Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: DYjHkBwgKF+0kaqShl2mVdXZdkMlGLp2+XvZXY/Go1Q=
Subject key identifier: 2F:29:9A:4C:F2:9B:15:5E:99:C3:54:27:B1:90:73:98:BD:26:85:BB
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019752D923BB640D1A90F9024BBA37984D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: A6
Signing time: Mon 09 Jun 2025 04:00:51 +0000
Manifest this update: Mon 09 Jun 2025 04:00:51 +0000
Manifest next update: Tue 10 Jun 2025 04:00:51 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: wsyilrYK8BkBP68mJpl3OUX99qJZMU8nMrq9AFVAr0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:23:bb:64:0d:1a:90:f9:02:4b:ba:37:98:4d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Jun 9 04:00:51 2025 GMT
Not After : Jun 10 04:00:51 2025 GMT
Subject: CN=2f299a4cf29b155e99c35427b1907398bd2685bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:97:f4:6a:cc:0c:7b:ec:50:39:84:34:b2:
64:3a:cb:54:1b:87:3f:2a:9d:35:2a:86:bd:e7:21:
e4:dd:f8:24:ba:de:2e:2f:c8:d8:ad:21:63:3f:49:
07:1a:63:a0:9c:72:50:67:56:0d:ff:e7:4f:82:ff:
a5:32:db:3b:41:13:ae:04:b7:40:73:db:f2:23:b4:
f6:fa:00:0b:52:d1:4d:de:99:8f:95:dc:3b:81:05:
ff:ba:ff:d9:cb:55:76:49:37:a6:d3:52:fa:31:6c:
aa:c3:90:a1:07:bd:e9:0d:3f:92:c3:50:95:2c:6f:
ac:ab:3b:13:5a:a3:b7:10:3f:d3:f1:89:e3:48:f1:
a5:18:1d:e9:f5:36:bd:34:be:f6:36:26:97:0d:3f:
ca:57:ae:fd:ca:79:e9:25:8c:62:31:8f:4c:be:9e:
8a:c9:3f:f3:86:8a:2f:dd:14:74:42:31:07:bc:57:
ba:fe:63:fb:b6:73:8b:8a:98:92:1b:cc:6e:8e:98:
fb:28:12:f2:cf:46:88:f2:e2:fe:c6:a0:66:02:0e:
6d:d0:29:aa:5c:9d:2f:ee:d9:13:34:79:08:1e:09:
90:2e:60:d2:50:05:77:48:84:32:d3:73:b7:37:88:
77:6b:9b:92:29:df:28:cf:44:f0:cc:03:5a:a7:d5:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:9A:4C:F2:9B:15:5E:99:C3:54:27:B1:90:73:98:BD:26:85:BB
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:c9:c1:4a:f4:b4:0b:3e:86:d1:29:ab:d5:a9:12:9e:4c:
f1:f5:2a:13:4d:6c:a0:f2:a4:fb:95:f0:22:ee:ab:ed:a0:d2:
47:43:f4:0a:fa:c0:f6:ed:64:1b:72:44:25:99:c7:c2:8c:55:
92:68:ce:f1:2d:e8:66:5c:e9:96:8b:2f:1f:29:0d:8f:1a:ac:
26:05:62:0a:47:03:74:91:61:9d:e0:39:06:68:aa:4e:fa:9f:
40:11:96:1c:ce:9c:15:53:4c:d0:2d:df:1a:ed:d9:03:bc:40:
fa:5d:27:b6:c4:21:05:68:f8:eb:33:f9:06:6d:6f:f5:c8:13:
de:44:59:46:8d:20:4e:96:8c:2f:9b:1c:5b:df:96:48:21:86:
44:39:a7:7c:7d:f7:17:f0:dd:f3:eb:ad:5b:7c:60:9f:b0:85:
21:e7:ff:90:db:fd:70:2e:6d:1a:cb:91:f6:c7:9e:32:77:19:
f2:9f:5b:4d:61:50:c3:42:31:a7:80:c8:53:a1:09:be:bd:d1:
b8:c7:9f:42:95:24:52:d2:53:32:2a:f9:6c:1c:fe:8d:96:76:
ad:87:78:f8:aa:0b:07:cd:01:0b:c1:2b:69:a5:ac:09:1d:09:
71:12:0c:f5:72:36:2d:54:3c:52:73:3c:b7:6a:e4:8d:e0:0a:
2d:86:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:21 2025 by rpki-client