Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: DDCRLSztVf23UvHsEFwObqcF3awWkbzNlIF9ZpdPvwc=
Subject key identifier: CA:07:76:85:08:C3:86:13:AD:9A:42:D9:41:38:8E:D1:0E:45:9F:41
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0197B6D78EDEC1D70DD701CAE68B130C5DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 01C5
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: MTSYLUJ+UiKQfFmqYrSEslZy8T7jmAryV5Yj55KPAsY=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8e:de:c1:d7:0d:d7:01:ca:e6:8b:13:0c:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=ca07768508c38613ad9a42d941388ed10e459f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:05:5b:25:15:c2:ee:5a:45:87:dc:c1:5a:
ac:81:9c:94:e1:4f:db:2f:35:98:ef:fd:29:07:24:
58:a6:8f:6b:ee:25:14:26:d0:1b:bf:f3:29:77:3d:
50:45:65:d9:f4:d9:24:b9:72:30:01:ce:10:66:23:
da:09:35:6e:ed:0d:03:c2:16:61:8c:c7:ec:29:7e:
3a:2d:20:01:37:ab:8d:65:6f:c6:4f:8f:cc:8c:8e:
d0:fe:dc:cf:aa:32:51:e6:67:91:6b:85:cc:4e:30:
65:3e:b5:1f:27:d1:32:94:af:1d:aa:47:61:7f:60:
1f:71:9c:1d:57:3c:0e:7c:98:78:47:1b:25:3a:8a:
f3:8b:f7:c6:87:cb:fb:fd:cf:f0:26:6e:1c:a7:f2:
3f:07:ae:bf:14:78:f6:46:9f:d5:47:5d:4f:d6:f7:
aa:6d:c7:88:4f:7a:a3:39:ad:e4:6b:24:99:ba:b5:
68:8b:a6:4c:1d:71:81:18:64:f4:67:44:38:d9:98:
5a:95:02:41:0b:45:5d:05:e4:17:bd:21:ba:b2:b2:
1f:67:41:91:b6:43:30:1c:c4:36:9f:bb:11:12:af:
6d:c6:3e:88:c0:a1:ed:1e:f0:bf:24:a1:9a:79:2a:
eb:a9:34:47:76:21:5f:1a:0d:38:5e:8f:53:c9:b4:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:76:85:08:C3:86:13:AD:9A:42:D9:41:38:8E:D1:0E:45:9F:41
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:54:2e:ee:72:4f:f4:d5:bd:9c:42:34:b6:27:79:a8:a7:17:
08:45:11:d0:8e:e9:bc:da:4a:d0:5a:e0:9b:b7:ce:17:b9:6d:
d5:da:9a:d8:65:39:d9:31:9c:16:44:c7:0a:15:30:91:bf:03:
39:6e:37:06:40:7c:3e:52:38:60:3c:e1:e0:4d:e4:27:21:e5:
e5:35:e0:32:6d:f8:68:2c:60:9c:4d:e9:c2:93:f4:36:eb:87:
c4:8b:9e:72:f5:2b:f7:1c:80:38:d4:73:d6:0a:a0:ff:e4:44:
07:e6:30:e7:21:80:5f:e2:e4:df:6d:ba:7e:89:11:e7:7c:7e:
25:5e:40:de:9b:dc:38:bf:81:6e:f8:fc:5e:7f:ee:ab:20:24:
ac:f9:01:3d:38:ce:a9:f0:15:4f:9d:7f:50:a4:be:45:9d:f2:
b5:18:8a:ec:14:54:35:e1:7e:1f:77:c6:53:70:d0:f0:d5:39:
6c:c1:23:b5:ee:e7:01:ac:ef:ab:5d:f8:b8:d0:4b:80:4e:cf:
29:de:c5:98:ac:30:d7:80:3d:85:39:90:5a:1f:30:30:c2:26:
ff:3a:63:97:c7:f5:40:9b:51:9a:59:ce:8e:3c:f6:14:5b:a3:
c9:da:e8:f4:93:58:99:68:f5:ec:bf:3f:c6:38:41:d3:c7:e4:
ba:a2:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:59 2025 by rpki-client