Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File: _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier: r7ZQqdww9GULvsuUBKxmmkoFjd081W9VsxM10sizdpE=
Subject key identifier: 45:ED:E4:3A:56:59:4E:1E:86:BC:7F:B7:98:9F:E5:76:9A:E3:23:3C
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 0197B77CB81DDF0380A1EB2B9B7DF6358EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number: 03C8
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: UsHLucR3rIttQE-i6TwlR7HDoxs.roa (hash: DUCr1+Yi08xU6F2DSZeSJmVDu/Cs1KLSUmKk04+9Ejs=)
2: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: wDCx6WwE6A746WUEbM+cgBggI7GVLJH5/tbHBBFp/vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b8:1d:df:03:80:a1:eb:2b:9b:7d:f6:35:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=45ede43a56594e1e86bc7fb7989fe5769ae3233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:09:ff:e5:25:0f:23:6f:76:ee:28:54:fb:
34:6e:97:f5:fe:d0:dd:16:c9:bd:be:4d:d7:8d:85:
a1:c3:fc:1b:c1:ed:85:f8:84:56:b4:04:4e:36:22:
21:6b:bf:40:df:ee:f7:72:68:b2:a0:5e:ff:d4:c9:
b1:b3:f4:ae:f3:73:ec:73:fb:78:97:d6:8e:44:af:
7e:b4:00:be:da:cb:b0:9a:20:26:33:ef:0c:43:96:
33:f5:bc:52:ad:2b:16:f7:f0:a1:87:3e:8f:13:6c:
12:4c:35:4a:ff:03:ea:c8:d0:ce:2f:cc:64:b5:f1:
8d:a9:c8:b6:e2:af:22:6d:de:d3:17:24:93:23:7f:
a7:81:d9:07:5b:24:29:94:ac:da:1d:7a:57:e3:63:
a0:4b:23:0a:7e:97:8a:9d:84:f6:ac:7b:0f:f2:e1:
ab:72:30:13:44:7c:36:fd:8f:04:fb:20:b4:33:cd:
6e:fe:cb:4c:d5:cd:64:fb:63:26:6d:70:ee:3b:84:
2b:40:fa:e6:1d:a0:8a:a9:57:46:3e:ab:1b:69:7f:
1a:d6:dc:ac:9a:50:e3:ea:d6:08:41:f8:fe:fb:53:
88:59:51:53:78:2c:d3:87:43:b7:9e:e4:6c:79:fd:
0b:1f:4a:64:25:a9:91:ba:70:86:fc:f9:bb:2f:69:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:E4:3A:56:59:4E:1E:86:BC:7F:B7:98:9F:E5:76:9A:E3:23:3C
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:ea:e3:70:d2:6d:bd:64:e5:e5:ed:0a:9b:c2:3c:83:4b:
8d:aa:5f:ee:73:67:28:bf:0c:d3:f1:b4:49:98:df:00:c8:03:
eb:c8:06:ee:e0:49:6b:9e:74:e2:bb:07:25:6c:17:09:e7:ab:
6a:cc:1e:05:9f:5e:be:96:58:36:3f:7b:61:f9:68:d2:c9:6d:
09:77:f2:68:2e:ac:bb:40:7e:b7:02:d9:67:07:f2:5c:b5:15:
46:d8:a0:58:b8:91:af:94:31:06:82:c8:35:bd:a0:1c:89:a5:
1a:a9:54:70:7d:e4:d9:f6:76:31:35:ad:d5:d2:02:94:c8:7b:
87:49:2b:75:54:e2:32:d1:ba:65:13:e5:b1:9f:ea:ad:ec:e6:
ef:82:a2:0e:87:f1:c0:a3:18:67:eb:39:59:a2:37:69:ae:4e:
56:ba:99:f3:ad:55:42:2f:4f:05:36:3f:ae:08:f7:b9:12:d2:
82:ba:ca:43:b0:cc:cd:cd:59:54:94:51:15:de:92:a0:23:63:
71:bc:04:6c:1e:56:0b:dd:16:96:8d:73:00:e0:a4:dc:5b:24:
0f:0e:ef:8f:4f:43:3d:52:77:a6:15:c0:e7:29:63:78:35:31:
38:41:60:21:3e:9a:4a:ee:93:23:82:2c:9b:23:26:6d:fb:2f:
10:5d:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client