Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: BLfLvjMT5oXbHGRP/FwwXYLl5pQ7nOAu4dwLYOn4F8g=
Subject key identifier: 91:28:E3:AD:28:6F:99:D1:CE:9A:48:59:23:CB:9C:59:B2:4D:84:41
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 0197CDCCF5F0364FBE4FDC55327E7F57475A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1099
Signing time: Thu 03 Jul 2025 01:00:50 +0000
Manifest this update: Thu 03 Jul 2025 01:00:50 +0000
Manifest next update: Fri 04 Jul 2025 01:00:50 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: 6RiRyNpiRYjATsj9oYTdN9NXVRQ2TPD4KUFiTz5m0XY=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cc:f5:f0:36:4f:be:4f:dc:55:32:7e:7f:57:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Jul 3 01:00:50 2025 GMT
Not After : Jul 4 01:00:50 2025 GMT
Subject: CN=9128e3ad286f99d1ce9a485923cb9c59b24d8441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:2a:29:00:16:89:f0:54:9b:44:46:47:56:
fa:a7:fb:b0:c7:e9:73:4a:a8:3b:41:f3:07:98:a3:
62:3e:6b:41:ca:bf:64:33:78:e7:35:b6:10:f4:e6:
5a:fa:3c:d0:2f:9e:71:f3:95:a9:5e:04:a2:f5:25:
00:09:7a:23:08:2f:a7:4e:ce:08:e0:11:36:a5:98:
d6:c0:36:fa:40:64:1c:1c:68:4c:74:2f:eb:bb:83:
03:44:d0:ff:fc:df:83:9c:6e:a9:d2:46:ee:24:0b:
01:2e:aa:97:b4:11:d6:2d:9e:ec:df:69:50:c1:d4:
83:fe:fd:05:ce:2e:9a:3f:0c:41:2e:5d:52:13:27:
60:aa:35:c2:6d:44:61:5e:98:e6:cb:ee:be:af:86:
9d:ef:df:fc:98:68:85:aa:40:61:84:78:de:6b:a1:
5f:e0:94:0b:f9:15:7b:76:f5:41:c5:7b:c8:b5:21:
d7:70:e7:0d:58:80:c5:eb:2c:11:5d:e9:cc:fd:43:
f9:97:f0:c1:fd:1e:8f:64:ea:3c:9b:fd:63:31:b0:
ea:64:87:48:c1:e9:43:01:3d:3d:e4:5c:fc:8e:94:
49:ae:81:ed:3c:b9:c1:7f:4e:37:db:b5:c1:54:42:
99:ef:4c:e3:cc:5b:7a:53:e6:17:cf:a5:38:27:3a:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:E3:AD:28:6F:99:D1:CE:9A:48:59:23:CB:9C:59:B2:4D:84:41
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4a:d7:8c:17:79:14:b4:c2:70:65:f9:0a:4c:17:e9:73:3f:
d9:d3:94:99:85:dd:80:db:f2:d8:09:2e:0f:51:da:d0:f8:49:
c2:dd:36:6e:21:2c:9d:9e:94:96:69:05:58:cb:70:1b:29:7c:
19:b5:9b:80:47:db:ac:36:ed:cf:81:bd:b0:73:b3:e7:04:11:
a7:b7:64:85:ed:c6:61:ae:d5:dd:89:65:c8:85:a2:47:6a:d9:
e4:cc:71:c8:ca:ef:7b:c4:c8:d4:de:b5:d9:5f:e9:41:23:dd:
7a:18:a9:62:e8:eb:37:6a:e9:97:2f:36:ad:fc:bf:5f:59:ff:
d3:77:3c:8f:f9:06:ac:df:9b:f5:f4:d7:44:be:6e:36:9b:61:
a4:c3:0b:ee:be:32:30:c9:5c:74:b2:a1:30:47:2b:22:e6:96:
c5:bb:5f:17:0b:0f:34:7d:37:51:e3:24:e4:ab:41:14:bc:e3:
b6:36:77:58:5e:69:57:c2:53:9b:d9:c7:b1:6b:0b:d6:2c:fc:
48:f8:84:cd:a3:6a:28:5d:d4:27:23:24:36:c2:87:21:db:be:
00:13:3b:5d:3f:56:73:e5:77:85:ee:d2:74:6c:f1:1d:35:35:
fe:52:16:94:34:ee:73:08:79:16:61:85:41:f1:d4:81:df:39:
e4:44:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:27:23 2025 by rpki-client