Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: TIbWlp7eCEECDQTe54AF5ScoSp3f3DlN7AXpffILbT0=
Subject key identifier: B9:83:D4:3D:62:4E:0C:2F:A1:30:A3:DC:7E:2C:79:91:48:60:B7:9F
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 01975233FF98CCDBD6F73779B939AF74520D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 109F
Signing time: Mon 09 Jun 2025 01:00:28 +0000
Manifest this update: Mon 09 Jun 2025 01:00:28 +0000
Manifest next update: Tue 10 Jun 2025 01:00:28 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: ttNearlN7T30TkvsjJlvR2O/Vs74eNeynnXlgcJaKKk=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:ff:98:cc:db:d6:f7:37:79:b9:39:af:74:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Jun 9 01:00:28 2025 GMT
Not After : Jun 10 01:00:28 2025 GMT
Subject: CN=b983d43d624e0c2fa130a3dc7e2c79914860b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:76:2c:d4:6b:31:31:49:c5:84:ee:64:1c:
65:73:f9:e0:1a:c4:85:04:37:5b:23:60:5b:cf:8a:
51:34:47:b4:0d:fa:e8:26:d5:59:4c:e8:ba:f0:06:
88:5c:c4:0c:98:e8:15:be:44:d6:ce:47:d1:ec:d4:
b0:50:e1:3c:60:36:fa:be:3a:48:db:53:d6:8b:3f:
74:7b:85:11:e7:62:f0:e8:9a:f4:47:f3:56:74:37:
90:af:70:95:6c:79:73:8f:f6:d0:03:0a:ee:94:54:
6c:a0:e1:a7:32:24:96:87:8f:94:b4:5d:77:7c:aa:
27:1e:c4:8d:8b:45:da:1b:19:c9:1a:0c:1d:6a:60:
3b:4b:e0:24:20:d0:d5:fc:87:74:14:b8:02:2b:f9:
87:c9:66:a6:c8:ce:2f:0f:51:d9:9c:80:f8:96:55:
fb:7e:13:61:44:93:d7:94:9c:c7:03:ad:f5:a7:6d:
5c:11:7a:cd:0a:18:38:7f:8c:80:fb:fc:bc:17:25:
43:d0:5f:98:1c:75:80:fb:a3:9f:cc:e9:e9:fd:c2:
90:7d:b9:a1:32:0d:22:f1:91:de:a2:b1:b9:2c:7b:
3f:a0:11:41:11:21:85:c0:04:21:5f:4b:5c:55:1c:
8a:73:89:5a:ac:5e:86:15:08:cd:df:71:c7:9f:36:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:D4:3D:62:4E:0C:2F:A1:30:A3:DC:7E:2C:79:91:48:60:B7:9F
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:92:4a:5d:01:03:59:a0:ae:94:94:11:d2:6e:92:8f:c2:
da:e9:fb:ce:5e:95:69:09:ab:c4:e4:ce:07:c7:cf:07:19:96:
b5:ca:d1:df:d3:8d:91:3f:f5:b3:e8:4f:70:2b:c7:2f:44:cc:
58:71:d5:a2:d7:dc:b9:54:5e:df:ad:c4:6c:85:a1:b0:14:6f:
55:23:1d:17:9e:c9:6c:0d:41:51:ea:99:8a:dc:f5:74:97:01:
26:12:fe:aa:35:24:68:73:f5:0e:ed:b5:69:ab:70:1b:21:3c:
29:98:f3:bc:bd:76:00:ae:44:98:b5:4b:9e:fd:36:b5:90:f6:
e3:a1:0b:cb:5a:d1:ae:8c:a4:5b:78:48:08:e9:11:c5:57:98:
03:56:59:e9:48:a7:42:dc:c6:00:4c:c7:53:68:c0:92:01:8b:
63:76:85:39:81:7f:f3:8b:7e:d9:cd:b3:53:7a:1a:f7:42:27:
28:a7:e8:13:09:52:62:cb:5f:44:52:a2:99:ac:d2:d6:e5:f0:
8e:6c:a9:44:ba:dd:d1:c0:a9:09:54:f3:a6:85:3c:3e:6a:b2:
4a:1a:fc:4b:79:5d:59:db:4e:36:23:7e:09:a4:86:a7:d7:47:
5d:b1:b9:45:d5:60:9e:0a:4f:c3:c0:9b:f1:01:a1:ae:56:15:
40:fa:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:55 2025 by rpki-client