Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: 3ZZvUHaSRzJnydsuBQVKkTF0i2U41ApfLM+ToIekdwM=
Subject key identifier: A1:B8:2B:7B:25:D2:4C:61:33:8C:DC:B3:DC:8A:8C:4E:DF:DE:EE:F7
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 0197B77BF42090EA6A4F5D8CC1FD83946A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 01BB
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: 032Xp9yPlLKm6wgrZMB8d8/CwciDAwvhYOZ3AMKcjlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f4:20:90:ea:6a:4f:5d:8c:c1:fd:83:94:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=a1b82b7b25d24c61338cdcb3dc8a8c4edfdeeef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:d5:80:22:4b:7f:af:17:b2:c2:5b:cd:63:
a0:69:6b:f3:3f:e1:b2:14:d9:c0:74:a7:50:6d:12:
8d:42:1b:a7:34:6b:8e:d8:fd:fc:80:aa:68:e1:a6:
d6:db:54:2b:d0:be:96:ab:7b:d5:7a:a6:28:91:98:
83:77:4c:a9:53:1e:e1:da:2d:91:8b:72:34:8d:c0:
9e:ac:dc:0c:e3:58:fc:48:4a:86:d4:f5:18:08:33:
4d:ec:13:96:fd:b6:38:d1:b2:c4:cf:d8:bb:4f:ec:
95:86:f5:b7:1f:df:7e:4b:ed:88:b1:70:6b:90:0b:
12:09:45:68:e6:10:66:a5:d5:84:23:08:aa:85:01:
b9:6f:b7:93:77:ba:ad:dd:51:57:72:fe:1a:f2:fa:
61:e1:0a:a0:dc:dd:64:c1:41:13:1c:03:01:50:7e:
c2:98:b6:64:99:19:0b:33:5f:4a:b6:98:4c:18:7f:
5c:83:de:df:16:18:81:b7:d0:2f:bb:d4:64:df:c4:
e4:ca:19:fe:a2:fb:71:cc:cc:6a:4a:74:26:14:3b:
9f:a9:df:6c:23:32:b4:d0:2e:5c:60:83:8e:8c:7d:
63:2c:79:2a:98:61:bf:a0:9a:8d:ee:06:20:46:dc:
45:d7:56:ec:85:2f:e5:6e:63:58:14:e7:58:7f:8c:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:2B:7B:25:D2:4C:61:33:8C:DC:B3:DC:8A:8C:4E:DF:DE:EE:F7
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:35:a7:67:25:93:7a:a7:60:66:fa:0c:a3:db:dc:11:1b:83:
25:47:76:0c:39:e4:20:de:0a:99:3a:5b:62:be:c1:f7:2f:25:
08:ca:52:80:1f:86:83:41:f6:f1:2e:55:36:57:a9:31:2e:75:
33:a8:71:96:4a:46:e0:e8:f7:93:e4:95:04:60:02:6a:0d:bb:
dd:b4:02:62:4e:e8:02:80:2e:95:e2:5c:a7:47:41:91:1a:af:
c7:21:8f:10:e5:21:97:fb:dc:00:c4:9d:26:a1:a8:2b:9e:56:
a4:1a:a0:51:fa:05:b3:99:17:1f:ac:dc:e2:f2:1f:fa:a0:2d:
64:96:8a:f8:ac:86:81:cc:8f:c0:6b:20:15:f9:26:c6:55:03:
2d:1f:39:6b:7c:49:c0:58:54:55:9f:ec:37:58:0c:6e:73:63:
53:bf:bb:6e:9a:46:2c:7e:51:b5:a9:3f:49:a7:41:0c:c3:2f:
49:f8:6f:6f:cc:08:17:36:01:6a:84:d7:c5:62:51:8c:79:f9:
b0:4b:35:3f:16:57:a8:81:20:2c:2c:ba:67:1d:47:01:38:12:
e2:9d:09:be:78:d2:84:a3:15:f0:71:19:b3:b8:93:c3:4f:a9:
35:96:c4:06:9e:9d:d9:3e:26:47:94:f4:89:a6:3d:a5:00:31:
04:43:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:06 2025 by rpki-client