Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: CeC9nSFlRE03VFem1WuYLr+rjV1Q1Muado58fk6dkVM=
Subject key identifier: 6D:40:B0:40:87:51:5C:24:59:7A:EA:EF:CB:C6:0E:AA:45:92:BB:16
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0197B74523EE3CE2B416092EFAEB4A84E9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: KGBNh9x9MR0MDV3CTmYRYVK7gfcR8RGOKO1pkeroRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:23:ee:3c:e2:b4:16:09:2e:fa:eb:4a:84:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=6d40b04087515c24597aeaefcbc60eaa4592bb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:c7:2c:53:53:a2:7b:86:19:3c:a7:03:02:
46:47:8f:38:42:da:9e:c3:08:21:b7:33:b2:4e:5b:
74:6f:9d:a5:dc:db:83:a3:3a:40:c1:ad:04:86:46:
13:2b:a6:7e:af:9b:72:5d:50:45:f2:53:30:db:90:
5f:d2:ef:dc:a4:62:44:82:40:79:fa:0f:97:25:c7:
6b:89:64:a6:89:cc:a7:aa:21:40:fd:31:c0:57:a6:
8e:10:ac:88:fe:8d:85:60:27:6a:c1:d6:99:16:2e:
70:d6:f8:3c:aa:69:d0:8c:17:d3:5c:11:60:c5:df:
9f:a0:9b:77:22:e9:22:81:dd:e8:71:4d:cc:d3:1b:
66:23:69:98:4b:e4:59:a9:af:43:57:7c:3c:08:4b:
e8:a7:7f:c1:9c:b3:9b:ce:93:99:0a:98:9a:9f:db:
53:1c:7a:49:d6:d6:5f:fb:90:11:5d:71:dd:70:bb:
0d:16:6b:72:aa:5b:37:d1:a7:c0:50:69:da:aa:61:
29:23:f8:cc:98:d9:4b:fb:9a:45:75:19:1f:84:6b:
82:51:20:ff:10:51:42:16:33:f9:6f:ae:5b:aa:06:
70:86:71:19:37:1d:74:bf:83:54:0a:dd:e9:fa:a9:
fb:5d:a3:ab:65:4f:0b:17:74:3d:65:30:56:53:86:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:B0:40:87:51:5C:24:59:7A:EA:EF:CB:C6:0E:AA:45:92:BB:16
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:80:3f:04:63:f1:1a:e0:33:12:01:76:80:39:10:47:74:
f2:70:fe:d9:e1:f0:2c:da:9e:c6:9e:86:bd:43:da:71:f4:9d:
9d:9a:a3:3a:73:89:34:39:c1:d6:d3:ab:ed:71:ca:c1:ea:b8:
f0:94:96:35:52:df:ed:20:68:34:dc:89:9c:30:46:66:4e:9e:
53:b6:6f:56:df:f7:77:de:e5:b3:2e:c8:fd:b9:05:b5:e2:01:
93:37:2a:27:26:15:67:9d:ad:42:ab:f5:53:54:13:a6:71:5f:
e9:89:ad:cf:b2:ac:0a:31:bd:71:a2:87:74:30:d5:b7:46:f4:
86:82:5f:b3:5e:8e:da:57:fa:8f:b7:aa:0c:44:4c:bb:c7:66:
1d:c6:cb:6a:f4:73:f7:ab:80:fa:1f:8b:2e:65:14:5c:b9:56:
be:33:44:87:2e:5e:96:70:da:dc:f6:c8:ec:05:3a:a3:b3:b8:
a9:5d:9f:17:3b:b1:7c:f9:e2:f0:dd:9a:9c:e1:2b:03:08:2f:
d7:42:9f:2e:51:b4:d2:45:b1:5e:0b:99:e7:b5:01:7d:1d:56:
31:0b:96:0a:86:45:1c:8a:75:9e:5f:e1:af:d4:1f:97:5c:f9:
5e:02:5d:20:9b:18:bb:62:46:ec:f2:71:87:71:90:07:81:10:
2d:03:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:52 2025 by rpki-client