Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: W2enyeJwHkohRTB8wnNLokbsTzJ+PczRhCWxHcu5b9w=
Subject key identifier: B2:94:3E:FC:5A:2F:8E:99:64:95:76:76:B5:89:8F:B0:7C:1A:27:D4
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0198D6609112753670807A0A80AE5DD9FC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0CDC
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: 68U8ActPPMoUCgN5s2GarXwcvxbGpuDZ9qsg2/zI/l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:91:12:75:36:70:80:7a:0a:80:ae:5d:d9:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=b2943efc5a2f8e9964957676b5898fb07c1a27d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:ea:9a:0d:5d:d0:d3:b8:b0:c2:ab:a4:1b:
2f:f4:13:59:31:a9:e5:46:57:41:38:97:64:b7:d0:
43:91:28:4f:18:50:bb:8e:48:b6:62:98:94:5f:12:
0c:3c:dd:3e:7b:2e:c3:ac:c9:74:23:66:c1:89:82:
f9:7a:fe:c8:67:e5:34:87:55:f7:3e:69:71:67:f2:
5a:42:7b:77:87:45:d1:ce:bc:2a:43:75:64:af:89:
e8:ee:4d:fc:e1:c9:e4:33:5b:c1:cf:5d:70:a7:2b:
0b:00:25:8e:2a:9a:0c:fe:f7:45:47:d4:af:1b:45:
0b:06:07:85:b8:75:4f:d6:c1:38:c3:0b:70:69:e2:
20:bc:b5:87:89:74:b6:cb:32:a4:f2:87:72:7a:76:
47:a9:e9:dd:b8:20:5c:3f:da:af:9f:0b:aa:ea:33:
95:c1:6a:3d:5f:89:c9:a2:be:98:05:5b:bc:6b:3e:
ff:4b:fb:9b:e5:13:ad:3a:97:9c:51:63:c5:9d:77:
25:e4:c9:13:9b:0f:09:77:3e:33:bf:9c:fd:68:ff:
fb:47:80:39:62:a8:6a:cf:85:47:d3:68:5f:5d:2a:
0d:13:ad:b6:70:0e:c5:43:db:f9:f8:0e:9b:2b:fd:
6b:ff:f3:6b:96:8c:9c:fa:4b:ed:99:e2:b0:ef:95:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:3E:FC:5A:2F:8E:99:64:95:76:76:B5:89:8F:B0:7C:1A:27:D4
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e1:26:2e:c9:47:2b:bc:2a:2d:f6:45:81:49:c6:24:78:ed:
00:a6:da:1e:a0:69:8d:79:7c:de:23:e5:4a:76:75:01:21:73:
57:8b:0a:ae:ae:a0:00:2d:bc:14:09:e7:66:22:f1:19:66:c2:
8b:14:73:64:06:31:9d:a5:03:17:cf:0a:36:0b:21:87:e4:32:
33:ff:96:eb:7d:9a:d6:2a:22:e7:7a:76:0d:30:13:a9:1d:d2:
8c:4e:9e:c8:0d:24:bf:d1:f5:50:e9:d1:c5:ac:4e:8c:1c:0d:
86:bc:1b:b6:4b:59:c6:24:23:fa:9a:c6:71:d2:81:a4:ba:21:
02:be:4e:85:00:7b:75:02:48:0c:9d:b0:cf:00:ab:b8:09:51:
4d:0e:66:83:61:2c:57:74:78:aa:29:c4:11:2c:53:f6:6e:35:
56:9f:c9:d8:86:40:fe:21:95:e3:b6:89:8a:21:7f:7f:40:31:
da:46:70:02:ed:a9:a5:ac:77:ff:49:2d:28:49:f1:d8:4b:06:
29:5a:45:1b:1f:32:af:0d:e4:c5:1d:8c:f2:f3:30:a0:f1:b8:
58:76:5b:20:d7:1e:3b:10:ca:08:18:70:9c:57:aa:02:de:28:
a3:88:d5:e0:7c:ca:19:05:56:d0:be:33:79:e3:9a:dc:38:19:
9e:58:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:31 2025 by rpki-client