Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: VdToX3eYobDrvkDX6KNis7lfGpATJWFy83Q3mNzgy1w=
Subject key identifier: 30:72:0E:8F:0D:2B:06:35:D5:5F:97:E5:B4:B4:4C:15:AA:A0:F1:44
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 0197493167AD9073C7E44EFCC2C1E1AA1C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 135B
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: sgdH6PzCniDNU7eRuZz3WpKISMZVVDOTM9imqWBIp/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:67:ad:90:73:c7:e4:4e:fc:c2:c1:e1:aa:1c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=30720e8f0d2b0635d55f97e5b4b44c15aaa0f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:27:0e:b8:47:7e:39:cf:7e:0d:ab:6a:ff:
93:60:d2:a2:47:03:43:79:28:8c:ae:2d:1a:2b:d8:
05:af:66:de:31:08:2e:a3:7e:e4:86:ee:ea:02:1e:
6f:f9:b7:6c:2f:6d:54:d2:ee:dd:14:ec:f8:cc:6b:
73:e4:c4:5c:a5:7c:01:63:64:3d:2f:d9:b8:e8:5b:
e3:60:42:55:d6:b1:65:57:03:37:74:b6:67:0e:c0:
29:25:47:b4:0e:19:90:96:25:5d:32:86:81:e3:46:
aa:4d:79:54:ac:cf:fa:9d:0e:1e:cf:f6:d6:13:e2:
fa:42:63:e2:1f:a5:ca:73:41:68:21:89:31:88:f4:
45:b9:aa:e4:5d:9b:ec:6e:06:d6:62:85:72:87:01:
20:65:09:54:3d:ac:f2:ba:80:d1:b6:f7:bc:bc:93:
f5:2e:c0:df:65:fe:63:f7:d2:e0:ae:05:24:d1:07:
99:4d:55:8a:40:43:c5:4c:25:65:7c:e5:34:25:da:
06:3a:71:d7:80:40:3c:5c:e4:01:ef:f5:91:59:79:
6b:e7:8e:c4:28:df:2b:b3:1a:a2:f1:0d:4a:91:53:
17:84:96:0f:ee:ce:3a:28:e4:a6:db:ed:b7:dd:cd:
49:67:25:5e:7a:af:01:34:6a:52:f2:53:dd:88:8d:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:0E:8F:0D:2B:06:35:D5:5F:97:E5:B4:B4:4C:15:AA:A0:F1:44
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:87:cf:3c:1d:b4:31:a6:0e:bf:07:bf:94:41:f6:72:7e:
2d:fb:16:5e:07:89:be:d3:89:30:16:4c:ca:6c:e9:02:50:a4:
37:d4:c0:d0:02:da:d7:eb:79:7b:91:b3:fa:e2:d9:71:19:81:
40:2b:03:20:51:31:7b:cb:e0:80:e4:4c:04:9b:97:30:f2:d0:
be:99:0a:ef:6f:aa:f7:43:78:f6:9f:2f:06:45:e4:1f:26:d3:
a1:e4:d8:ee:f7:e8:d3:b7:f7:9a:ba:53:93:fa:4a:d6:f1:bf:
d2:2f:92:d5:83:7e:59:7f:7d:56:f2:12:14:13:76:14:3a:af:
2e:30:50:27:4d:f7:56:79:44:07:9b:24:10:21:fb:9c:fd:d5:
aa:5f:8c:32:d4:0f:de:81:d2:ac:51:87:49:8f:79:95:ef:e8:
4b:22:21:fe:8f:d5:b6:75:e5:0f:71:cc:e7:0a:43:0a:0f:d0:
37:c3:d7:84:50:41:cf:b4:d9:90:87:60:4b:03:9c:8e:fc:aa:
e1:75:7d:0a:a4:32:8f:c6:62:e2:50:c7:45:d5:95:3c:05:ee:
50:da:6c:f5:9b:ec:bb:ed:41:c2:9d:e5:7f:99:b0:f0:09:88:
9d:f8:9f:b6:44:63:e1:82:53:fb:4e:61:94:34:62:07:9d:22:
43:9f:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:21:01 2025 by rpki-client