Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: scJCp7sedRoCvA4kjNcLal6KXiVlVr2TOD2tP/t9XhM=
Subject key identifier: 08:AD:D9:D8:B1:DE:58:CC:FF:D2:56:49:8A:17:A1:EA:AC:50:D7:65
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 0197B89089275B9E3E77E88302D326EB6517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 067C
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: m7egjBv4iXQb+GxcYNFPlfi5n5YV7eVVKvwj0uzDVtQ=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:89:27:5b:9e:3e:77:e8:83:02:d3:26:eb:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=08add9d8b1de58ccffd256498a17a1eaac50d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:30:89:9e:28:6f:07:07:2a:c2:39:f6:f1:
c0:b4:c3:3e:11:ab:3c:6e:67:46:e5:56:32:d3:1d:
64:bb:6e:62:f3:7e:09:5d:51:f6:b6:91:8e:19:30:
71:24:59:72:0e:9c:cd:3c:a1:ec:ed:a8:dc:87:09:
96:2c:26:11:cf:aa:6e:eb:d0:30:bd:7b:36:a0:8f:
7c:f4:27:60:e9:de:86:4e:f4:c0:bc:37:08:62:5a:
a5:aa:20:fa:90:6c:ea:3a:36:61:89:84:ab:dc:24:
2e:21:40:62:4b:f4:18:f6:01:fe:c7:eb:67:83:ee:
05:fc:65:92:91:d4:b6:38:af:05:77:1e:8d:76:45:
4a:86:f4:63:aa:cd:9c:06:f0:4b:29:a9:03:48:53:
a1:ee:b3:ea:7c:78:c2:ce:8a:b1:82:3a:01:e3:58:
c8:6a:2d:61:e3:a3:e2:d2:70:39:24:34:f0:f8:ab:
40:a2:73:d8:bd:ea:12:41:7f:ea:6c:75:35:ab:e4:
fd:9f:77:c4:6d:90:ff:ff:a2:9c:4a:7e:84:51:b9:
18:13:f1:d2:57:04:f5:2f:f8:74:7f:bf:0c:90:3f:
96:21:9c:43:dc:1e:fe:56:16:13:3b:95:88:96:70:
33:9d:3b:0d:e5:b3:dc:4d:56:91:63:7b:c6:d3:2b:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:D9:D8:B1:DE:58:CC:FF:D2:56:49:8A:17:A1:EA:AC:50:D7:65
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7b:39:de:da:85:04:7f:a5:8e:51:eb:56:a0:55:d0:32:4a:
c1:db:38:af:4d:16:cb:46:84:01:e6:0f:7c:35:53:3c:d3:c9:
2b:7b:4e:a6:c7:0f:46:ae:8f:72:bc:57:79:10:27:7a:2c:7f:
c9:35:b9:5d:e0:d4:26:c2:e0:5e:c6:77:b7:93:f0:ab:06:a8:
66:a8:91:cc:d8:d2:e4:5a:30:16:d8:5c:0c:90:bf:1a:cd:18:
e9:5d:f3:e6:b0:eb:54:f4:45:a1:a3:fd:e8:02:d1:84:9d:97:
4a:ed:7d:a8:99:80:9f:a2:24:54:a4:a0:1a:d3:12:67:95:9d:
88:7b:ae:3c:e8:1d:16:c0:3f:1f:0c:46:e5:4f:b4:10:25:d5:
63:6d:59:45:8b:7a:a9:eb:5e:e8:fb:a2:eb:47:4c:71:c8:00:
93:ba:8f:f8:dd:22:6f:ed:cc:d2:1a:6f:e3:32:67:6c:aa:f6:
b0:09:f5:05:d4:d8:5b:b6:a4:ce:d1:47:8b:27:4b:88:87:52:
55:6b:83:ec:dd:7f:fa:f1:09:40:db:e5:ed:e2:b5:19:b1:58:
5d:bf:1d:1b:87:cb:f8:de:47:f3:ba:10:09:2f:7f:05:8c:a2:
1b:9a:3a:2b:1d:f7:a3:e0:2e:9a:bc:5e:18:ca:17:b7:e4:62:
79:65:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:27 2025 by rpki-client