Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: pjerZINRSex7BbfkU0AggN0z+pNRz+i9095XUIX+D1M=
Subject key identifier: 05:E8:A4:7E:04:F2:81:D4:11:19:A4:02:2A:9E:63:6A:B5:14:90:D0
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0197B6A2247E3201B6903A1C99EB8D07CCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0B29
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: cdWr+Ip2wVFg9NCzkG8mZs3rk5VGDLLuGeX98rpfZPY=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:24:7e:32:01:b6:90:3a:1c:99:eb:8d:07:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=05e8a47e04f281d41119a4022a9e636ab51490d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:e0:46:d1:14:2d:ca:08:db:33:e6:6b:f3:
43:02:44:96:65:f4:df:bb:d0:e6:74:2f:93:99:c0:
31:41:d4:c0:71:d2:24:90:b8:e5:f8:ac:7e:74:28:
d6:27:c8:05:f9:bc:7f:bb:d8:37:fc:59:2a:46:22:
af:cb:e4:62:d3:84:56:8f:e9:c7:49:bc:13:5b:cf:
4e:2f:7e:59:d9:4d:d7:98:5d:e6:98:db:bf:98:19:
68:35:25:ea:5f:41:70:2d:21:6e:9a:94:a0:da:16:
ed:b6:42:93:fd:57:59:78:df:78:57:0a:4c:a9:23:
79:1a:c0:c9:15:8b:2f:52:b7:60:fd:3a:83:d3:95:
f6:d5:fc:51:e4:ed:7d:ee:b7:16:28:60:78:cc:80:
af:01:d8:44:1c:f6:3e:c9:6a:c6:a6:62:7f:86:64:
2a:fa:e3:94:14:49:9c:d9:88:03:80:2e:3d:0f:ad:
fd:3a:86:90:5f:3e:86:ad:c8:5f:97:2d:d1:e9:b9:
78:e3:4b:ee:f1:ee:c8:87:d1:3b:5e:94:70:aa:50:
87:75:bc:4d:13:88:fd:89:06:10:20:ec:c8:7a:18:
12:76:80:20:1a:7b:01:48:45:9f:ed:31:01:49:b7:
69:70:e9:d8:de:8f:af:b6:80:18:de:aa:f0:1b:7f:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:A4:7E:04:F2:81:D4:11:19:A4:02:2A:9E:63:6A:B5:14:90:D0
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:84:b6:ac:e2:1b:85:18:43:a4:f8:47:2e:3e:87:48:de:ee:
a3:70:5d:8e:09:0b:79:2a:76:3d:71:ca:fa:0a:4e:b7:ed:e4:
26:a6:90:6f:3d:42:92:1f:ce:3a:d2:1b:e9:6c:77:c7:2e:83:
e3:b0:e3:a2:cf:4b:7e:4b:ee:60:8c:29:d9:d2:22:17:89:6b:
7b:b3:32:1b:5b:ba:08:0f:81:f4:f6:fe:85:57:0a:e8:00:2a:
58:3a:1d:26:b4:7f:5b:c6:df:59:bc:18:3a:67:b0:4b:9d:a9:
43:7c:96:bc:cc:93:34:43:dd:1c:af:7f:1f:66:2a:89:a9:45:
78:ac:43:b1:30:9d:a6:13:98:63:a1:e8:d1:ba:33:21:04:19:
47:81:8a:c9:eb:c6:c2:fb:c0:dd:3c:89:c6:12:24:b1:c7:67:
84:ca:f7:48:2c:f3:dc:ba:5e:8b:f0:35:3d:09:90:18:3f:c9:
50:61:71:54:97:9e:54:d2:ea:37:36:6c:38:ef:f7:72:a8:ed:
18:71:97:4b:35:fc:5c:ae:90:d3:db:5a:ef:bb:b7:bf:54:e7:
44:f7:a3:c4:d0:f3:e1:77:58:a6:f8:a5:6e:7b:1c:a4:bb:db:
6a:e8:64:87:28:cb:5c:aa:13:a7:1d:76:d8:c9:49:ef:ce:56:
fd:e0:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:42 2025 by rpki-client