Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: RKGsJIAU9kKWSDfeqGZWdtDWX5x4pBJvbAApCnnJDcs=
Subject key identifier: AB:07:D0:32:86:30:4D:4E:5C:DB:7F:C7:84:01:B4:E7:0F:44:87:1F
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 01974B1F5B06CA06030EF5B90690C8079B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 119F
Signing time: Sat 07 Jun 2025 16:00:35 +0000
Manifest this update: Sat 07 Jun 2025 16:00:35 +0000
Manifest next update: Sun 08 Jun 2025 16:00:35 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: MfroRAc6TJPl5S4uI2yhPCZ7zTVayeQxPff13S+NWOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:5b:06:ca:06:03:0e:f5:b9:06:90:c8:07:9b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jun 7 16:00:35 2025 GMT
Not After : Jun 8 16:00:35 2025 GMT
Subject: CN=ab07d03286304d4e5cdb7fc78401b4e70f44871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:c9:20:c3:cc:e1:dc:19:ed:eb:35:22:a4:
f9:44:ed:c8:18:86:4a:dd:43:a4:27:95:9a:d7:a7:
ef:a4:7c:84:e4:a2:79:0b:13:12:b6:87:17:d7:94:
6f:fe:7c:f7:77:33:ad:11:16:8e:e7:4a:68:a8:97:
77:6e:3e:3d:4a:e0:2f:05:b2:50:aa:be:6d:8a:4d:
01:cb:c2:29:1a:e4:a9:da:96:3d:de:2c:62:46:57:
be:1b:6c:0a:78:e9:47:97:02:24:9a:4f:70:2a:3b:
75:e8:a8:56:d6:8a:04:93:d1:63:14:57:23:d7:06:
62:d1:77:74:94:80:a3:10:f6:ce:93:88:02:e0:a1:
bc:90:a7:74:dd:8c:df:ac:d7:e2:df:00:82:35:91:
d4:d0:9e:07:8f:0d:a7:f9:49:39:8e:87:47:68:01:
9c:b9:c1:6d:5e:5f:09:ca:7c:ae:17:3a:7b:b3:c0:
e0:a0:39:c2:37:27:06:36:08:3d:58:e7:70:19:04:
de:be:f3:f9:0d:cd:27:04:63:41:f1:cb:4a:16:95:
9d:a7:e3:79:3b:89:92:da:78:8e:31:47:84:f6:2a:
ae:ea:fd:90:b0:d5:ac:64:29:a9:57:66:27:90:13:
54:6a:80:7e:44:bc:1e:20:c4:7a:ff:05:94:71:0d:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:D0:32:86:30:4D:4E:5C:DB:7F:C7:84:01:B4:E7:0F:44:87:1F
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e4:0b:75:c2:8c:c3:d3:c6:d1:ba:32:64:e2:4b:e9:9a:70:
ef:90:84:0d:d7:d9:f6:f0:ba:13:32:af:68:2d:98:d5:22:79:
2e:bf:e3:1c:23:79:10:e9:bb:1b:73:40:fd:d6:46:b7:7d:1e:
22:e5:d6:a6:b3:05:77:68:2e:e4:1d:77:9d:30:82:dd:33:8f:
88:d0:c8:5c:7a:bc:c2:64:a5:9a:11:53:e9:e4:8e:df:6a:78:
83:1f:d9:d4:38:d2:61:12:fd:bf:6e:2a:51:88:ea:70:12:06:
91:fe:09:2e:74:f4:2e:81:a3:fe:b3:46:0b:aa:83:c6:5e:91:
f9:fa:6d:98:50:f3:b5:cf:b9:48:9e:3f:f0:5e:cf:19:d0:11:
ba:55:8b:97:59:ca:09:da:fc:54:03:81:e1:4f:2f:94:ff:20:
61:7d:c4:f4:10:97:66:00:d7:ec:a0:54:2b:87:8b:82:65:fe:
93:c4:91:24:fd:6c:ab:c3:9b:f6:6e:ed:6d:2a:b8:78:5c:91:
74:fd:b0:4e:5d:b6:48:f3:28:3f:02:bb:1c:68:6b:a6:2f:41:
75:cd:5f:64:2f:f3:7c:f2:c1:31:a4:b6:89:e0:92:56:ed:38:
0c:c5:c4:25:7d:91:c8:68:2d:41:83:cf:28:47:7f:c7:dc:51:
01:82:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:55 2025 by rpki-client