Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: GE2gGf6gyKCcVZwa64F8ehKQiv9US9tevhrAZiU2ogk=
Subject key identifier: 88:F4:EA:12:74:63:E0:12:1D:9B:41:CB:A5:DC:73:81:8E:4B:6A:98
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 019751218C40994427CB3625F9D49E5FF6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0D42
Signing time: Sun 08 Jun 2025 20:00:42 +0000
Manifest this update: Sun 08 Jun 2025 20:00:42 +0000
Manifest next update: Mon 09 Jun 2025 20:00:42 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: BVaX9KCiODEE/n57ZCUj1fB6ROfJkZD3Z0OJhGAQgTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:8c:40:99:44:27:cb:36:25:f9:d4:9e:5f:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Jun 8 20:00:42 2025 GMT
Not After : Jun 9 20:00:42 2025 GMT
Subject: CN=88f4ea127463e0121d9b41cba5dc73818e4b6a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:f5:15:a1:d5:5f:f7:5e:15:39:8a:bd:15:
26:15:09:70:ed:85:74:68:b4:44:cb:32:e8:96:b9:
f7:a8:ca:48:66:d2:af:1d:63:a0:de:f8:47:12:29:
35:2c:24:fa:69:82:66:c9:19:a8:d3:fb:d0:de:4b:
f7:62:5b:e4:e7:9f:73:c6:45:6b:0f:80:d6:f9:81:
e0:79:55:5c:c6:b6:a6:74:b5:cc:57:65:2d:ec:73:
6e:2b:dd:5b:61:dc:8e:3c:96:e8:89:aa:5d:df:a0:
26:37:c7:3d:76:e0:5a:f7:11:26:47:6f:e9:05:d3:
5f:a5:cc:65:4f:8e:70:be:3d:3a:60:3f:8d:2d:41:
d2:b3:f9:ee:9c:26:b9:ed:fa:cf:fb:ee:dc:13:ab:
4a:19:4d:18:12:9c:d4:70:a3:0c:cc:01:33:b8:03:
64:cc:38:5b:17:df:98:ec:9d:d1:d7:0a:d9:92:41:
bb:97:a6:1e:ab:9d:89:35:1a:43:b3:4f:37:9c:9b:
6a:42:e1:58:0c:34:be:54:b8:68:dc:56:1c:fc:78:
a2:4b:99:da:c7:26:e6:6c:74:96:73:62:fc:78:ba:
3b:ef:79:f7:7c:65:83:2b:c1:81:f8:36:3e:e3:d6:
7d:85:b6:54:08:1c:36:f6:61:07:3c:44:28:85:d3:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:EA:12:74:63:E0:12:1D:9B:41:CB:A5:DC:73:81:8E:4B:6A:98
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:12:5a:0c:d3:4a:5a:bb:11:09:28:14:9f:e2:9c:8d:27:
ca:92:21:3c:99:aa:3b:15:8e:b5:76:b8:fc:a8:d7:0b:e5:d0:
31:b2:4b:27:4e:b0:d2:ea:1f:c0:6f:a6:c3:c9:c6:f4:86:e3:
88:76:b1:d7:af:95:7e:ca:76:53:eb:1e:c2:55:e6:27:60:97:
bf:ba:26:12:2e:a0:d9:95:82:70:f0:95:84:80:f3:4f:83:87:
ab:20:ca:a4:c4:6a:44:7e:d6:f6:ed:51:04:9c:3c:7f:95:d6:
ba:b2:93:ef:0f:3f:12:6d:29:33:25:ab:a4:7a:c3:01:e6:cb:
24:2d:af:22:06:28:fd:ad:d9:4c:21:e5:3e:0d:ea:dd:1d:0a:
29:b3:2e:af:68:53:34:3b:21:e0:28:29:88:43:44:89:bb:f0:
e0:9c:e2:c1:c0:37:59:b8:7b:83:e0:a0:ec:50:c0:12:0b:e6:
4f:96:05:af:1e:4a:33:05:6b:a6:15:71:f0:96:76:37:4f:06:
a2:f9:a1:49:d6:50:60:6e:53:93:4e:52:d4:99:18:44:e2:6d:
27:db:6c:94:11:4e:1e:68:51:1f:c7:81:8e:df:73:98:55:7a:
52:4c:5a:f9:7a:5d:4d:62:de:43:c4:24:55:db:32:9e:49:49:
cf:49:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:42:34 2025 by rpki-client