Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: fnbnrt0ll8WKngdSc2Zj7bF0JbLfT6mufSiJa4+jxMs=
Subject key identifier: 65:FD:5D:C9:C2:B7:26:51:03:CA:15:CF:89:2F:65:8B:20:24:2E:49
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 0197B88F12489E09EE53B32B4C84B50C6FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 1179
Signing time: Sat 28 Jun 2025 22:01:13 +0000
Manifest this update: Sat 28 Jun 2025 22:01:13 +0000
Manifest next update: Sun 29 Jun 2025 22:01:13 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: /vko+hvEx64AOt+IJdDPaD8yrOF8GoNaQCwQawK9JD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:12:48:9e:09:ee:53:b3:2b:4c:84:b5:0c:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Jun 28 22:01:13 2025 GMT
Not After : Jun 29 22:01:13 2025 GMT
Subject: CN=65fd5dc9c2b7265103ca15cf892f658b20242e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:5e:95:a6:4a:f5:42:7a:c2:40:23:36:4e:
89:8c:6e:7e:b1:2d:dd:b1:ca:55:03:a5:d3:a2:ea:
f3:e0:3c:3a:48:73:4a:7c:18:7b:0a:77:c7:af:59:
3d:86:95:f7:69:5f:3f:1a:d7:01:46:37:ab:03:f7:
61:33:81:1d:83:66:3c:7d:c9:c4:c4:9a:5b:10:38:
37:9b:fe:0e:4c:02:6e:52:4d:3e:43:e8:27:f0:4d:
37:20:08:17:b1:27:bd:a4:58:eb:d0:2e:51:36:28:
d2:35:1e:d4:bf:2b:51:2a:86:cd:db:42:f9:9b:8d:
45:35:68:00:bb:7a:e4:4c:83:bc:e2:93:f7:10:2a:
41:e5:ae:78:af:c2:21:8a:3a:fd:4f:83:de:64:de:
dc:e2:d2:08:be:0b:0b:26:14:bd:2b:57:07:e0:0a:
ba:6b:25:85:27:92:86:5f:9c:b5:e7:1d:14:fa:0e:
2d:ab:51:ec:cd:cd:f2:06:b1:7a:15:9e:9a:a9:a0:
b6:f4:80:31:fa:7b:94:57:f5:7f:0e:c1:e2:8c:99:
2a:ab:ad:02:ac:73:de:8f:78:f4:7b:fd:6b:54:92:
fc:97:af:ec:22:19:0b:e2:8e:4b:80:98:20:a8:c7:
47:a6:38:4d:7f:fb:e3:23:07:3b:d4:c8:6f:48:5e:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:5D:C9:C2:B7:26:51:03:CA:15:CF:89:2F:65:8B:20:24:2E:49
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:d2:71:60:02:69:8f:cc:cc:d8:a8:b9:80:74:62:18:a2:
80:68:87:7b:bf:15:3c:8e:2d:90:d6:10:d7:f3:3b:b4:a3:ab:
e6:41:2f:dc:ac:e6:2b:e6:89:ff:94:49:52:42:b7:0f:45:e5:
92:35:8c:d6:88:87:c4:d3:f6:c1:1a:49:c6:02:ae:4d:84:8b:
bc:61:59:71:32:dc:51:c5:bd:ae:61:91:44:ac:92:9a:4a:5c:
63:08:23:70:f7:cd:1a:03:79:94:0a:75:33:a0:60:33:6b:f8:
a8:27:81:4d:23:2e:43:2b:39:7a:ff:55:4e:a8:d7:3a:b7:7b:
ae:61:73:a3:ad:8b:18:67:f4:08:bb:0a:59:f6:78:94:c7:c6:
9d:73:34:71:26:35:bf:59:59:d0:83:28:92:4c:95:2c:2b:01:
cc:37:a4:96:ad:05:82:6d:3c:f7:8a:ed:22:09:72:c7:da:00:
f0:1a:4c:5c:f2:eb:e3:a0:78:a6:54:72:76:93:9c:34:73:f5:
10:f1:f4:3e:b0:80:ca:65:54:b1:76:fe:53:aa:11:0d:0d:64:
cc:cc:8c:f9:1d:ce:0d:c2:d6:68:80:59:4c:d1:a8:07:4f:e1:
38:12:7d:ba:32:ab:a1:7a:29:48:ce:b1:cc:05:ed:ce:bb:a4:
5a:02:73:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jxJIngnuU7MrTIS1DG/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi
ZjcwMTYwHhcNMjUwNjI4MjIwMTEzWhcNMjUwNjI5MjIwMTEzWjAzMTEwLwYDVQQD
Eyg2NWZkNWRjOWMyYjcyNjUxMDNjYTE1Y2Y4OTJmNjU4YjIwMjQyZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7NelaZK9UJ6wkAjNk6JjG5+sS3d
scpVA6XTourz4Dw6SHNKfBh7CnfHr1k9hpX3aV8/GtcBRjerA/dhM4Edg2Y8fcnE
xJpbEDg3m/4OTAJuUk0+Q+gn8E03IAgXsSe9pFjr0C5RNijSNR7UvytRKobN20L5
m41FNWgAu3rkTIO84pP3ECpB5a54r8Ihijr9T4PeZN7c4tIIvgsLJhS9K1cH4Aq6
ayWFJ5KGX5y15x0U+g4tq1Hszc3yBrF6FZ6aqaC29IAx+nuUV/V/DsHijJkqq60C
rHPej3j0e/1rVJL8l6/sIhkL4o5LgJggqMdHpjhNf/vjIwc71MhvSF6BNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX9XcnCtyZRA8oVz4kvZYsgJC5JMB8GA1UdIwQY
MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt
MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4
LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8nScWAC
aY/MzNiouYB0YhiigGiHe78VPI4tkNYQ1/M7tKOr5kEv3KzmK+aJ/5RJUkK3D0Xl
kjWM1oiHxNP2wRpJxgKuTYSLvGFZcTLcUcW9rmGRRKySmkpcYwgjcPfNGgN5lAp1
M6BgM2v4qCeBTSMuQys5ev9VTqjXOrd7rmFzo62LGGf0CLsKWfZ4lMfGnXM0cSY1
v1lZ0IMokkyVLCsBzDeklq0Fgm0894rtIglyx9oA8BpMXPLr46B4plRydpOcNHP1
EPH0PrCAymVUsXb+U6oRDQ1kzMyM+R3ODcLWaIBZTNGoB0/hOBJ9ujKroXopSM6x
zAXtzrukWgJzuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:37 2025 by rpki-client