Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: NxiaDlhoITVB+O0VirZRmmSNmpcz0RObqr91bj9jve0=
Subject key identifier: B9:6F:E6:F9:44:94:59:E3:3C:32:23:5B:97:D2:12:0B:A2:26:19:52
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 019768852DCA994F148D211BE80B6B72E84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 10C1
Signing time: Fri 13 Jun 2025 09:00:47 +0000
Manifest this update: Fri 13 Jun 2025 09:00:47 +0000
Manifest next update: Sat 14 Jun 2025 09:00:47 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: KIKK0Vdpv70OXQ8qTQvPGJ3+ffSB3hb/7Tib30pewRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:2d:ca:99:4f:14:8d:21:1b:e8:0b:6b:72:e8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jun 13 09:00:47 2025 GMT
Not After : Jun 14 09:00:47 2025 GMT
Subject: CN=b96fe6f9449459e33c32235b97d2120ba2261952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:99:e0:2d:0b:84:3f:94:9a:f1:01:39:26:
71:6f:e8:28:73:b3:1b:8a:37:78:21:06:95:07:81:
2c:b2:ef:7f:ff:3e:4d:24:4b:f6:01:19:06:91:c9:
0b:9b:49:b6:73:94:eb:f8:02:c2:ed:82:c6:8d:ad:
56:b1:46:50:94:e0:df:bc:79:49:a8:ef:9d:02:e8:
8f:9b:48:40:bd:6e:98:86:21:8e:94:4b:81:50:f1:
97:77:a0:af:2e:f3:38:e1:26:30:8b:8d:5b:73:ca:
68:6a:41:49:a6:86:24:f9:f7:6e:cc:26:83:79:17:
28:c3:b8:3a:b0:ae:37:59:88:31:be:ff:09:f7:39:
8b:64:28:d6:aa:3d:ad:b2:b2:9e:38:13:df:91:43:
b2:53:8b:10:e5:84:7c:23:38:aa:dc:31:9b:0d:c0:
37:1a:aa:ed:01:37:be:03:b1:2c:b0:42:d2:19:95:
a9:41:f6:f2:b7:bc:0b:43:b4:34:a9:0f:ca:3f:1f:
6a:5d:35:ea:b2:b3:7d:e1:91:04:05:9d:f8:66:8d:
7a:dc:b6:5b:9f:99:ac:af:c8:96:41:fe:36:5d:b4:
a7:31:76:2f:79:05:43:b8:89:92:f8:91:93:9e:7d:
38:fb:1c:a5:1b:fc:44:dd:af:07:1c:65:46:41:e2:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:E6:F9:44:94:59:E3:3C:32:23:5B:97:D2:12:0B:A2:26:19:52
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:70:43:ca:08:ae:89:09:c6:cf:08:ce:27:c7:c1:22:fd:bb:
74:86:91:e6:66:4b:17:61:e3:00:32:1f:9a:6c:03:d7:52:44:
b7:e0:b0:36:ca:4c:bc:3c:a1:64:7f:84:16:6d:8a:6e:6d:16:
1d:43:a7:dd:cd:b2:4f:f3:cb:78:5b:7a:fd:6f:27:47:32:25:
1b:4b:61:f3:48:08:17:ca:f9:7d:5c:ec:3f:6e:12:63:3c:90:
9b:79:73:c8:73:43:1f:83:a2:fc:8e:de:af:bf:2f:3e:b0:0a:
96:16:a9:20:89:2d:5b:84:77:84:cd:c5:b2:de:b6:bb:c5:57:
48:22:ac:f6:f3:86:1d:a9:10:ca:84:aa:42:2a:e9:11:cf:63:
ac:b4:e9:b4:c8:80:0d:a8:4a:3e:32:ce:09:64:39:9c:73:86:
cd:c5:15:d0:b7:c1:0f:37:d5:78:97:f3:bc:42:03:8f:23:4b:
df:a2:e1:4a:5d:6f:6f:2b:69:e1:38:4f:fb:64:7e:26:66:82:
92:88:c9:88:a9:2e:77:36:91:15:92:3b:68:f7:29:9e:b7:ac:
02:f5:b0:f4:0d:58:ac:ab:89:cf:f8:ff:39:f4:ab:70:99:c7:
4b:65:40:22:1d:f1:aa:da:06:4b:91:40:3b:10:13:e6:2e:b0:
03:d2:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:54:51 2025 by rpki-client