Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: dehfj/VL0WNGulaq2e8Ng8KbPvgSX0+Msts4L+c0pUM=
Subject key identifier: 7B:AB:A2:D6:E6:F9:62:38:27:F5:BD:93:2C:DD:A4:66:3B:A5:36:83
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 0197B8C5E671CF66D11A43E22A61BC0A8AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 23:01:06 +0000
Manifest this update: Sat 28 Jun 2025 23:01:06 +0000
Manifest next update: Sun 29 Jun 2025 23:01:06 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: zTXV/BmkKfA1UjN5xz6TiBsMKnKD0QcHGW9xNS6C9tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e6:71:cf:66:d1:1a:43:e2:2a:61:bc:0a:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Jun 28 23:01:06 2025 GMT
Not After : Jun 29 23:01:06 2025 GMT
Subject: CN=7baba2d6e6f9623827f5bd932cdda4663ba53683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:6f:40:67:a3:71:36:6c:f6:96:82:89:44:
0d:57:68:29:88:ef:68:b7:db:c1:bc:5e:b6:f3:be:
ec:7e:3a:18:e9:a2:58:10:5b:b2:ea:6d:9f:80:ea:
5e:28:6b:89:dd:74:28:61:db:ca:b4:ee:85:b8:84:
73:ba:48:b2:e2:c4:30:f7:fe:f6:14:b3:6f:16:55:
ef:a3:9d:27:86:7b:cc:9a:71:71:36:21:17:cd:a8:
49:b0:78:ae:74:9e:5e:59:b5:91:61:dc:99:3a:eb:
2f:37:b6:d2:a9:56:30:d9:d0:2e:7c:cc:bd:7b:6c:
8c:4f:67:12:41:e9:7d:47:d7:6a:27:0d:64:c5:8b:
fc:5a:8f:91:ad:10:4c:15:c5:49:78:1b:b2:49:63:
36:e2:68:fd:41:32:56:eb:70:a0:05:97:fe:53:ac:
25:77:f6:06:2f:e6:b2:1b:e6:8c:8e:c8:fd:d0:14:
87:09:f4:c7:06:ae:3a:fb:c5:5a:4a:b5:4f:bc:c6:
c0:ad:73:77:bd:c9:7f:05:59:ec:37:90:13:cc:a6:
17:c9:aa:b9:c8:0f:66:8f:f0:1a:aa:5f:e2:6e:9a:
6b:a1:3b:ba:c1:4b:7b:ca:b7:9c:8f:e3:8f:ee:e3:
d9:8d:0b:b0:4c:db:23:b2:b6:97:db:4d:0c:8b:5a:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:A2:D6:E6:F9:62:38:27:F5:BD:93:2C:DD:A4:66:3B:A5:36:83
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:db:d0:36:47:e0:c3:fe:5c:6b:eb:23:0a:c5:d4:71:0d:e4:
4f:37:d9:6a:a0:4e:03:d6:6f:17:08:f3:9e:aa:18:a0:9b:bc:
91:dd:ac:62:07:b0:8a:10:73:7a:5a:ea:aa:ee:d1:e4:9e:37:
9e:8d:b1:ce:e6:f3:bb:a6:f2:43:ed:d7:fd:80:e9:43:ed:0a:
3d:3e:9c:bb:c1:26:aa:d8:80:2f:f1:ff:7e:ed:c1:18:46:3f:
58:b3:4b:af:5d:b9:dc:f7:2c:fa:85:b4:61:81:25:38:9d:62:
76:a4:2a:9f:b4:85:9a:85:97:42:1e:db:fc:a8:03:dc:ea:2c:
79:32:ca:3f:32:42:90:d8:bc:f7:95:8d:c4:4c:ae:72:54:0e:
cb:ef:c6:04:b8:01:ee:30:18:33:b8:24:a8:8a:3e:c2:d5:e6:
e8:5f:40:2c:ca:67:ae:a5:4a:3f:4a:2a:82:60:8f:0a:57:44:
46:1e:c1:0c:b3:f0:7f:11:e9:e1:e6:e5:08:d0:f0:31:b5:4d:
20:1a:f5:76:6f:53:0e:e1:95:09:f5:f7:01:f9:3b:d6:bf:b2:
4f:bd:8c:6c:e4:51:ac:87:02:cb:af:f8:6c:1e:c6:dd:e9:0f:
4e:57:1d:1e:15:e3:69:83:e6:f5:82:e8:8b:3b:df:97:16:87:
74:d5:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:43:44 2025 by rpki-client