Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: GcKFyiCKlpWVxN8v6ah0cu9Oa/qI9yvrWPOhTcBiNHE=
Subject key identifier: 0A:14:AB:E6:6E:10:FE:6E:62:76:8C:71:E1:59:B4:84:B6:6D:A6:37
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0197B6A14C0AE6762037A98DFCD3E76CF580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 08CE
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: nEe/0qPxN1kE6un/11ehG4X3q0O2yVRnUG7OFuQQ1d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4c:0a:e6:76:20:37:a9:8d:fc:d3:e7:6c:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=0a14abe66e10fe6e62768c71e159b484b66da637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:34:13:36:bb:5a:97:d2:ee:41:b3:9d:ec:
44:6c:96:db:97:a0:7b:99:15:1f:f2:40:8a:7d:bb:
c3:98:e1:97:a1:73:68:b1:51:fd:80:76:1a:f7:07:
3c:ee:17:81:0b:78:a0:a4:eb:70:ee:b1:b0:60:14:
81:b1:e4:11:cb:c4:30:7b:36:d6:e6:f1:11:1a:a8:
2c:f4:84:1e:fc:b9:21:2c:31:f4:22:c3:db:05:b6:
aa:64:89:0a:2e:66:ca:d2:ce:e4:63:57:24:2a:83:
05:50:aa:e3:1e:5d:bb:33:cc:ee:95:81:0f:d2:c9:
45:31:fe:20:c8:90:42:e0:7a:fa:e6:54:b5:bd:91:
63:9f:98:31:ad:9d:6a:95:4c:60:ae:3e:11:e5:02:
ac:0b:b8:0e:e9:4b:3f:48:92:b1:21:3d:13:98:e6:
8c:77:a1:70:b9:e8:49:6c:76:f6:fd:c9:53:52:44:
fd:86:4a:5a:9a:06:6b:65:c8:06:bc:a8:4e:e8:ac:
8e:7e:36:e2:b7:f9:ac:b5:85:04:44:1f:1c:91:79:
50:0b:b9:20:d7:e9:d6:b2:ec:c9:b9:46:23:a1:42:
01:00:b8:e2:6c:f4:74:92:95:d5:54:4b:2a:4b:9d:
10:7f:c6:14:fa:4a:74:59:4e:7a:e4:af:14:7c:3e:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:AB:E6:6E:10:FE:6E:62:76:8C:71:E1:59:B4:84:B6:6D:A6:37
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:57:e5:c6:7d:42:cd:34:be:9b:73:76:5f:ec:1d:fc:a7:ba:
70:5f:d2:47:a4:3a:c0:8f:cd:9e:1d:08:b5:db:ab:7c:e4:16:
6d:82:03:2b:d8:ed:89:70:38:cf:04:77:3e:4c:43:79:2a:8a:
a3:b3:0b:1e:f6:be:7c:5b:28:fd:d0:68:5e:42:25:5b:25:91:
ea:37:eb:d4:57:69:f5:82:a3:6c:57:e2:73:db:9d:f1:ec:02:
39:e9:ca:81:d6:31:2c:cc:7f:e8:59:aa:77:98:fe:57:74:5b:
93:a5:8e:04:6a:82:fb:c9:41:4b:5f:84:ec:b7:7d:32:b2:0b:
49:ae:90:25:c0:3a:5d:6a:5a:35:b3:3c:84:19:dd:3b:ca:e6:
54:d5:98:4e:0b:39:0e:f6:a3:74:e5:16:27:4f:46:ad:c1:9b:
29:01:aa:97:d4:34:59:54:45:55:41:59:01:9d:49:64:b9:62:
b4:41:d2:53:80:49:e3:cf:8f:d8:19:b1:c5:d7:17:40:07:d6:
da:4f:0f:54:e2:ec:a6:3c:53:39:e0:f7:4c:d5:10:81:32:56:
8c:41:ca:9c:90:af:30:24:ba:ed:91:0c:9c:26:b4:a7:c8:be:
01:60:99:81:04:d6:45:f9:0b:56:29:d6:bb:88:21:b0:41:86:
df:2e:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:30 2025 by rpki-client