Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: Xp6S1MQ/Ak0Dpz6nYryP8bbGiy9BLQPeZDj7lj8IW3s=
Subject key identifier: 93:C5:F8:8A:A3:B2:83:74:7B:60:4A:23:30:B2:4A:B1:D7:97:31:B5
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0197C75D57C627D0A56FDA380A570192FFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 0579
Signing time: Tue 01 Jul 2025 19:01:12 +0000
Manifest this update: Tue 01 Jul 2025 19:01:12 +0000
Manifest next update: Wed 02 Jul 2025 19:01:12 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: Otj3TWh+/A6Fp8swFh2SFMqNn5pWiIB4Sfr6j5+mx8c=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:57:c6:27:d0:a5:6f:da:38:0a:57:01:92:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Jul 1 19:01:12 2025 GMT
Not After : Jul 2 19:01:12 2025 GMT
Subject: CN=93c5f88aa3b283747b604a2330b24ab1d79731b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:ac:4d:da:13:4c:f2:95:96:4a:89:49:83:
c6:72:31:6b:04:30:76:1d:b7:53:8d:1c:84:e0:bb:
17:8d:31:ea:41:a5:22:20:94:ae:78:5b:0a:45:35:
14:7a:1b:48:64:62:9b:b8:52:f5:3f:bd:ad:e4:7b:
b8:7f:f0:a5:e8:e2:c4:43:25:02:e1:3a:02:54:b6:
5c:df:0e:85:a2:bd:0a:3d:2d:77:cd:d8:33:eb:02:
57:9e:c5:4e:09:fb:8e:0b:9b:12:1b:56:4d:f7:4b:
73:88:77:b7:79:e3:eb:94:86:00:4f:60:5c:3e:b3:
9b:9b:bd:15:e5:21:0a:b1:58:f5:7f:91:aa:87:ae:
1d:8c:fc:b3:71:8f:c9:6d:88:98:d0:8b:65:15:6f:
65:f0:43:ff:42:63:25:87:b6:10:40:06:d7:2d:04:
02:ea:ef:21:b4:43:52:ca:36:2c:09:be:a0:3e:f6:
0a:bc:95:91:94:75:70:f2:2f:cc:1c:0c:93:b2:35:
df:8a:95:51:27:c3:cb:1d:d5:6e:3b:ce:f3:6f:ad:
0b:7e:ff:a7:fd:46:b5:a1:02:68:3e:cc:c2:ab:89:
c0:b2:28:0a:a4:d4:92:af:f8:d9:65:eb:4d:6f:44:
11:29:68:76:52:4d:b9:73:39:d6:d4:e7:96:a4:09:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:F8:8A:A3:B2:83:74:7B:60:4A:23:30:B2:4A:B1:D7:97:31:B5
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:b3:d9:86:1c:38:06:a0:30:5c:44:c0:88:88:21:ab:5a:
3c:6c:8a:14:60:c5:d8:ab:5d:98:d8:9b:d6:df:1d:03:dc:28:
79:de:10:98:2b:22:13:8e:bb:6a:bb:f2:6c:ed:bb:2d:3a:ca:
1b:38:0a:b5:30:85:df:bc:10:91:86:2e:59:e5:a1:3c:74:3d:
5f:13:31:20:5e:98:1a:1f:b2:62:51:e0:80:33:a0:5e:a9:a1:
e7:83:57:d9:64:9f:08:df:46:36:a5:d9:76:5e:50:4b:8c:98:
99:86:f9:35:54:8b:57:38:92:1b:67:2f:bc:02:76:3e:79:2d:
d8:c0:b8:d3:03:70:52:2d:6f:4e:87:03:9f:c0:de:18:c1:a0:
72:3e:ef:2b:c7:ca:27:c9:90:2f:19:68:31:a5:4e:e5:dd:d9:
92:fb:36:46:ac:59:ae:87:79:c4:db:8f:75:9e:f8:95:ad:48:
7b:3b:df:41:a3:4e:59:86:c7:c7:71:02:02:70:2a:e0:e7:61:
f6:cc:4d:66:4f:dc:5c:f9:86:d6:8b:02:91:88:b7:85:20:12:
80:b7:f9:0b:06:ca:13:8d:5e:4f:de:dc:93:49:7e:09:e1:69:
a8:13:9e:08:57:c9:5b:23:a1:0f:88:ca:df:04:a8:cb:9b:3a:
1f:ae:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:49 2025 by rpki-client