Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: 8Ho+7aWMRmaDMtvH0FUV/r/DAWL0KXH07DdZ6s5NHIk=
Subject key identifier: 07:85:4F:2D:4E:3C:2B:01:1C:60:03:17:3A:CB:10:7F:1C:85:C3:74
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 0197B7EA6F636901177DDDDC3BBBA282DEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 9F
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: nLFw31pRrgRHiNGQTKBTxgSh8FHU6YbrSVTfWGjcmAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6f:63:69:01:17:7d:dd:dc:3b:bb:a2:82:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=07854f2d4e3c2b011c6003173acb107f1c85c374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:60:3b:77:75:ef:f3:6a:c5:f1:8d:d7:9c:
85:09:ac:6f:cb:d1:8e:0b:f1:3a:8c:aa:f8:6b:1e:
5b:12:39:a9:49:b1:c4:d6:41:34:aa:7b:99:b6:c6:
f2:1e:d0:18:3a:fe:66:99:18:4b:39:1a:fc:96:57:
e8:80:c8:02:ae:16:ed:45:b4:cb:87:8f:76:76:6e:
9e:d8:fd:1e:d1:96:d6:83:67:61:64:f1:d9:55:f6:
e5:89:99:2f:0f:5c:18:66:f6:99:a5:70:33:ae:2a:
e1:c9:bc:38:8c:df:6d:c3:ec:c5:49:0a:b4:84:a0:
0d:43:d9:93:1f:49:07:5d:1f:a4:2e:0a:fb:99:4a:
84:9d:5b:a9:ca:97:36:81:11:fb:e7:f8:a4:de:1e:
3a:09:d2:5b:e2:52:17:48:ab:1b:90:1b:15:d9:c0:
17:ca:f8:2c:ea:bd:70:80:b3:e6:f2:de:f3:de:32:
99:f1:fe:68:13:f9:e3:a1:76:cb:4c:7d:9a:ea:17:
f8:6f:29:59:56:ee:59:72:f4:1b:ac:e4:a3:44:f7:
31:a8:99:bd:5d:9b:ea:c4:20:ea:35:84:bf:0f:97:
f9:56:26:7d:ef:e6:5c:84:bc:b1:ce:30:ee:9a:12:
fb:de:6d:8f:84:b7:4c:01:20:60:4c:ce:53:ad:20:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:4F:2D:4E:3C:2B:01:1C:60:03:17:3A:CB:10:7F:1C:85:C3:74
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:67:ff:29:3b:91:16:c1:1f:7d:55:c6:b7:ea:d9:48:b0:
36:7c:6f:09:6c:95:5e:fc:8c:f1:f5:96:8e:f5:dd:20:09:57:
ba:2d:1e:03:d5:64:5f:01:4b:75:21:dc:21:4f:dc:27:f8:c1:
c2:cd:44:c9:56:d6:29:b4:f8:9e:f8:45:41:76:d3:c1:b2:2f:
e2:9e:a7:d3:f6:59:b5:0a:d1:c0:a7:b9:53:54:cb:dd:2c:5f:
a5:a7:35:4b:a7:3a:be:cf:a7:1e:50:b9:0d:77:87:c6:d7:d6:
6e:81:92:bb:5b:d6:e9:4a:3d:5d:35:ab:07:77:07:a3:5b:c1:
19:4d:dd:a1:32:7e:6b:a3:0e:5c:71:21:3d:e7:10:26:db:06:
06:a2:32:e4:96:a5:d0:7c:58:1f:e1:1f:19:e6:15:d3:11:72:
06:c3:3a:e7:1c:24:7b:80:58:f2:66:65:43:d3:9c:ea:be:af:
6f:05:ad:a0:8b:7f:a4:b4:46:c2:2c:58:85:fc:01:83:ea:1b:
f8:da:5e:92:d4:15:6d:b8:a8:27:73:94:27:d0:c2:e5:b7:c3:
c3:74:59:0c:bb:4e:9d:9e:8d:5b:ca:87:1e:28:16:59:6c:d8:
0d:d9:7a:f5:f5:c3:88:91:0a:d5:32:10:ed:5d:6a:62:42:56:
a9:02:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:30 2025 by rpki-client