Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: FZmDujNNZPOEBQmaDyKe5/iLWKfYXsBGyRQrF0ZDH6s=
Subject key identifier: E9:5E:FE:CF:8D:75:4F:4C:8D:E1:02:A2:42:88:96:D2:FA:19:82:46
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 0197D2186E613F414DF6EC4F1DA9F320766B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 0B8F
Signing time: Thu 03 Jul 2025 21:01:45 +0000
Manifest this update: Thu 03 Jul 2025 21:01:45 +0000
Manifest next update: Fri 04 Jul 2025 21:01:45 +0000
Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: sxA0BEYwoOm2pkwEm1e0pA3BLEbAXoNQt38OCIA6uD0=)
2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:18:6e:61:3f:41:4d:f6:ec:4f:1d:a9:f3:20:76:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Jul 3 21:01:45 2025 GMT
Not After : Jul 4 21:01:45 2025 GMT
Subject: CN=e95efecf8d754f4c8de102a2428896d2fa198246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:6a:7c:bb:0a:5b:5c:da:ea:ee:25:b0:86:
6c:58:f1:4c:a3:08:5c:4f:64:24:7a:c2:e5:d1:9b:
2c:58:06:65:14:2a:a6:29:36:d7:aa:51:86:c5:0c:
e0:0b:55:88:d8:13:c7:2b:5b:8f:0d:61:ed:a9:7b:
27:7f:09:c3:69:75:d0:73:e1:64:ff:28:8b:7b:34:
40:d1:3c:a3:10:4a:60:dd:ad:80:32:ce:33:0a:39:
23:fe:1d:c4:1a:e1:2a:86:0e:0e:97:a5:fe:18:c6:
af:3a:8b:6c:b1:4e:9f:93:db:6a:2b:99:93:97:14:
6b:d2:1e:2f:1f:8e:bf:9e:4c:85:03:d9:d0:33:97:
58:b9:d1:e8:e0:30:d7:ba:f9:1e:db:15:ea:3a:b9:
41:95:fa:9f:49:95:20:a4:57:48:0f:ff:94:80:99:
de:23:ef:49:dd:d5:8d:d9:1a:a0:3b:61:40:6f:97:
d5:5f:98:a6:9d:cf:64:5a:8c:dc:9d:74:8b:5f:db:
f1:52:55:df:b1:32:dc:84:a6:89:56:45:e1:33:06:
db:c1:2f:a1:d3:c0:0f:0f:b3:84:18:5a:b1:b9:df:
a0:fa:22:09:9e:3b:56:93:f7:c4:47:7a:12:ba:33:
3a:cc:6e:42:34:c9:29:4f:65:12:67:98:7a:de:fc:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5E:FE:CF:8D:75:4F:4C:8D:E1:02:A2:42:88:96:D2:FA:19:82:46
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7b:0b:c0:81:7f:6d:3c:f7:d9:3a:ac:94:da:63:31:50:e6:
5f:79:93:f5:1e:a6:31:55:80:b6:91:b6:f5:21:62:9c:a6:58:
04:72:56:2f:1e:74:4b:f3:70:95:cb:5a:fa:87:a5:a2:e6:57:
58:db:e8:54:b6:31:b5:a3:de:aa:1a:aa:8c:14:70:99:36:df:
c6:30:5a:f6:b6:30:71:df:a7:a4:dc:4c:8a:35:0d:a0:00:9c:
c2:78:d3:cd:81:de:df:5c:a9:b4:a1:1a:2f:a5:67:6b:69:39:
79:ef:37:2d:cc:bf:ae:a7:84:1c:75:54:95:f5:1a:1f:ff:54:
48:1b:1e:79:5a:b3:08:20:42:a7:03:c6:d4:7a:c9:f8:07:ae:
25:9e:6f:51:fe:25:c8:04:72:db:e0:dc:ae:a4:77:1b:60:6d:
44:d4:5c:c3:6f:f7:78:c4:e1:b9:a3:4a:46:cc:05:9f:81:40:
89:2c:e8:ff:e0:4a:5f:b0:2a:09:37:ba:4c:3e:89:74:93:7e:
a3:48:3c:ce:dd:3d:52:2a:c2:69:33:32:03:fe:85:64:f7:91:
2a:4b:b3:76:43:a8:97:bb:0e:05:08:d7:33:cd:a1:1c:e7:45:
9e:1f:01:f3:33:9e:2a:38:b0:62:aa:ce:10:f2:ce:49:26:ff:
0f:a9:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:10:16 2025 by rpki-client