Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: PKcrzAgV8Rt1YKnImhb6KdlU1BxksRXuMB02tB0CDM8=
Subject key identifier: 38:D5:A9:EC:7F:E3:72:2F:4D:8F:07:DD:00:0A:48:D9:44:9A:75:66
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 0197B89089CAEFF5ECE267AED647B91CA3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: HM05Dl6KyPbnfBe+UeZtOtO/OiG22/bK/qDxAGYL22g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:89:ca:ef:f5:ec:e2:67:ae:d6:47:b9:1c:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=38d5a9ec7fe3722f4d8f07dd000a48d9449a7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:36:32:e1:95:00:b4:61:51:cd:e6:d2:f1:
c5:2a:d6:6d:7f:37:1c:78:86:10:b2:8d:a8:c0:12:
7a:cd:8b:21:4e:a9:a6:1c:e6:d5:d5:63:0c:89:98:
97:8a:39:d9:36:e1:dd:15:d1:b1:94:88:12:5c:03:
3e:64:e1:63:6b:5b:da:eb:9e:5b:47:f2:df:94:0e:
a6:69:3a:18:ef:34:5d:19:3b:b2:d6:aa:5a:4b:5b:
39:46:75:d3:d8:62:28:2c:3a:12:36:70:d2:97:63:
b8:b8:b7:21:60:54:54:8b:34:67:2d:dd:95:82:49:
80:28:3c:6c:c5:65:3a:90:61:49:f0:23:62:b9:7b:
ad:1b:52:9f:84:2d:d2:ef:05:ec:a6:11:f4:b4:f5:
03:26:ee:c8:ec:44:48:24:f1:6f:3e:da:97:7b:a0:
49:d9:94:a5:d4:b1:27:3f:90:d9:c2:2f:b6:1d:ce:
eb:55:4e:62:58:89:0e:f4:f8:d0:dd:31:8c:1b:f6:
f0:84:95:44:79:b2:b4:c1:e1:37:0c:9d:56:51:4a:
4b:bb:e8:7d:a9:f0:15:9a:db:f1:65:14:e1:b8:15:
17:0f:a4:5a:19:16:1d:57:8e:0b:72:03:ca:7a:75:
af:2a:c6:01:25:f4:52:81:17:4c:8e:9c:9a:cc:6b:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:A9:EC:7F:E3:72:2F:4D:8F:07:DD:00:0A:48:D9:44:9A:75:66
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:05:d9:d2:2a:3d:92:a8:7e:b9:37:eb:2c:7f:bf:e1:e9:4a:
d2:0f:43:eb:ee:79:2c:15:b1:11:e2:b3:7e:07:a1:f6:09:ba:
56:a2:b7:4a:52:89:60:e3:2e:80:4b:61:7f:02:1d:84:27:a2:
6b:42:99:6e:98:06:57:8c:6f:e3:ab:64:4c:3c:06:e9:6d:ab:
46:08:1f:5e:75:29:3b:f8:93:6a:5c:62:98:97:07:df:0e:1b:
32:1b:40:13:d6:95:cc:36:1c:5f:f3:f3:06:69:3c:e0:f5:cb:
e9:d7:e5:44:06:bb:15:58:83:00:b4:bb:e8:53:52:cb:5e:0f:
15:6d:ad:54:36:dd:50:2e:bf:29:bd:31:08:e3:f3:e0:8a:ff:
36:0c:38:a0:04:57:62:b4:39:eb:43:3c:d7:a1:dd:41:96:a3:
1b:01:82:68:c8:f6:d2:77:0e:8a:f8:f9:71:4f:99:09:a6:2b:
1b:64:8c:42:08:1b:88:0c:bf:f4:d1:2c:fb:19:16:da:42:d0:
4a:b2:d6:cf:a7:83:16:bb:a1:33:1e:02:5b:6c:48:80:31:10:
9c:44:f7:63:72:89:9c:75:8a:a7:fb:b8:a9:fc:85:86:35:0f:
8b:18:6a:56:76:6d:fe:b8:42:f6:dc:54:c9:ff:d0:74:7f:51:
29:fb:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:55:14 2025 by rpki-client