Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: kZaKqEMVyRDzHXoS8f2OB3QImC7C9TD2uWIkJYMfYz8=
Subject key identifier: 9C:C4:22:B9:51:AA:6B:BD:AD:D3:88:F9:12:8C:F2:C7:40:5B:5B:28
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 01974E8E217DFF22056778DBCA433F2111FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 020B
Signing time: Sun 08 Jun 2025 08:00:26 +0000
Manifest this update: Sun 08 Jun 2025 08:00:26 +0000
Manifest next update: Mon 09 Jun 2025 08:00:26 +0000
Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: dloViDHngT4GEVmBlYduxqYkSAuaHdkfDHolgTSCRBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:21:7d:ff:22:05:67:78:db:ca:43:3f:21:11:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Jun 8 08:00:26 2025 GMT
Not After : Jun 9 08:00:26 2025 GMT
Subject: CN=9cc422b951aa6bbdadd388f9128cf2c7405b5b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:99:60:0b:59:70:20:23:1c:27:e3:eb:2a:
5d:85:0e:3a:a8:bf:39:cd:ef:d8:7a:d1:89:a6:04:
34:90:bc:a5:2c:84:ec:1e:20:8e:67:67:7e:df:d5:
c4:11:ea:c8:36:82:f7:05:4a:b8:2a:e5:68:10:5e:
cf:87:f1:7d:a6:03:f5:9e:bd:37:db:85:d2:44:40:
65:3c:a0:db:8c:75:19:af:7c:7d:c2:d5:15:bc:26:
0d:39:88:71:bc:ec:17:1b:c8:cd:d1:6d:3d:bd:6c:
c9:d7:4e:b4:d9:0b:b8:92:15:39:d9:7f:36:fc:97:
c2:fb:b0:97:1d:f1:92:69:b3:e5:d6:5a:27:88:84:
08:b1:54:5e:01:ea:ad:e8:7b:7f:f6:ec:60:0e:9b:
e1:8c:28:17:fb:67:2a:ba:1b:b1:f3:a6:89:49:31:
9b:fd:54:c7:14:cd:b3:d1:0a:2c:ef:e7:ef:ce:a8:
10:39:50:9b:f2:b9:91:bc:19:cc:08:aa:f3:cd:69:
68:4a:6b:7f:66:11:3a:97:c5:e4:26:0c:22:ae:61:
68:90:ad:8b:c5:b0:80:16:8a:12:10:4b:29:c2:ff:
cc:04:b0:a0:65:f4:63:f7:fc:2a:de:fc:e4:aa:c9:
38:42:6f:97:99:68:87:20:9d:43:f5:35:38:e8:19:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:22:B9:51:AA:6B:BD:AD:D3:88:F9:12:8C:F2:C7:40:5B:5B:28
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:2f:cd:73:9f:72:89:7b:60:99:24:cc:d8:19:56:83:9d:
d7:2b:ec:01:68:bb:6d:01:24:aa:10:02:1d:0c:fc:bd:18:0d:
ed:e5:40:6a:a4:3d:85:ca:36:e7:cd:70:ed:a1:7a:8c:c6:31:
43:26:bc:19:7d:ab:18:6b:1d:d3:56:ad:aa:5b:86:5a:01:07:
1f:3f:22:cb:82:f1:d4:cc:ef:97:fc:5a:10:5c:d3:59:92:28:
80:63:c7:4d:1b:09:eb:94:6d:d5:5d:05:0e:f1:c7:b3:59:5b:
a2:92:76:43:6e:6a:1d:9c:bc:a0:cf:37:49:b4:1c:7c:fa:f0:
e5:c5:4d:7e:88:93:d5:d3:a5:8e:e5:0a:3b:fb:cf:57:2e:14:
55:14:ff:f1:43:70:71:04:0c:4a:a2:5c:55:d3:75:ec:1b:45:
83:97:bd:3b:f6:10:f6:e9:ec:75:cd:9c:9a:c5:77:66:1c:ef:
e5:2f:ed:fa:90:02:0d:f7:b5:cc:fa:ea:7a:33:32:e1:0a:a5:
ec:08:26:6f:18:c5:6d:c7:1b:b7:74:3a:08:a1:4c:e7:8d:f0:
c5:84:7e:95:ab:7c:27:e1:3b:c5:47:27:6a:86:9c:2e:48:9b:
da:18:c6:2b:99:36:89:76:ff:fe:31:75:fd:b1:1c:6b:4d:21:
37:fd:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:00 2025 by rpki-client