Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: 3Ffrwd4BkZN4fuYWB3N24DtAAOkw8iU4m0dQ8FHuVcg=
Subject key identifier: 51:43:63:91:F9:A1:30:98:62:CA:13:99:A8:6A:DA:28:B6:11:08:F8
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019751FD645D79C967BEE33273AC03FA5F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0E2F
Signing time: Mon 09 Jun 2025 00:00:50 +0000
Manifest this update: Mon 09 Jun 2025 00:00:50 +0000
Manifest next update: Tue 10 Jun 2025 00:00:50 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: r6YH9sEiuRnsPSHA9GBOh+Al4BKVzmtOn85TFOtnbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:64:5d:79:c9:67:be:e3:32:73:ac:03:fa:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jun 9 00:00:50 2025 GMT
Not After : Jun 10 00:00:50 2025 GMT
Subject: CN=51436391f9a1309862ca1399a86ada28b61108f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:df:ca:4e:06:29:74:0b:dc:b8:a9:92:e8:
10:6c:e8:5f:64:a2:29:32:53:d1:ee:40:c7:7e:61:
d5:5d:19:b5:3e:b4:ea:b6:34:76:19:62:94:ac:74:
6c:f2:cb:e1:91:89:a9:2f:d6:62:a8:6d:2c:45:d7:
1c:31:a9:1b:53:fd:1a:16:da:ca:4b:b6:29:15:75:
7b:9e:6b:47:69:82:9f:81:e0:e9:ee:7c:14:05:65:
20:dd:14:06:34:13:9f:72:6f:e6:5e:86:36:fa:74:
8a:ff:55:f5:c3:87:ed:bd:21:34:78:95:fc:a1:70:
f0:a2:a1:b3:8d:86:9c:60:84:83:6b:6c:60:4f:33:
46:14:88:09:83:db:03:8c:ab:57:b0:fd:06:48:a3:
ce:f5:6e:3f:4a:6b:c9:a2:da:c7:5a:8c:cc:ef:73:
2a:81:b9:dd:a6:26:7f:54:71:ed:26:5f:72:06:68:
1b:c0:9b:ba:8e:dc:b2:52:1d:a4:16:31:5a:9a:66:
d8:8a:14:3a:06:d8:42:7a:5f:33:27:59:0a:e2:95:
1b:43:0b:4c:a6:72:b9:1d:fc:0f:15:07:8a:96:17:
d0:b4:4e:53:53:0e:44:2d:a6:bf:59:d6:67:8c:49:
79:e2:00:a0:6c:0c:c6:15:a9:1c:38:a8:cc:e8:69:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:63:91:F9:A1:30:98:62:CA:13:99:A8:6A:DA:28:B6:11:08:F8
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:31:10:8c:64:b0:b4:6c:a9:db:b5:19:2d:af:6b:15:ac:
2f:6e:0c:fb:ed:cb:5c:76:4b:26:a7:0b:02:c6:ba:27:a6:e5:
1f:55:a5:74:f3:68:6b:26:0c:32:eb:fb:1d:64:9e:68:78:8e:
aa:31:fb:61:eb:c7:0c:99:3b:d3:79:d2:32:98:be:c5:70:ca:
58:58:ee:05:ab:a0:67:c6:53:84:b9:80:0e:d3:5d:4b:bc:b0:
6f:eb:e5:a7:fc:5c:ab:e5:9d:7c:7e:95:bb:6e:b9:ef:43:b3:
b3:70:5d:5f:58:7f:cd:38:2b:0c:91:08:ce:6f:1a:73:dc:28:
42:75:e0:24:7c:6a:48:09:ff:cc:81:ce:9c:33:e6:ee:3f:25:
aa:fd:b4:b4:fc:10:74:24:02:1c:3f:ed:5a:20:c5:0d:12:e1:
c8:1a:e4:f5:14:11:54:b3:93:01:a8:4a:5c:9f:c3:3e:1a:35:
78:ec:68:7c:e4:9f:6e:ba:05:6b:77:3a:b5:9a:55:0b:42:f3:
dc:34:4e:33:39:74:07:7f:95:b8:54:c1:ea:10:75:91:7c:f3:
6f:8a:fb:11:24:0a:68:37:56:f5:2e:b1:6b:1d:20:8a:8e:94:
b2:c5:76:0a:26:43:ca:17:96:a8:28:dc:a4:9b:ef:64:d0:8a:
95:32:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:05 2025 by rpki-client