Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: czqrgB8ASP67I+PguJpisV4vmOIlVs5hzm/2qv3hNjc=
Subject key identifier: 7C:0A:14:96:89:44:6E:44:73:BD:FE:7A:56:41:86:0E:63:24:FF:0F
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0198D4045345DED793353F2BFB24AAF7FC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 153F
Signing time: Fri 22 Aug 2025 23:01:49 +0000
Manifest this update: Fri 22 Aug 2025 23:01:49 +0000
Manifest next update: Sat 23 Aug 2025 23:01:49 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: qqdG6XIWs4HyvYA58auFX+/I6P27LiLgpyBxObrflj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:53:45:de:d7:93:35:3f:2b:fb:24:aa:f7:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Aug 22 23:01:49 2025 GMT
Not After : Aug 23 23:01:49 2025 GMT
Subject: CN=7c0a149689446e4473bdfe7a5641860e6324ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:d7:47:69:16:e3:31:2b:d0:a0:3a:05:71:
a2:d6:be:6b:fb:16:ea:de:6d:c2:aa:8c:9b:48:fb:
56:2a:ca:2c:df:e7:65:ae:d0:a5:9d:2d:9d:39:7e:
24:9e:40:10:05:b3:89:37:85:25:ba:53:f0:dd:52:
56:bb:2e:12:d4:94:10:33:a7:71:fa:64:16:b9:74:
bc:9f:04:d5:34:a6:04:2d:00:ed:9e:f0:c2:89:67:
eb:a5:a4:5c:a8:b9:48:f5:6c:f3:3d:6f:cd:60:6c:
9a:5f:c7:09:a3:af:25:dc:7d:49:6f:f6:67:4f:ed:
8b:1d:63:95:87:e2:31:76:cf:2a:83:e7:25:4c:98:
21:b9:6d:52:97:af:a5:c0:92:22:bf:2c:c9:86:80:
72:0e:68:28:04:00:bb:27:ed:fb:51:55:23:d9:13:
fd:03:f5:f3:4d:bf:41:26:cf:c0:43:ca:41:fb:92:
bd:df:3c:e4:15:4b:d1:dd:bb:7c:08:f6:18:5f:f7:
32:e5:39:c3:92:77:9e:19:1c:54:f9:ec:6c:e9:f1:
dd:b2:77:44:97:86:4d:09:cd:f4:e6:ad:d9:cd:ca:
6f:c1:42:a1:0c:88:08:72:a8:cb:2c:95:33:cf:92:
c0:19:73:4b:ac:06:27:c0:c1:38:5c:25:d3:ea:5d:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:14:96:89:44:6E:44:73:BD:FE:7A:56:41:86:0E:63:24:FF:0F
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:bb:59:bb:6e:df:98:0c:cf:ef:a0:a5:58:0c:03:9c:6e:
18:69:ed:14:81:cc:29:23:9d:5e:78:21:fd:e6:a5:00:ef:85:
f4:c6:de:7f:54:cb:3f:bb:f8:a9:25:bd:21:97:82:cf:51:67:
88:79:b4:3b:15:16:40:43:c9:bf:cd:5f:06:6d:31:fc:02:3d:
17:8a:b2:a7:8d:f8:9d:17:62:93:31:3b:bf:38:9f:0c:48:53:
da:4e:5f:28:c1:52:06:27:9c:a6:cf:6b:2b:e6:0d:3e:ad:d0:
e5:b6:84:c3:d1:0b:9e:5d:0d:3e:ee:4f:b7:cc:b9:ca:56:48:
76:1a:65:ea:c0:fe:34:4d:31:e6:ee:fe:0a:28:7e:2a:92:c0:
ef:2e:bb:ce:b6:73:31:9c:12:b0:9d:6c:46:0f:1a:f7:64:93:
3e:48:35:ce:06:f7:d0:70:db:af:4b:e4:ee:43:57:c2:8a:cc:
54:f1:77:e4:95:26:3c:4c:23:28:82:73:a8:a8:af:57:40:58:
c9:c8:04:b5:b6:07:93:fc:37:d6:27:0d:49:ab:63:dc:ac:31:
61:db:78:f3:15:9e:c0:5c:66:bf:b0:d9:85:25:2b:bb:c5:dd:
6f:a9:f6:11:99:fa:13:6a:ef:b0:a6:80:a8:8c:df:bf:5a:82:
e0:61:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:50 2025 by rpki-client