Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: l+NH0ukkCGRX6HB8kYkmmUhI7SXQwWiqEOdqdrXEB0s=
Subject key identifier: 1F:D9:E8:21:EE:B0:F2:4D:B9:82:B6:1A:5F:D7:6E:C1:1E:33:B0:C4
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01974B56BC174C062CA556F226FFB6C710F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 159B
Signing time: Sat 07 Jun 2025 17:01:04 +0000
Manifest this update: Sat 07 Jun 2025 17:01:04 +0000
Manifest next update: Sun 08 Jun 2025 17:01:04 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: OwAcmmN+rLwwe4U9S/PM1laa7kPPEAipNpGc6vjTLms=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:bc:17:4c:06:2c:a5:56:f2:26:ff:b6:c7:10:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 7 17:01:04 2025 GMT
Not After : Jun 8 17:01:04 2025 GMT
Subject: CN=1fd9e821eeb0f24db982b61a5fd76ec11e33b0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:9d:70:de:05:77:7f:d7:99:36:2d:bf:c7:
87:da:52:36:3f:20:e6:81:ce:e1:45:8b:95:cd:8e:
73:f2:dc:62:b5:5b:40:1b:13:a6:4d:62:53:c9:09:
0b:8c:0e:41:a6:68:d9:98:e6:7a:83:b1:b6:e3:0d:
2f:da:b9:5a:d6:33:34:c3:35:ed:ea:64:32:42:dd:
3c:62:36:e1:ce:7d:8f:b4:2b:16:61:26:2b:d4:ad:
0b:f5:2e:a4:69:22:26:11:d4:46:68:ae:66:7a:fb:
50:a2:6a:7d:1b:03:86:ef:3e:9d:35:e8:dc:b0:7d:
58:d6:60:df:34:9a:20:c1:c4:34:3c:89:3b:20:93:
c1:39:b6:d8:78:43:10:95:17:21:6e:c5:e3:22:8b:
b9:37:df:fd:43:f2:b9:af:20:78:59:40:43:53:3f:
0f:b8:fa:8d:90:d4:e4:c8:eb:9f:ff:e1:7d:48:eb:
c8:24:ee:fa:29:b8:2e:43:48:e1:84:d7:50:63:2a:
12:8e:79:1d:df:93:54:5f:7a:87:7a:98:7f:8a:58:
e6:2b:4f:b3:35:9d:29:3c:10:11:98:51:85:3b:f3:
01:8a:7a:e5:70:ee:ef:60:cc:6f:cb:e7:0d:0a:65:
9a:4d:3a:e5:f8:ba:57:33:e0:55:18:9d:d9:4d:69:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:E8:21:EE:B0:F2:4D:B9:82:B6:1A:5F:D7:6E:C1:1E:33:B0:C4
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:52:80:68:09:e2:d7:86:44:31:16:be:e5:9f:1a:a8:d8:b4:
17:c0:0e:76:fe:eb:13:98:50:b0:cb:b1:c1:f7:4e:89:3d:d3:
92:c9:1d:82:00:99:d8:d1:b7:5e:9a:4e:31:21:95:56:08:93:
ee:02:bf:2e:84:fb:8f:1e:94:9e:de:9c:d7:be:43:9e:96:d7:
65:85:17:f7:00:e9:e6:34:6e:61:00:b8:2d:65:d4:22:d1:78:
c4:0e:19:85:34:3d:e5:21:25:c0:69:f7:f3:9c:4d:38:c4:6e:
90:e9:30:5b:c0:69:85:3d:e2:34:85:5d:9f:bf:70:b5:8e:c4:
24:fd:15:ac:cd:95:13:d0:8b:c1:a5:19:f7:01:0f:d8:63:b7:
68:a1:0b:cf:7a:82:24:ff:68:6a:53:d0:30:7a:83:d9:71:55:
b5:7e:06:8c:79:c8:2b:38:a2:ae:3d:32:32:14:7e:80:07:9f:
54:35:de:0a:49:c3:7b:d2:8a:dc:ef:8c:f3:08:f5:ff:5c:c1:
1a:01:9b:8a:4c:3a:0c:b1:f0:66:2f:d2:e6:65:7c:75:da:f6:
78:67:cc:90:87:be:f2:b8:a4:e3:0f:0a:8f:40:f8:ff:fc:10:
76:a6:1e:01:c3:79:ff:ed:fe:84:3b:f9:d7:61:13:24:89:df:
67:ff:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:41 2025 by rpki-client