Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: X5d9d4oIMp4ZcQHsN1/VwCK/JRVhh7MLD2qdfKfwWwA=
Subject key identifier: B0:81:6F:44:67:76:A2:E0:66:40:59:9C:A2:7A:E0:B6:74:83:A1:F0
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 019745F8DE940C50FC83E39E2EC3997ED866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 14AC
Signing time: Fri 06 Jun 2025 16:00:27 +0000
Manifest this update: Fri 06 Jun 2025 16:00:27 +0000
Manifest next update: Sat 07 Jun 2025 16:00:27 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: 3OX1Z9f7yTlkQUuD7uTue3klGiZYFKrC1KhaS93kKd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:de:94:0c:50:fc:83:e3:9e:2e:c3:99:7e:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jun 6 16:00:27 2025 GMT
Not After : Jun 7 16:00:27 2025 GMT
Subject: CN=b0816f446776a2e06640599ca27ae0b67483a1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:e5:3a:21:fc:f2:5d:81:ef:73:34:09:a9:
85:c0:1b:cb:4b:de:98:7d:bb:be:25:96:64:68:23:
85:69:19:83:e2:78:a9:dc:c2:2a:5b:95:f4:f6:56:
11:a5:67:49:11:48:cb:54:d2:4b:05:c8:0f:e9:e5:
78:c0:ac:1c:5b:e2:d0:25:1d:fa:2e:d4:42:88:4d:
f6:69:5e:60:fa:1c:17:c1:ae:e9:e7:c4:5b:04:c9:
8c:28:cc:3e:85:05:5e:43:28:f2:10:67:02:c5:cd:
9a:b1:8b:ac:0c:51:e7:7d:e6:02:4d:da:b1:5e:d7:
14:af:a6:1e:16:18:95:43:44:68:6d:a0:d4:f1:6e:
1d:07:ce:44:9d:9e:67:69:94:bb:3c:8f:94:1e:9e:
5e:88:2d:97:da:78:9e:db:44:1b:86:ee:61:6e:64:
2a:85:59:43:f4:b6:9e:3b:54:35:ac:a5:39:f7:4d:
2b:f7:33:5f:98:91:47:3b:1d:63:f8:15:f8:cd:7c:
b7:bd:c8:11:fb:e9:6f:3e:a8:ea:e3:dc:c2:35:17:
44:bd:75:79:0e:d0:33:17:ac:29:de:98:d4:80:d4:
5d:77:c2:a5:41:b0:4e:82:d0:17:f6:1e:92:b6:d6:
27:09:9a:59:18:9c:0d:9a:23:d8:56:d6:55:b5:db:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:6F:44:67:76:A2:E0:66:40:59:9C:A2:7A:E0:B6:74:83:A1:F0
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:80:d8:c0:25:86:01:fd:06:57:74:78:ee:d6:1c:ca:b7:3b:
a7:d6:7f:51:d5:8b:72:2c:bb:f9:0e:d2:ee:71:1d:97:15:c1:
53:d3:44:55:86:7b:b1:c0:f8:84:6d:ce:6d:1f:3a:36:0e:77:
9c:1a:9c:eb:5b:2d:2f:4a:a5:ae:dc:27:cb:72:4e:f5:88:16:
5e:01:1e:2d:99:81:5e:fa:47:26:32:e7:7e:aa:32:5d:27:51:
67:6e:dc:33:de:9d:04:d0:15:a9:c5:7a:9e:3f:9e:23:7e:1f:
34:79:d8:2f:ee:1f:63:e1:d9:bc:0a:33:d5:b9:c8:b4:76:ba:
ac:c5:0c:db:04:73:79:8c:9f:a3:28:06:be:59:a8:b3:e5:08:
d9:89:fa:78:11:a8:72:55:6b:c8:f5:34:10:2d:30:df:53:b0:
a7:02:4c:09:34:06:ba:7b:34:4d:38:7b:4f:fc:7e:27:14:bf:
94:1f:b2:af:0f:27:9f:2e:56:b5:2f:70:65:04:b7:9d:ab:8d:
00:b6:0f:2b:c2:e9:5b:5f:5e:cf:5a:ac:92:08:e2:96:dc:38:
6d:aa:62:eb:dc:0a:8a:68:0f:41:66:ae:1d:6d:13:aa:c0:31:
9b:8d:ab:12:ca:70:3a:3a:56:4a:c9:f7:a6:97:79:ac:11:24:
e2:15:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:12 2025 by rpki-client