
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: Ok6cNdhHTtbVF5pCB7DqEOPZzJkbcQpdppsMXBs+MBI=
Subject key identifier: DF:9F:21:3B:6E:C5:1F:4F:15:3E:16:89:27:39:1C:9C:43:AB:56:C7
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01976A732FC3C815B810273488E7A23CFBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 18:00:23 +0000
Manifest this update: Fri 13 Jun 2025 18:00:23 +0000
Manifest next update: Sat 14 Jun 2025 18:00:23 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: Mhtxufz3uOuMCyG6ak4HyO+id7asiOSawRBAvhm9Mkc=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:2f:c3:c8:15:b8:10:27:34:88:e7:a2:3c:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jun 13 18:00:23 2025 GMT
Not After : Jun 14 18:00:23 2025 GMT
Subject: CN=df9f213b6ec51f4f153e168927391c9c43ab56c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:20:2a:d3:4e:f4:b8:a1:05:e7:3c:66:d2:
bb:41:40:55:41:c4:37:d6:23:4c:3e:6d:d1:21:3f:
c3:ca:4b:01:c8:81:e2:d7:27:1c:4a:98:e0:b2:ec:
a4:39:7f:8e:4d:bd:93:c3:b0:77:00:5e:a1:5c:e7:
3a:81:ee:88:ba:5d:8d:f7:ca:b7:06:d2:35:43:3f:
39:5a:dd:ca:f4:9e:44:36:fc:4b:e8:17:71:18:55:
f8:cf:35:2a:80:4d:64:a2:41:c1:df:18:22:5a:79:
a1:6a:b3:89:18:49:a6:29:af:01:7e:09:9e:41:6b:
68:c7:e9:86:32:3c:54:13:3b:83:03:10:56:e9:14:
47:de:ca:c0:83:27:12:20:29:e0:23:d9:d6:1e:90:
ce:e0:5c:93:5d:88:92:01:58:f8:b2:a7:bb:0f:9e:
12:33:e5:30:4d:c9:47:b4:58:41:9b:00:8d:ea:40:
53:2e:f1:70:b4:13:e8:c3:18:53:2e:cf:f7:2f:3f:
0f:fe:7b:3a:f9:78:18:cf:60:09:be:09:c3:ff:34:
bf:59:98:8b:ec:bc:10:f5:c9:ac:7e:24:10:8b:1a:
df:f5:fa:23:2e:6a:3c:f3:68:f9:d2:ce:d8:19:95:
98:bd:c8:ee:3d:28:1d:eb:79:bf:ea:00:c2:af:eb:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:21:3B:6E:C5:1F:4F:15:3E:16:89:27:39:1C:9C:43:AB:56:C7
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:6b:84:23:4e:dc:cd:bc:47:2a:57:9d:ea:49:19:58:74:
38:e6:5f:e5:b5:8e:9c:be:0d:b6:23:81:66:9b:80:68:d3:88:
ad:ed:f3:9b:6c:fe:f4:99:50:07:40:d6:ea:2a:b7:91:c2:3f:
12:19:e9:0b:7d:89:4d:bd:81:95:59:50:ca:b9:5f:49:bf:9a:
28:20:7b:d9:e8:6b:a4:cd:56:cc:e6:45:30:60:62:7a:c5:f5:
66:6b:f9:48:e6:73:fb:32:fb:df:3f:b6:15:27:b9:51:3c:4f:
60:cd:bb:dd:e3:c1:54:98:18:dd:cf:62:88:4d:18:55:9f:6b:
8b:20:4c:1e:80:a9:db:22:68:c7:b1:ca:70:44:e9:52:a8:cc:
d0:0c:2b:c1:17:6f:1c:2d:69:b5:8e:21:d8:17:eb:72:43:cc:
70:35:05:44:90:0c:76:ed:c8:1c:89:ae:12:2d:c7:08:84:f8:
d1:f6:f0:76:26:fc:4b:ad:0f:c6:8e:1b:43:83:98:b6:68:b0:
32:a5:a3:0b:76:92:fb:a8:cf:1b:56:9f:32:50:ed:e3:7a:b1:
17:e4:84:59:7b:c6:6b:ee:6d:f5:b9:4a:ba:1f:83:3f:26:ea:
94:61:c4:3b:c1:f9:93:e6:78:28:63:33:e8:7a:46:ed:73:e6:
73:58:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:03:22 2025 by rpki-client