Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: K1ZpHDOU3si3RV4Pkr8lsbs5AUdzXIJhPGPQc6qaeng=
Subject key identifier: C6:ED:06:AC:F5:E8:C9:DA:08:47:A9:C6:DE:20:50:13:8B:E8:C4:7E
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 019849651D4FC51DF552FD48C21A05769827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 111F
Signing time: Sun 27 Jul 2025 01:00:19 +0000
Manifest this update: Sun 27 Jul 2025 01:00:19 +0000
Manifest next update: Mon 28 Jul 2025 01:00:19 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: TLenkXK97oNTGcqR3iVaYdsgUJvZx/0Pn9JvmkqUAIU=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:1d:4f:c5:1d:f5:52:fd:48:c2:1a:05:76:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Jul 27 01:00:19 2025 GMT
Not After : Jul 28 01:00:19 2025 GMT
Subject: CN=c6ed06acf5e8c9da0847a9c6de2050138be8c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:b1:79:85:9c:ed:56:03:f4:d8:b4:ac:5b:
fe:dc:89:a9:44:c2:f8:ef:d1:da:d6:4d:bd:e2:48:
54:4a:49:82:95:b4:20:02:47:27:f6:c3:2e:a8:f9:
ca:c8:aa:94:d4:5c:c7:5e:49:92:82:0c:06:2f:b9:
16:ff:0f:30:c0:07:3a:fb:21:48:0e:45:ce:b6:52:
68:7f:32:1c:d4:ab:a2:f4:76:d1:5d:4d:49:60:af:
69:38:f0:82:12:fb:ee:ae:8e:b5:c2:d3:92:52:d7:
11:7a:03:d0:18:73:18:58:90:49:75:a9:16:10:fc:
66:a9:65:77:2d:52:f2:42:d2:18:f2:ca:05:5a:4b:
6e:79:bd:e0:86:99:57:9e:a5:70:aa:60:be:c9:c2:
db:5d:c8:cb:62:b2:c7:b5:19:f0:75:cf:ab:14:74:
9e:35:5b:f9:9c:0f:10:a1:7c:a8:06:3e:9f:1a:5c:
49:12:78:19:fa:7e:b7:d6:94:f4:6f:b9:70:c3:c6:
4a:9d:34:fd:d0:ad:33:4f:9d:0e:d5:6e:e6:86:15:
c1:fb:1d:b1:c3:3f:d2:8f:c4:74:ea:4a:e6:9c:fa:
da:56:81:a4:59:8a:eb:7d:5b:aa:6c:e4:e5:5e:7e:
f4:78:b3:70:18:0e:2a:ce:1e:d0:02:ad:ea:d3:0f:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:06:AC:F5:E8:C9:DA:08:47:A9:C6:DE:20:50:13:8B:E8:C4:7E
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:c7:9d:92:e8:bb:17:04:68:77:38:e9:34:5b:c8:d3:24:
95:fe:2a:77:91:7f:29:4d:1b:34:a2:ac:1a:0b:6f:5f:99:41:
c8:f9:be:cd:60:b0:81:22:97:de:d8:98:1b:56:c3:58:eb:66:
6e:e9:ad:77:8e:4a:f3:bc:5b:00:d5:e9:98:0c:17:08:0f:61:
36:f5:4b:fa:c3:12:2b:05:be:4c:7c:91:31:29:76:11:89:cb:
15:4f:90:1c:df:5a:b1:25:1f:dc:ae:4e:9d:df:9b:77:6e:c0:
01:c6:d5:dd:78:3d:6e:30:19:d7:c5:72:8e:80:16:ef:1f:e6:
20:b2:df:99:f5:b6:e3:82:be:db:79:43:26:36:74:79:a6:96:
ed:ae:fd:26:97:ea:54:bf:72:53:73:eb:43:25:e5:c8:76:da:
7d:ef:1b:67:1c:35:e8:9f:f4:98:50:2c:6d:89:3e:a9:d3:74:
52:a1:13:f0:67:4a:ca:14:13:5f:24:dd:56:85:fa:d0:14:ac:
f0:74:bd:8c:f0:f0:b4:e2:8f:65:86:bc:e2:3a:f6:4a:6f:bb:
e3:47:a4:57:40:8d:3d:a2:a7:07:4d:6b:7a:41:32:ec:9f:72:
0c:31:c4:f9:2f:2c:3f:f4:80:21:4d:28:ea:5c:82:34:17:3d:
f7:94:8c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:16:09 2025 by rpki-client