Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: Y298jvYgordIOOMUl0KIVEOc6bWvi8Ui3E7g6qDAlzw=
Subject key identifier: DC:2A:54:67:6A:01:C7:29:F5:F4:AB:A0:6A:FD:95:35:86:B7:9F:20
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0198432BF7EDFD2884908DA77CB59BEBAE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 14F4
Signing time: Fri 25 Jul 2025 20:00:11 +0000
Manifest this update: Fri 25 Jul 2025 20:00:11 +0000
Manifest next update: Sat 26 Jul 2025 20:00:11 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: nm2ZtwBAuQflAaqIIUg89d7Wm4dWkyN9GB7+i6S5Lt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2b:f7:ed:fd:28:84:90:8d:a7:7c:b5:9b:eb:ae:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jul 25 20:00:11 2025 GMT
Not After : Jul 26 20:00:11 2025 GMT
Subject: CN=dc2a54676a01c729f5f4aba06afd953586b79f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:36:b6:2f:c2:3a:46:38:ab:4f:fd:ac:68:
5d:72:59:dc:b5:3d:fa:d9:3c:36:1e:a5:3a:32:c6:
6e:69:2b:e2:f7:17:b9:9b:07:9c:59:d3:64:46:e0:
9e:49:a3:6f:12:ff:10:ff:01:7d:d9:02:75:50:44:
d7:82:1d:1c:28:b4:3c:64:2b:80:8b:42:a8:5d:cb:
f9:bd:83:45:44:d9:fa:64:4c:e0:61:84:d9:4e:91:
6b:a3:18:c1:ab:4c:98:b2:d6:a6:19:90:2e:80:da:
a4:4f:96:5c:ee:47:6a:ea:e1:0d:60:26:a0:6f:86:
6e:de:26:c0:b5:58:bd:92:17:26:57:0e:b1:6f:c2:
ef:c0:26:8f:3a:4a:f2:c4:39:5e:9c:89:65:71:f2:
84:ea:2d:9d:7e:72:63:5f:fb:ac:5f:7c:93:ab:1f:
d2:5a:a6:33:61:53:73:df:81:25:52:8e:f3:93:0a:
53:fd:3c:2c:07:ce:a1:23:bd:db:66:87:40:84:b0:
15:2a:a5:ef:42:31:2d:da:9c:6b:66:c8:dc:55:83:
57:dc:37:22:db:05:88:c4:8c:2f:44:85:e2:5f:be:
f3:a0:f7:d9:c0:1a:4a:95:0c:d4:fc:97:97:42:d9:
e9:09:88:b2:83:58:14:a5:80:27:fb:a0:20:e8:87:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:54:67:6A:01:C7:29:F5:F4:AB:A0:6A:FD:95:35:86:B7:9F:20
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3c:fa:09:28:45:a5:e7:cb:5e:7e:57:d8:71:f7:9d:1a:90:
fa:8e:db:05:13:02:33:91:02:15:60:f6:14:66:17:1f:f8:1c:
8e:0a:56:4e:87:2a:25:9e:3e:0d:5a:59:75:68:73:a8:64:d7:
c3:f2:7b:88:5c:e5:4f:3f:90:47:0a:55:d7:36:34:ed:47:93:
a2:92:ec:b1:94:42:e2:c7:7f:7c:8d:8c:ba:1c:44:fa:74:34:
7e:f2:5d:70:1b:21:b5:a8:bc:bf:7c:bb:52:18:69:57:a1:1e:
cb:7f:c4:51:e5:1b:33:41:e3:e6:89:cd:11:6a:f7:fa:fc:6f:
d3:e7:d7:6a:12:f9:25:24:b3:31:99:39:b2:00:72:80:98:af:
22:c4:8b:9e:b4:75:55:6b:2c:1f:8f:1c:67:55:6e:85:43:fd:
28:14:a3:89:78:c5:70:d9:9c:40:b1:01:91:af:ce:98:94:d6:
9b:4f:fc:52:6e:05:47:e3:7f:3e:d3:68:32:26:66:e0:6d:a0:
c2:1d:17:d1:60:c2:c5:62:7a:17:3f:e9:9e:86:e5:f2:50:e4:
6b:4b:f1:25:24:cf:8b:df:00:70:1d:d9:a9:90:fa:c2:5a:63:
fa:a2:68:bc:90:37:2b:85:ed:45:4d:e8:ae:5a:2a:ab:15:57:
f8:1c:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:16:45 2025 by rpki-client