Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: E9UZeNTeiC2YYjc8FhHMRm3leb8cxodGmsHL+/Nea3E=
Subject key identifier: AF:64:65:9B:F5:14:03:E1:D9:9B:06:56:B2:EA:95:57:E6:78:8E:F8
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0197C726198764CD503EB70386C9C4C0D562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0957
Signing time: Tue 01 Jul 2025 18:00:52 +0000
Manifest this update: Tue 01 Jul 2025 18:00:52 +0000
Manifest next update: Wed 02 Jul 2025 18:00:52 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: MwbpLExHsycqAgU2ZP7mGBrjAytZT0Fy/o5vcQdagB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:19:87:64:cd:50:3e:b7:03:86:c9:c4:c0:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Jul 1 18:00:52 2025 GMT
Not After : Jul 2 18:00:52 2025 GMT
Subject: CN=af64659bf51403e1d99b0656b2ea9557e6788ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:bf:10:77:87:b0:43:e5:ff:9e:c4:52:31:
25:3c:41:2b:34:7a:26:4c:02:99:84:4f:ba:93:29:
28:98:c2:08:90:9a:a1:ed:b9:84:83:f7:95:2e:b4:
8b:4a:df:17:95:d3:6e:25:f0:e5:f1:98:44:22:61:
f4:8c:2e:32:bb:48:25:1f:9e:24:6a:44:65:4b:83:
ac:a3:21:21:bc:ad:a0:19:37:ca:88:2c:f5:47:89:
28:46:7e:78:f5:cb:1e:1e:ad:1e:2b:13:16:53:a3:
43:c6:a6:7f:b2:a7:bf:7e:83:fc:85:3f:da:0c:49:
43:4b:0e:f6:63:99:31:ba:07:b2:08:ca:90:0e:6a:
92:e0:a6:32:64:91:99:bb:aa:c3:1c:b7:95:f0:95:
13:63:05:1f:aa:2c:74:17:28:39:44:5c:96:2f:04:
fd:67:87:8e:ef:43:46:3d:4a:35:b3:fb:bc:9e:73:
c6:34:f0:b5:f7:44:07:e5:3c:21:64:b4:93:67:1f:
95:c6:bf:3c:e9:62:18:10:ed:89:55:b6:fa:bf:2d:
a6:57:f3:d5:50:2d:2d:df:24:cd:81:b1:40:19:78:
8e:c0:12:ae:d6:b5:07:b7:c8:9a:d7:4b:df:a7:f3:
24:27:09:60:2c:5d:97:53:14:56:3b:68:5f:6f:c8:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:65:9B:F5:14:03:E1:D9:9B:06:56:B2:EA:95:57:E6:78:8E:F8
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:49:c1:e6:8f:42:07:ea:5b:7c:d8:e5:4a:c0:91:96:ff:
fe:dd:df:7d:73:32:77:87:7f:38:ec:87:3d:0e:19:da:06:db:
44:30:d7:de:a1:d4:21:fa:e2:1b:bf:da:30:37:27:7f:10:57:
7a:6b:39:01:8f:b2:85:60:4a:6d:b0:45:4b:57:cf:30:b7:18:
fb:4f:73:44:68:8b:17:fb:e8:2c:52:33:bc:53:48:55:22:5d:
1d:95:a8:89:3b:41:7b:68:df:5c:cc:c3:ba:0c:e1:57:ac:bb:
9e:f5:02:3e:f0:6d:e6:6b:9a:bc:a7:ed:37:d9:40:68:83:d2:
77:c9:9f:14:f1:26:2b:49:54:1e:e0:d4:2b:1a:50:b4:b3:e2:
8e:85:dd:ab:4c:84:9f:5d:a5:64:c9:39:af:df:da:04:8e:11:
b3:7b:76:a9:1d:69:96:4c:6a:ce:d0:23:a2:e6:34:3b:5a:f7:
58:dd:45:bb:b3:18:c0:18:79:7d:75:c4:f0:31:b1:02:5e:dc:
f8:3c:72:17:cd:54:c3:4a:47:d9:8d:5f:ad:35:6c:f1:d3:78:
0e:6c:eb:30:92:a3:7c:b6:59:2d:83:51:bc:35:46:7c:bc:f1:
f0:ba:7a:49:d8:e7:55:3f:da:5e:20:c4:62:0b:77:7e:2c:b6:
16:68:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:39:56 2025 by rpki-client