Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: pQPQQvRg4q7XWbSLuK7Be9brXU/zjuOiEOw96pumDKQ=
Subject key identifier: C0:7A:AB:E9:BB:72:7E:54:BF:86:0F:A9:E5:6F:85:0D:D7:72:3E:7C
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 0198D4E0452E3E0BD6F91E7142C5E5A1F394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 06EA
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: ZxdgudO3m+ZmzKTIQ47fK0cGhIN0jH4peuoYJzOKHpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:45:2e:3e:0b:d6:f9:1e:71:42:c5:e5:a1:f3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=c07aabe9bb727e54bf860fa9e56f850dd7723e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:19:d7:ce:7d:49:7d:85:c3:22:c9:86:9b:
f8:86:36:6a:ac:44:c4:f7:92:94:db:a1:b9:f8:bb:
34:48:94:8b:80:62:21:6f:2e:1e:f1:e9:42:aa:65:
da:39:af:fd:b4:25:72:2b:a4:cb:10:75:2d:1b:f6:
78:90:72:fe:c5:61:06:0f:89:52:d8:b9:34:f5:d1:
00:2f:b7:4f:fb:8e:d7:bb:97:f7:8a:77:22:b9:fb:
d6:48:26:46:5a:67:b2:d2:48:18:4a:eb:35:4d:57:
54:de:10:96:32:7f:26:19:e1:f7:9d:80:cd:a8:b0:
dc:57:29:91:2a:10:dc:7e:e3:08:1a:96:a9:04:0b:
a1:dc:61:26:b5:39:66:22:cc:08:88:c0:ce:18:8a:
a3:3b:4f:18:46:75:b9:03:75:3d:e8:d9:b2:46:ec:
13:a3:33:da:02:f4:54:f5:fb:47:2b:7e:94:c0:93:
a1:64:0d:82:b4:87:ed:88:26:d9:22:db:79:57:c4:
48:37:98:56:5e:12:a4:53:01:90:bd:09:57:e8:33:
f6:fb:9e:37:8d:0b:36:9e:a9:26:96:06:31:93:a9:
12:09:69:bf:d3:2d:11:11:68:9e:c6:c7:72:f0:0c:
8f:a8:24:00:fa:a8:0d:ab:39:fb:0e:07:05:0c:8d:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:AB:E9:BB:72:7E:54:BF:86:0F:A9:E5:6F:85:0D:D7:72:3E:7C
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4e:a6:ea:25:3a:99:c6:c0:3b:f0:66:04:24:ae:a1:1a:15:
a3:72:92:33:e0:56:76:5e:9e:2c:46:22:c3:b2:2f:42:6c:22:
81:30:2c:eb:56:fc:6e:97:2e:8d:57:3e:6c:d2:e8:e8:1b:50:
26:6b:70:16:d9:71:6c:f5:89:75:42:18:99:08:79:fd:01:73:
66:20:f2:06:17:dc:58:51:af:fa:19:e6:e4:eb:d5:f2:e3:0d:
9b:0f:5d:32:e1:ae:f1:ed:f8:e0:9c:4c:3b:47:c2:41:b1:43:
4a:67:40:47:13:93:fc:64:31:ea:f4:f5:55:5e:a3:0f:f9:32:
0b:e2:96:c7:22:8d:99:41:51:b8:5c:4e:ff:f5:9f:86:8d:6c:
4b:8a:14:c7:59:f8:92:2c:16:68:76:f2:e9:54:9b:10:89:46:
3c:10:1b:80:a8:04:4e:36:e1:bd:a0:9e:85:34:8f:1e:48:96:
56:22:f8:d3:fa:7a:7d:9a:d6:74:e8:aa:5b:5f:ec:34:84:02:
81:d3:d9:39:0e:e3:33:36:6d:bc:bf:d2:f6:15:3a:b4:9a:6f:
40:f5:e1:66:07:be:fe:42:37:73:79:79:ac:43:99:9f:09:65:
96:d2:e9:bb:ef:51:d8:66:67:39:af:a9:55:9e:fd:cd:78:d6:
e5:3b:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:59 2025 by rpki-client