Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: zFvY0i3Zc9cSt/59MCOt2ZMtr74pOKXey9XNqg8Ja+s=
Subject key identifier: D5:05:67:C9:92:20:33:16:A0:EC:AC:6C:5B:2C:91:8C:CC:97:04:64
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 01974E20B80B19762590A4EDFC3E4BCAA42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0C11
Signing time: Sun 08 Jun 2025 06:00:56 +0000
Manifest this update: Sun 08 Jun 2025 06:00:56 +0000
Manifest next update: Mon 09 Jun 2025 06:00:56 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: Z5FD7gTp/axoC2XKyIv/oC5REEDk65JEqQPCO+HSTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:b8:0b:19:76:25:90:a4:ed:fc:3e:4b:ca:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Jun 8 06:00:56 2025 GMT
Not After : Jun 9 06:00:56 2025 GMT
Subject: CN=d50567c992203316a0ecac6c5b2c918ccc970464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:a8:36:d7:c6:57:de:39:f7:ef:ec:b0:d4:
63:10:89:a1:01:c5:df:4d:3f:be:7d:7a:f4:49:14:
7b:82:f0:5a:58:e6:17:e5:46:c8:10:2a:03:49:50:
99:59:18:28:5d:87:f4:69:c5:57:ea:81:90:68:bc:
5d:de:1c:fd:ae:7a:19:1c:76:7c:0a:0b:8f:00:79:
3f:05:cb:a6:a4:96:6b:72:4d:cb:b0:13:a1:26:b6:
60:4d:0b:81:7d:57:b8:f1:89:53:dc:1a:da:ae:bc:
86:95:56:ba:da:15:be:cc:11:09:75:f0:2a:7d:91:
56:fb:a6:88:a0:38:ea:0b:9f:2b:49:7e:f9:8b:9a:
5d:ab:0c:9c:83:3b:2c:51:b5:91:0f:50:cb:cb:ad:
c9:2b:26:ab:db:3c:b3:f0:53:b7:bf:0a:3e:d1:e0:
61:e0:ea:93:3b:5c:99:49:1a:ef:88:68:5f:fa:f4:
9f:83:7e:ea:19:3f:3c:46:c0:5e:e0:f1:b8:34:9b:
18:0b:cf:07:6b:7d:48:22:59:5b:72:7a:a2:a0:46:
6e:6f:7e:33:a0:0f:cb:2b:bb:72:33:71:7d:0e:fa:
52:eb:03:3e:4a:11:36:fb:d0:fe:24:91:db:49:b9:
d5:8b:76:ff:57:9c:62:25:5e:8a:d9:d9:38:c4:9c:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:67:C9:92:20:33:16:A0:EC:AC:6C:5B:2C:91:8C:CC:97:04:64
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:76:14:99:e0:13:cd:18:bb:71:a0:80:8e:32:b6:85:74:19:
15:87:b9:e2:60:71:2b:50:86:19:1a:7f:bd:eb:fd:f7:9f:7b:
6d:7b:ef:6e:29:d3:b6:37:ac:bf:57:ef:38:da:1a:17:23:19:
59:3f:92:37:19:f5:5d:d7:d0:16:cb:d1:16:ad:91:9a:8c:38:
65:db:f0:dd:1c:4d:9c:1d:79:ea:70:c1:74:58:39:e0:79:16:
55:b1:52:af:4c:15:f4:d2:68:87:63:3c:2d:1c:90:58:03:f5:
7e:11:4f:45:54:7b:59:c0:09:7d:38:2a:67:f5:25:7a:b2:1c:
89:52:55:38:df:04:94:16:4b:21:99:1d:70:8e:ab:46:2d:64:
78:3d:f1:8a:d4:e5:75:b9:c9:db:43:92:06:e1:8e:94:b6:12:
da:0a:7f:8c:0f:9d:67:11:12:54:e7:59:bd:1b:c1:87:d7:95:
67:5a:bb:3f:f4:24:dd:64:bc:1a:bd:e6:43:39:41:a0:ae:30:
9c:e9:ec:9f:26:87:71:2d:aa:f8:50:df:6e:d9:ad:aa:de:38:
fd:8c:63:f8:07:e8:a7:19:61:f0:e8:72:9c:8c:f2:fc:39:07:
1d:d1:f4:c7:99:8f:f0:8d:46:6c:92:83:e5:7c:3c:42:22:1f:
8c:9b:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:06 2025 by rpki-client