Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: Wsw6QMtAVLV/6/GclMb1nfEkJDx1En9vojUdDfTL68o=
Subject key identifier: 59:38:B0:52:21:EE:D2:34:47:29:31:A3:66:D6:E1:33:60:93:FE:8D
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 01992CD8DB288EB1B0F4809B2A251F70BC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 017C
Signing time: Tue 09 Sep 2025 05:00:33 +0000
Manifest this update: Tue 09 Sep 2025 05:00:33 +0000
Manifest next update: Wed 10 Sep 2025 05:00:33 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: q1fzGCJqcp3ZUvDYZsEWGNf5HZ8K2my1MJjLjLyedR8=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:db:28:8e:b1:b0:f4:80:9b:2a:25:1f:70:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Sep 9 05:00:33 2025 GMT
Not After : Sep 10 05:00:33 2025 GMT
Subject: CN=5938b05221eed234472931a366d6e1336093fe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:8e:ba:37:09:3f:b0:f7:e5:64:01:c2:74:
9b:07:e4:09:49:29:71:d7:cf:96:a5:92:1f:67:30:
81:27:c6:db:27:43:78:a1:23:c8:65:a8:68:0f:1b:
9d:1d:e1:fe:9b:3f:de:43:87:2c:f5:1c:5a:0e:4e:
66:a2:ce:d8:50:57:01:ac:1a:15:e4:d7:69:62:71:
50:ab:61:fa:9f:cd:d2:dc:8e:0d:30:5d:a1:2a:7c:
f2:ad:99:28:58:6f:e5:c6:e8:7a:bf:45:55:bd:08:
94:14:19:b9:2e:ba:85:13:c8:60:17:b4:54:d4:83:
7d:5a:95:ec:21:a9:d3:fd:1d:3e:ec:65:80:88:8a:
30:9c:b4:cb:24:f9:9c:c0:2b:1e:b4:8e:57:3f:57:
2e:9f:96:cf:83:9a:7b:50:32:78:b8:70:90:1a:e5:
66:29:d1:86:7c:d8:50:ab:dc:c0:0b:43:f9:e8:82:
c9:10:6c:92:be:e9:74:35:45:ea:31:de:27:89:7b:
4a:2b:6c:28:c1:9a:16:0a:02:0e:36:a1:1a:0f:f3:
c9:7b:31:80:b9:31:23:c3:9f:97:dc:76:08:5e:2d:
11:5d:c4:0e:67:2c:74:bc:13:b0:e3:e5:a8:91:34:
d5:f2:9b:d1:21:b5:e0:e1:6f:b0:81:c3:ad:44:17:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:B0:52:21:EE:D2:34:47:29:31:A3:66:D6:E1:33:60:93:FE:8D
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:f8:f3:d0:79:94:dc:74:f5:4c:2f:2f:7d:55:00:b2:50:
be:e5:03:c8:e4:6d:3e:d0:ce:fe:33:cb:60:96:18:09:9f:a5:
31:a6:af:b9:fe:6b:a7:bf:ed:ed:79:c7:58:47:c6:8e:1f:38:
48:8f:f2:b3:9e:93:3d:74:22:38:29:94:69:50:3d:48:f8:0a:
8d:f4:04:50:a3:a1:93:25:34:cf:ed:2f:a9:8b:0f:32:2f:e4:
8c:0b:1d:61:a1:98:8f:0c:4c:41:fb:85:69:a6:b5:05:4d:83:
7c:31:97:a6:31:6c:49:d9:f5:13:96:7b:7f:fb:ec:c5:d8:92:
a1:e0:dc:98:47:b0:04:b1:a8:51:db:70:ac:04:90:e8:0f:d7:
b0:41:6c:a0:50:86:17:84:98:ae:58:9c:b2:85:5e:1a:b0:c9:
aa:a1:95:7f:94:82:7b:7e:91:ad:d6:f3:a0:48:1d:18:bf:d5:
4d:0c:b3:c6:cf:e0:cf:be:da:d1:5e:f4:e1:ec:47:df:5a:2e:
94:56:8d:67:4c:e2:08:f2:df:76:ea:f9:bf:f5:71:03:6a:5c:
68:39:c7:96:be:89:59:b8:bc:36:89:2c:92:bf:94:a9:a5:86:
f7:4b:57:5e:d5:af:d4:ff:0f:5f:5e:9f:5a:e3:5f:3b:29:27:
6c:51:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:17 2025 by rpki-client