Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: n9oS00TzciDfSnMOz/Nmr2mJ1o2wgv6D+N1M3qkixY8=
Subject key identifier: E5:A2:01:A4:D4:BC:BB:A0:A4:5B:94:BF:5B:BE:1D:FB:49:EB:BF:C9
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 0197B745808027AE9B196CEB69DEE7CA5179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 1394
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: IUQcdMbxNjqW2t1NzyIURZZPy60eUoGkyjwNhplaOlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:80:80:27:ae:9b:19:6c:eb:69:de:e7:ca:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=e5a201a4d4bcbba0a45b94bf5bbe1dfb49ebbfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:38:a6:ed:32:a0:ed:2b:9d:03:78:2a:30:
64:0a:48:4a:cc:3f:6b:86:f9:52:b0:fb:6f:85:b1:
b3:fa:f7:fb:4d:2d:5c:eb:32:b2:02:48:f2:fa:a0:
45:bd:1b:1b:81:3f:13:3e:7e:87:99:2a:9c:81:5a:
cb:83:c2:9c:a0:64:8f:5b:8f:70:58:f2:12:84:5a:
51:92:5d:46:2d:a9:99:30:3e:58:f1:60:1a:12:69:
44:e3:c2:6b:29:33:85:f9:9d:f0:a5:a0:65:ec:27:
67:48:ec:45:40:98:e9:5f:5f:fb:6e:2a:84:06:cd:
7a:b1:0c:14:f7:11:dc:8c:aa:08:4f:bf:35:4d:ca:
1e:2f:a1:c4:38:51:5c:e6:a4:95:b0:d2:01:be:0d:
bd:b8:51:40:75:2e:86:d6:66:36:2e:f7:42:61:16:
28:f3:e0:33:4d:1a:5c:39:82:66:7b:cb:fd:c8:f7:
2c:24:99:53:25:97:bf:49:db:41:47:76:b3:13:e0:
0c:46:08:a3:55:e8:ec:b2:36:fe:08:91:94:46:3f:
e6:99:df:ea:cb:cb:e5:69:09:03:7c:65:6c:5c:f8:
5f:5e:ee:84:29:b1:9c:b8:c3:fd:05:8d:13:61:aa:
31:26:84:41:c6:1c:a1:7d:fd:c9:97:4d:3a:a1:d6:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:01:A4:D4:BC:BB:A0:A4:5B:94:BF:5B:BE:1D:FB:49:EB:BF:C9
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:ac:c4:c6:5a:42:11:91:09:37:93:20:e7:ed:81:22:6a:
cd:13:42:bd:52:a6:94:a5:35:f9:82:8d:a2:d4:fd:e5:10:96:
90:1e:4d:ff:7d:ab:77:c6:21:3e:31:1a:cc:3b:9a:95:d9:6c:
03:68:a0:8d:be:84:65:56:c2:b0:da:20:25:6d:bd:f0:87:2f:
e7:36:da:8e:09:6d:e8:70:58:28:29:47:a3:ca:2a:f1:8e:13:
47:67:6f:69:6e:6f:de:ec:be:ed:b1:8b:0f:24:e1:26:73:82:
73:55:c1:b7:5f:34:51:b9:52:ea:fa:7a:bf:76:84:11:e0:fe:
d1:36:e9:03:a6:ef:e6:37:c8:5f:06:1f:43:61:4e:b3:29:74:
6f:5a:0c:84:48:78:95:73:94:84:41:04:4f:61:35:51:78:29:
65:fe:19:3f:f3:da:c6:7c:ce:6e:69:68:ec:d5:48:19:bb:77:
8a:c5:eb:4b:22:e8:86:7c:d9:2b:6d:f9:d2:fd:d9:70:14:d1:
9b:a5:58:a7:d5:e2:c3:04:77:a9:79:06:dd:c2:3c:e0:eb:48:
42:45:c7:0c:3d:bf:b8:32:c7:14:96:3b:eb:45:ac:ce:78:58:
f6:bf:62:6e:b3:35:72:49:0a:a7:8d:96:97:0e:e9:05:16:41:
a8:19:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:13 2025 by rpki-client