f:8e:ff:1a:87:c4:95:86:11:
2f:e0:e3:28:81:5d:c1:ae:d7:59:19:01:86:93:f3:fd:a8:3d:
fe:7a:c2:c0:ac:42:b0:ff:50:55:e9:f1:5d:b4:a7:01:dd:1b:
fb:f3:65:25:b4:31:ae:df:08:24:6b:da:90:89:4a:1e:63:52:
a9:f3:44:7e:ac:a6:da:0a:13:8e:c9:83:b9:58:3e:43:ce:a9:
8f:e9:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:36:28 2025 by rpki-client