Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: QgFrAeC7Y8TcYvX55L2gzb/OlFgYetE7R1IBxzBR/6w=
Subject key identifier: 91:A7:B1:F3:A4:1D:3C:12:7A:8C:A0:6D:27:38:E1:6D:9C:11:A9:14
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 0197C15B68F99333A4849E186E3811EF7970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 08E6
Signing time: Mon 30 Jun 2025 15:01:22 +0000
Manifest this update: Mon 30 Jun 2025 15:01:22 +0000
Manifest next update: Tue 01 Jul 2025 15:01:22 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: nsJz3gW1np9ycTfLc5pouTFZFDbuqWgymVBiqASAzwY=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:68:f9:93:33:a4:84:9e:18:6e:38:11:ef:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jun 30 15:01:22 2025 GMT
Not After : Jul 1 15:01:22 2025 GMT
Subject: CN=91a7b1f3a41d3c127a8ca06d2738e16d9c11a914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:15:23:9d:7e:ae:7d:c4:54:d5:88:ec:a4:
46:97:f1:7a:de:88:1b:72:81:5a:57:d8:b7:6d:77:
04:e5:91:9e:9f:96:65:c4:52:10:ae:13:83:38:ef:
c2:8a:9d:30:bc:81:70:61:35:03:6c:1d:56:91:c5:
a7:06:e5:38:b8:bf:54:8f:06:35:0f:d5:4b:2a:e4:
88:7c:9b:3d:6d:13:f7:47:d7:c2:1a:13:77:e1:b7:
bb:7b:10:d6:4f:2f:d5:8b:59:f4:2c:7b:24:18:9b:
b1:a1:8d:53:96:24:4f:cd:0c:36:20:24:9c:1e:42:
94:39:20:c3:5b:a9:85:12:80:9a:f3:2c:9f:d6:61:
d6:1e:85:8c:f6:65:c4:bf:3d:7c:c0:9e:43:39:b7:
ac:88:2e:90:93:e7:56:31:37:8f:a0:41:0e:f5:51:
88:64:f7:78:b4:af:52:a8:46:03:99:1f:f3:ed:8a:
b1:ea:37:13:97:51:ac:a4:e3:af:90:ee:50:65:c4:
23:4d:50:20:4d:16:36:ee:bb:72:08:ac:a0:d8:b2:
c6:ff:0d:21:a5:f4:e1:a1:8c:ce:9c:82:d4:c5:b8:
80:3b:66:b6:cc:17:4e:e3:48:86:ab:27:99:74:59:
7f:c8:9c:8e:7d:9d:95:3e:f8:31:ac:27:13:46:ef:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:B1:F3:A4:1D:3C:12:7A:8C:A0:6D:27:38:E1:6D:9C:11:A9:14
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:f5:eb:ac:f4:6c:24:7d:32:86:32:0e:f3:3d:3f:83:77:
21:f6:b4:6c:3f:03:ee:06:5b:06:79:bb:f8:cc:f2:e4:5e:39:
3d:45:fb:e2:0b:3f:75:46:0d:24:4e:01:5d:09:1a:d3:4d:be:
fc:a7:bf:a8:d4:84:b8:54:df:8e:9b:82:18:ca:42:a1:5d:64:
0d:03:f9:70:62:f9:d0:7a:9c:36:3c:53:4e:88:8c:fc:a4:97:
01:09:3c:ee:2d:a9:4b:b5:f8:a0:5a:31:ed:cb:f0:43:4f:b9:
1f:24:38:55:cf:e1:b3:0b:f0:e7:1b:67:6e:e5:30:00:7e:56:
b2:aa:81:c0:b4:28:44:2e:f1:66:6b:5a:5a:70:63:a1:69:62:
dc:4b:a4:45:5a:97:38:06:33:ca:83:4d:7b:7c:06:88:d6:8c:
bf:1f:aa:3b:9d:87:ea:bc:ca:06:0f:86:69:1c:b5:91:75:d2:
69:3f:0a:1d:20:37:e1:f3:01:89:fa:5d:9e:62:51:b6:bd:2d:
d9:e3:55:ec:e8:d7:c5:ce:43:68:1e:27:49:a0:26:c3:09:e8:
52:f4:7a:38:fc:8c:ec:15:b2:f1:7c:f0:fc:94:02:64:0b:3b:
f7:32:79:35:31:e8:2b:3d:66:0e:1e:27:cc:cb:4c:95:82:ba:
32:dd:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:40:56 2025 by rpki-client