Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: 2Vs+zZF4ujHnKs4jdrCIHso2x+kkg1O3pFzEyevarpM=
Subject key identifier: 11:1B:20:1B:83:47:3B:B7:31:D5:A8:73:82:2E:28:18:3E:25:7E:A3
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 0197B70F1276E82FB4E5E5CDEEA563492E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0928
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 6n7q2pjy7JNpCKXPUZ4xOLAhohFxiVGkE7SHpA+svgA=)
2: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:12:76:e8:2f:b4:e5:e5:cd:ee:a5:63:49:2e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=111b201b83473bb731d5a873822e28183e257ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:c7:39:f9:67:3e:5d:49:7d:7d:d9:80:b9:
e3:7b:51:a5:87:6e:cd:3e:01:db:d2:e6:18:89:63:
04:e0:a1:ae:11:5e:48:f0:1a:44:3d:a6:cb:e8:40:
d9:63:ff:31:73:27:d0:36:c2:89:7e:4b:7e:51:b7:
cd:fc:12:68:48:d6:4c:03:2c:87:be:4a:69:9e:8d:
ef:a7:9f:68:71:e1:cc:de:b8:be:a8:93:9d:55:bd:
32:14:56:ee:0f:c2:f6:1e:09:04:8d:92:64:65:86:
7c:d1:ef:ee:f4:45:a7:91:c5:e2:e4:d5:a0:73:db:
6d:82:15:da:d5:d0:c3:b8:cc:7f:b7:8c:28:b7:2a:
75:7d:0f:7b:2a:99:6f:f8:93:7c:8d:db:fa:b6:e0:
42:18:f5:76:af:91:7e:bc:cd:9c:9f:ae:59:94:13:
eb:bc:3c:1e:9e:f0:4f:60:e3:e5:b0:4c:f9:b8:ba:
11:c1:b6:5d:ac:40:43:90:d5:d7:56:51:09:40:f2:
57:02:1b:72:68:e2:12:c2:ec:8f:12:dc:61:7d:70:
91:49:bd:9f:fb:52:32:df:c9:47:26:87:65:f9:c5:
a3:d1:1e:5b:4f:06:69:41:22:20:31:d1:84:3c:1a:
b2:04:70:38:b0:11:22:a2:6b:d0:47:e4:74:f9:35:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:20:1B:83:47:3B:B7:31:D5:A8:73:82:2E:28:18:3E:25:7E:A3
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:9e:3b:8a:0c:ff:dc:94:6b:d4:e3:51:cc:85:f1:8b:6b:
a3:27:2d:23:27:60:99:21:9b:3b:2d:40:54:9e:f8:44:ba:99:
44:0f:e7:53:70:43:0c:c8:b1:b7:5d:78:c6:c6:02:a9:b8:f9:
38:0b:dd:57:39:c4:88:36:d2:69:b9:c3:9a:57:63:80:a4:e4:
24:bb:b5:52:f6:96:6f:48:a7:2d:e0:a8:77:f6:35:06:fb:12:
77:77:6d:f9:7c:88:fe:f3:0e:2a:fd:6d:76:3c:03:d2:00:63:
a4:f7:ea:0d:2d:de:bc:78:e9:32:1e:c3:c0:6d:99:20:53:d3:
3e:58:18:97:6d:6e:5b:25:2c:56:5f:c8:61:62:fc:0b:ad:0e:
c4:a9:5a:97:44:f6:ed:f9:5c:96:5a:12:05:d8:d3:8b:8b:70:
ff:8d:a6:83:3a:de:9d:d6:f7:12:62:01:e9:3b:6e:51:f3:15:
3c:72:d6:2f:3c:7c:79:79:7d:cc:5f:eb:d2:a8:cc:50:b8:dc:
14:60:e7:a9:83:22:51:88:05:33:c0:3a:62:44:33:37:4d:ec:
9a:29:a6:94:9d:f9:11:ed:ef:d6:2e:5d:14:2c:3a:e9:01:eb:
47:53:f9:3e:4b:f9:e3:66:45:2d:d0:03:f5:6b:c2:04:5e:57:
06:9f:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:29 2025 by rpki-client