Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: RrmAj5TXJuOK5etPJcVrx3XhTLhScd6m76QC4JH44VU=
Subject key identifier: 40:46:F5:DB:33:AC:2F:12:FC:D4:31:4B:FF:2D:CD:93:C5:D2:9E:A5
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01974931710F2AA96DBD14083436455731B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 08EF
Signing time: Sat 07 Jun 2025 07:01:06 +0000
Manifest this update: Sat 07 Jun 2025 07:01:06 +0000
Manifest next update: Sun 08 Jun 2025 07:01:06 +0000
Files and hashes: 1: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
2: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: zYSR2kdClinmoKQZLtwIzST08giPcWYoy8OsnBku8OA=)
3: zVbtVTb6VEP2n5e5elBZRVf7PBc.roa (hash: VV/l24AMORfvu1S58DBbEXwpnZJ00Cz7FHLsGnZlDXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:71:0f:2a:a9:6d:bd:14:08:34:36:45:57:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jun 7 07:01:06 2025 GMT
Not After : Jun 8 07:01:06 2025 GMT
Subject: CN=4046f5db33ac2f12fcd4314bff2dcd93c5d29ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:95:66:d9:f1:92:e9:63:26:91:7f:06:c5:
e9:4d:8a:e8:a9:8a:15:c8:33:51:5f:81:61:b7:b2:
63:ed:6a:d9:ec:a0:0b:53:5c:46:24:6c:11:8c:1c:
5d:d9:5c:78:27:85:18:4c:ec:6d:8e:31:ac:eb:13:
c1:65:bb:ed:cc:e5:25:80:a3:96:d7:e7:25:b1:61:
5c:2c:36:4a:81:54:d2:5f:2e:d1:3d:cf:fd:df:08:
b8:e8:7a:92:0e:f9:ab:b9:e2:ff:e5:93:09:b8:74:
7b:6d:c1:3a:fa:21:75:c7:2d:36:de:aa:10:c1:01:
fc:1c:0d:19:c4:c7:11:af:01:b7:49:a6:6f:f1:0c:
aa:80:d9:a5:13:c2:ae:2b:d3:d8:50:7f:43:bf:5e:
17:ad:65:fc:18:d0:80:2b:3f:6c:01:4e:76:94:50:
1f:0d:9d:94:7d:c9:f4:9c:38:73:29:1e:a0:44:f3:
11:77:a0:60:cb:5b:10:46:24:eb:96:45:4b:cb:89:
c8:5c:17:be:f6:09:bb:a5:3c:c3:6d:25:5c:be:6d:
88:4c:d0:e2:2e:a4:8a:fa:ad:c9:40:bc:b1:14:8a:
8b:19:3c:b9:f9:09:dd:05:a7:7f:e4:9a:5e:d6:6f:
71:30:e9:8f:5b:dc:b1:56:b5:96:5f:86:00:36:2b:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:F5:DB:33:AC:2F:12:FC:D4:31:4B:FF:2D:CD:93:C5:D2:9E:A5
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:36:a3:b0:f7:f6:4c:5a:2f:47:e1:41:1a:06:1d:1a:ad:
8e:8c:71:c1:56:27:19:6b:20:b4:c5:42:5d:af:8e:d9:aa:f4:
0e:8f:c7:48:70:0c:dd:cc:8d:bf:a3:d2:b2:e4:69:23:c2:4e:
c9:c4:35:c7:11:2f:d9:f3:f4:b9:b8:07:b2:00:08:09:f3:6f:
28:e8:b8:bd:d8:02:49:bf:2b:01:c7:6b:b1:87:32:e5:e1:1c:
d1:c8:27:a9:13:f5:15:f2:e5:22:e6:12:f5:da:ed:e4:2d:39:
d9:df:0f:2a:fd:1b:d5:85:d6:9a:a1:02:c2:07:ef:09:a5:4e:
88:20:ee:41:99:ac:b1:8b:37:42:2d:e4:32:e3:f4:a2:24:37:
01:a7:07:ff:2e:d0:74:e6:e6:6d:39:f0:96:b2:bd:b3:4b:1b:
15:6b:1b:7a:2f:5c:68:37:25:f4:c0:d2:9f:74:92:c8:ec:fb:
02:b0:16:a4:9c:50:87:2f:5d:02:8f:2b:2a:be:e7:54:d3:b3:
be:d7:d1:da:81:24:b8:a2:45:5c:76:fb:62:e4:b4:aa:65:09:
eb:89:cc:56:b2:fa:4d:c9:1f:e7:5e:14:93:05:ae:a5:90:96:
f5:f0:ba:0a:95:ed:f5:dd:30:43:fd:c0:9e:ff:d6:ee:9f:26:
57:76:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:59 2025 by rpki-client