Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: zf83BHIHGMJSAbDFnNMzamy6G5GOKuyscjwivfA9kLo=
Subject key identifier: 65:F5:4F:26:C6:9A:A0:66:9E:A6:FD:99:5A:6B:E7:06:B5:E9:A5:4C
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 019754FE11873115FF2F4FACECF8AC099A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 139F
Signing time: Mon 09 Jun 2025 14:00:26 +0000
Manifest this update: Mon 09 Jun 2025 14:00:26 +0000
Manifest next update: Tue 10 Jun 2025 14:00:26 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: /uSJ20WpmJTRuRCG+Ovj05oEqqnfZHuktlrvvdaBWVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:11:87:31:15:ff:2f:4f:ac:ec:f8:ac:09:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jun 9 14:00:26 2025 GMT
Not After : Jun 10 14:00:26 2025 GMT
Subject: CN=65f54f26c69aa0669ea6fd995a6be706b5e9a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:42:80:c7:3c:1c:eb:87:ae:7d:68:ae:ec:
d0:80:a8:24:33:62:34:99:05:a2:90:19:19:2c:1a:
e4:c7:7d:3b:58:f5:a2:82:eb:6b:08:70:27:f1:1c:
1d:05:19:c7:de:1c:f9:26:8b:68:0e:1e:9d:93:c9:
ca:e1:e5:75:d8:69:4e:bc:2c:1d:f9:8e:65:d8:9f:
7b:d5:95:24:86:77:34:d6:e1:c0:c2:3a:ce:4a:2e:
60:dd:a5:dd:73:1f:cf:0c:37:c9:df:fc:88:a4:bc:
c3:81:5c:18:0d:b4:45:b5:4a:73:59:4a:a4:a2:f2:
5a:8d:fe:91:33:80:08:f3:76:61:b4:df:b8:d2:b8:
80:d4:7c:09:74:8d:ca:49:9f:53:be:63:b2:61:42:
d1:b8:dd:28:31:24:9f:50:a2:a0:be:e9:39:5d:b6:
a9:4c:86:09:7c:2a:f9:af:a3:5c:9f:3d:be:db:81:
db:2d:1f:35:29:95:e2:e0:84:61:ff:ec:c0:43:0f:
f9:af:dd:50:c6:62:ec:b7:a5:34:3d:09:c5:7d:ec:
90:88:20:73:e2:8f:b2:27:7e:1c:ba:c4:58:85:1b:
92:d8:f7:9e:a2:44:1f:2d:d7:a4:54:44:07:32:eb:
c1:16:d0:db:32:19:1b:1a:7b:50:72:54:15:71:1b:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:4F:26:C6:9A:A0:66:9E:A6:FD:99:5A:6B:E7:06:B5:E9:A5:4C
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fe:b4:32:3b:b1:12:26:ce:cf:ec:1e:50:77:1f:2a:87:a5:
0b:2f:a8:87:91:5d:5d:d6:33:20:26:a4:65:93:02:fd:3d:90:
c7:d9:27:2a:3c:89:d5:49:41:ed:22:d0:34:e7:b5:19:ce:a0:
4a:7b:5a:b8:65:c2:ee:93:9a:ad:7a:3c:f4:1d:83:1a:4b:90:
97:f4:48:94:9c:6e:7b:a0:a6:52:a7:35:84:fd:bc:9f:b5:4d:
64:48:bc:54:18:23:6b:7d:fd:fc:30:63:dd:56:61:24:2e:95:
9d:a5:c1:e0:8e:b8:28:98:f9:57:73:86:bf:73:33:a2:a3:5e:
70:c9:f6:6e:5a:a2:bc:6a:f5:c5:0b:cc:58:c0:75:44:9e:a2:
e6:ad:84:c0:33:d2:8d:e1:d4:e2:a5:09:51:fb:69:3c:d9:8e:
45:33:ad:40:75:db:ab:2e:4e:87:46:53:e2:39:b9:45:db:40:
f0:27:99:83:41:46:19:38:c8:96:9c:0f:5e:41:93:2f:fd:6d:
c9:54:52:c0:97:36:f3:ad:37:6f:84:2e:22:0b:7f:4a:59:18:
90:82:8a:f0:0f:d4:1d:51:dc:78:74:d4:4e:43:3f:e9:cd:84:
f8:90:14:06:8b:17:b2:9f:30:d2:73:52:12:a1:40:0c:fe:54:
db:7f:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:11:01 2025 by rpki-client