Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: mzMWS/64jjl/9wIr/AzplTLl9cbvMeTy5oPY6IXVZSA=
Subject key identifier: 0E:40:D8:0E:4F:6D:30:16:B9:7F:DB:7A:E2:DA:6C:F6:31:8C:A4:CA
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 0197CDCD23B9EA86B86529AE5F5BD62B1D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 04A1
Signing time: Thu 03 Jul 2025 01:01:02 +0000
Manifest this update: Thu 03 Jul 2025 01:01:02 +0000
Manifest next update: Fri 04 Jul 2025 01:01:02 +0000
Files and hashes: 1: Hl7hSFZEHZrA1_ugH1WvtUr7hTI.roa (hash: uywWwGCKWj+Fn6qNY8dmQ39B3/vU6rK6HYsO/2wacYs=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: LdjZQOaPBbaOWzqBCHSdP1Ur7XrBN9/2NmRluGoydKc=)
3: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:23:b9:ea:86:b8:65:29:ae:5f:5b:d6:2b:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Jul 3 01:01:02 2025 GMT
Not After : Jul 4 01:01:02 2025 GMT
Subject: CN=0e40d80e4f6d3016b97fdb7ae2da6cf6318ca4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:8c:84:9e:2e:eb:90:56:f1:4e:2b:84:89:
eb:2a:2c:e5:22:d8:66:b1:1a:16:b4:ba:a6:0b:8e:
d3:b6:3d:b5:94:ee:7a:85:cd:8b:79:1d:72:bb:39:
80:1b:96:b3:9a:2a:a9:c5:04:83:70:0f:ce:eb:7f:
02:37:ce:57:41:13:68:7f:3f:6a:3b:72:1e:1d:50:
40:20:51:2a:b3:41:ce:05:b5:54:5a:b1:3e:6e:77:
56:e0:e8:7c:1a:c9:ed:12:92:26:72:ef:16:ec:6a:
ec:0d:6e:d2:47:e9:8d:83:0a:99:80:a0:07:70:df:
09:41:00:0a:40:fe:9f:ab:7b:10:7f:d1:48:3f:e3:
21:d4:a3:42:a3:dd:6b:7b:14:bf:57:82:b1:5a:ce:
ea:11:64:9d:56:d0:1f:ed:bf:37:24:f7:eb:35:8c:
ae:91:38:8b:29:17:aa:40:c4:e0:76:c6:9f:60:0b:
c9:bd:60:13:2d:40:bb:2b:13:47:55:92:52:99:e5:
62:9d:59:3d:04:40:ac:c9:b6:e2:92:29:54:e4:52:
ab:90:c5:9d:2a:e0:50:20:f8:af:c1:a3:44:2f:df:
ca:33:55:24:1a:cd:1f:9c:2c:cc:72:53:b6:9d:c4:
60:b8:58:98:32:63:0b:98:4c:08:e5:4b:4f:83:53:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:D8:0E:4F:6D:30:16:B9:7F:DB:7A:E2:DA:6C:F6:31:8C:A4:CA
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e9:f2:0c:4c:d4:36:4e:4f:ca:c7:a9:6d:61:7d:2e:4e:ff:
b7:8d:dc:b1:eb:42:02:f5:c7:3c:a2:71:f8:c7:99:24:79:1e:
91:35:e8:db:e7:82:2b:f2:da:ae:3c:8f:97:1a:89:82:71:07:
91:30:a4:7a:76:97:f5:49:dc:85:dd:d0:ee:e1:53:5c:a6:a2:
27:c3:fd:09:9a:19:ab:61:53:fa:43:6c:b0:b7:c9:c5:ee:d7:
b5:ea:1b:50:2a:16:76:c2:fd:4c:b6:bd:2a:93:30:a9:ee:ac:
66:c4:ec:07:88:86:4a:2d:e8:d2:07:9f:98:3c:58:94:fb:2e:
08:c0:6b:99:7b:64:10:bb:a3:c6:d4:3e:f4:d6:08:c1:ab:ab:
15:72:a9:ba:64:d8:2c:02:b7:8b:3f:81:f2:98:2c:62:a8:94:
36:a7:50:49:07:cd:00:49:20:62:4f:e6:3f:6b:cd:e8:b1:d4:
8a:fe:47:31:d2:70:23:ac:e7:75:12:9f:ac:18:d1:ef:af:ad:
f1:59:d1:60:80:f2:52:77:cd:e2:74:8d:77:58:37:5e:0e:a5:
f2:2f:84:72:27:e7:21:64:6c:d9:ca:de:6a:45:36:59:28:79:
87:6a:2c:f2:c1:3e:3f:f1:6a:ea:1c:e6:4d:a4:94:5a:f7:25:
9e:66:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:07:49 2025 by rpki-client