Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: cUxMVhXNpGiCokfzyQve2K40yaHLNYplmejEOLrQYwY=
Subject key identifier: 82:AE:F2:19:55:E4:E9:86:C4:FA:B7:B6:B6:1D:1A:76:37:1B:5F:18
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 019748FA2D6E045450DDD44D3B151AD4E424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: gceCOJPuAoujyY2MopggQgq/HzRzPLDObaZjJR2NTrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2d:6e:04:54:50:dd:d4:4d:3b:15:1a:d4:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=82aef21955e4e986c4fab7b6b61d1a76371b5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:5d:ae:57:11:a8:e0:3f:65:72:1b:52:94:
5c:7c:1a:6c:4d:7f:2d:0d:d7:d5:bb:1f:2f:4f:46:
c3:2a:6e:2e:61:49:56:d8:32:76:52:86:dc:02:8d:
c5:bf:12:ee:96:f6:16:d8:70:e9:20:45:63:53:ea:
34:36:40:cf:18:73:96:dd:08:be:20:51:64:c5:e8:
07:ed:51:bd:b3:12:b6:5f:23:05:f7:ff:68:14:37:
9b:3f:f4:ec:2a:50:23:f3:b8:d9:c5:29:bb:7b:8a:
98:47:57:be:34:a8:3c:00:e5:46:80:d9:90:43:d5:
e3:08:8e:e1:a2:f1:df:4e:f4:2d:34:58:3a:a2:6b:
d9:ea:f3:60:51:2f:bc:9a:2a:8c:91:c4:0d:63:9a:
c1:a1:12:cf:04:fb:66:f9:cf:60:dc:a4:19:07:f1:
2b:d8:c5:bc:09:5e:10:32:72:ee:0c:e7:28:bc:bc:
69:c3:00:68:61:f5:f7:32:a3:3c:2d:d3:0f:ad:39:
0e:4d:39:ab:d1:1c:8e:a4:9b:8d:eb:42:23:f8:2c:
94:1b:ea:6f:a8:ae:d3:dc:1d:02:fd:0a:21:64:f5:
29:2a:36:9b:56:13:31:be:60:1d:c3:c5:18:e2:e7:
39:c2:15:be:28:68:f6:12:45:26:74:ba:f9:46:84:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:F2:19:55:E4:E9:86:C4:FA:B7:B6:B6:1D:1A:76:37:1B:5F:18
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:76:6e:b9:1d:c2:84:11:18:19:1f:ac:34:09:ff:53:ab:
41:e3:70:91:6b:4a:21:94:27:f0:37:7f:0a:fc:0e:72:f5:6a:
30:04:62:93:55:65:df:a3:c7:4b:6b:3c:97:47:f2:02:3a:d3:
99:bd:8c:83:0a:40:84:10:fa:0f:c8:9c:ed:cf:cb:9e:a1:39:
68:bf:20:09:2a:42:55:99:db:84:2f:5b:31:f3:35:e7:26:fc:
65:1f:cf:43:d6:e2:fa:a5:cd:64:95:79:cb:6f:ac:92:ae:49:
c2:07:59:67:a5:38:de:4e:7c:db:e1:52:88:a7:5b:d7:30:47:
a0:26:f9:fe:17:4a:5a:5a:50:14:b7:e2:a3:8f:e6:80:ef:5f:
c3:af:58:d7:99:cb:86:77:6e:1d:53:7e:58:3b:90:ce:6b:8f:
ad:4e:83:51:bf:e9:e0:d7:db:82:3a:1c:7e:c5:42:99:be:c7:
40:5e:32:cf:85:c8:ed:ba:e2:d3:76:ff:57:2a:9e:ae:df:d4:
39:93:3f:f0:58:fd:29:b3:30:51:e9:20:3c:d5:a0:6a:55:e6:
9d:53:d7:ff:a0:16:ce:87:b9:00:54:bc:a3:9e:1a:49:21:1e:
67:a6:dc:01:3d:92:b1:ef:6c:b9:13:6e:6b:4e:5a:da:a5:46:
1e:b3:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:23 2025 by rpki-client