Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: zyRyDjzwRK1SoGfQPaBL83nmdP11VnqeJGJuZqlRPA0=
Subject key identifier: 5A:0B:A1:CC:5C:C5:4C:4B:40:D3:04:0C:66:DE:AC:E1:B5:F5:27:E2
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 0197B9A18C8BE188D89E89762CBA40805A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 1513
Signing time: Sun 29 Jun 2025 03:01:01 +0000
Manifest this update: Sun 29 Jun 2025 03:01:01 +0000
Manifest next update: Mon 30 Jun 2025 03:01:01 +0000
Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: T25CmGfByjcvGumPos+9a1i3IblVNk1QwJLYT0itHYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:8c:8b:e1:88:d8:9e:89:76:2c:ba:40:80:5a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Jun 29 03:01:01 2025 GMT
Not After : Jun 30 03:01:01 2025 GMT
Subject: CN=5a0ba1cc5cc54c4b40d3040c66deace1b5f527e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:7c:2d:ff:01:57:ec:ed:b1:0d:c0:53:1b:
05:67:9b:cb:74:99:e0:e2:65:56:a6:af:df:aa:bb:
40:9d:b9:88:d4:a5:e5:73:46:19:03:e2:e7:bc:9c:
e7:cf:3a:98:22:6c:e4:cc:b7:d0:83:ea:7c:7d:ef:
03:0c:ed:ff:fe:e4:82:0c:94:6e:49:89:ab:7b:16:
8a:5c:3e:98:fa:81:46:d9:fa:f2:02:a2:1a:8a:cf:
e0:01:46:ee:08:29:9e:69:e6:08:fb:cf:83:38:51:
a5:9d:ea:31:35:e9:79:1c:85:ce:4d:79:b2:68:5a:
6b:4d:12:e9:9f:b3:81:b7:2f:ea:e1:6b:db:83:41:
8b:33:96:35:55:6c:e4:4f:a8:90:23:4d:58:4f:1d:
b3:8a:f3:cb:ed:5a:67:69:50:df:d3:c8:cf:e3:c4:
e5:61:b9:a2:ef:f6:67:19:7d:f0:e0:0c:ca:10:6f:
00:24:24:b0:d5:43:cc:32:49:19:66:98:75:53:56:
e6:35:a8:9f:23:4c:87:3d:53:91:9b:b9:e2:5d:a6:
00:ac:92:78:4f:ea:72:9b:92:e0:9d:a7:62:71:63:
60:53:fb:d6:4a:94:fa:73:b1:3b:63:c1:18:99:e5:
b4:17:fa:d5:0b:10:fd:4f:90:4a:0a:01:c4:3c:85:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:A1:CC:5C:C5:4C:4B:40:D3:04:0C:66:DE:AC:E1:B5:F5:27:E2
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e1:10:87:40:06:36:ac:e3:7e:e3:2f:29:ba:c3:60:3e:e7:
8d:67:91:8b:57:18:a2:06:a8:48:04:56:88:ce:0d:b0:b7:d1:
f2:af:d0:9c:03:07:a9:d3:db:2c:67:b8:1f:f7:39:9e:8a:b8:
8b:c6:ca:1c:99:d6:e0:39:b6:9f:15:7a:65:f5:fe:5e:d4:ca:
ed:72:30:f3:3a:7f:d5:6d:68:65:14:48:40:ab:2f:fc:98:85:
b3:71:86:96:db:8d:b8:f8:84:71:97:e0:40:e9:8f:94:9a:23:
7d:ee:d6:43:bc:58:45:ed:42:b9:88:5f:76:1c:1e:9d:ea:c5:
58:5d:3d:d6:de:e6:af:7b:c0:48:c4:26:a6:18:7b:a0:15:0d:
24:04:28:0b:b4:79:23:ba:b5:8f:e6:28:1c:b5:da:0c:23:1b:
0e:cc:80:9a:ff:a4:a2:8b:ac:96:c1:95:d6:f8:de:d3:ba:c2:
00:3b:e8:4a:fc:9b:45:88:2c:06:91:f5:c4:fe:05:01:71:61:
79:b1:bb:b3:6d:2a:0f:6a:40:cb:72:cd:1a:19:9a:63:74:8d:
c5:63:bc:41:2b:e7:7f:c1:03:65:c0:7d:a0:22:44:ea:7d:d2:
b8:9d:c3:31:06:fc:71:54:bd:aa:f2:4c:30:f8:64:b3:6c:68:
3a:46:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:45 2025 by rpki-client