Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: +cauoaUdkY0gx9mDL3pETH5mjn0abkESwDtywXG9JTI=
Subject key identifier: 99:7A:1A:14:F6:FE:CB:67:BF:94:F5:28:07:A7:3B:66:C4:FA:99:B8
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 0196A8B00C26E957C396F6948BB71AAA2398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 03:00:31 +0000
Manifest this update: Wed 07 May 2025 03:00:31 +0000
Manifest next update: Thu 08 May 2025 03:00:31 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: VZiFFXQEvWBXMnGG7uSRos95gUpNOEfADFyHZdFGSBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:0c:26:e9:57:c3:96:f6:94:8b:b7:1a:aa:23:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: May 7 03:00:31 2025 GMT
Not After : May 8 03:00:31 2025 GMT
Subject: CN=997a1a14f6fecb67bf94f52807a73b66c4fa99b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:e7:23:d6:3a:13:9f:65:dc:1e:02:ac:c8:
88:a7:56:68:a4:52:5e:69:16:9f:f1:46:fa:b4:f7:
d5:d8:b3:99:5a:49:31:6c:59:6b:53:ee:ba:90:1b:
9c:d9:19:ca:c6:bf:47:3b:48:50:4e:6b:5e:d9:0d:
49:94:88:28:c4:7a:e8:39:3d:f2:38:80:2a:24:00:
19:a6:d1:e4:0f:29:a5:02:58:bc:01:5e:71:b0:c0:
c7:ac:4d:e5:ad:d3:1b:f5:a3:1b:2e:f1:ec:2c:dd:
3e:a7:3e:18:49:be:2c:3b:65:55:a0:f2:d9:25:81:
82:83:35:f9:51:09:5e:ea:21:fe:fb:58:95:64:77:
03:bc:b0:c4:26:3e:6c:1a:09:9a:10:68:b4:9b:c3:
d1:cd:b8:20:a2:ed:6d:90:cc:f4:51:b1:78:8b:6d:
31:c8:58:13:a2:a6:59:5e:be:91:92:90:6b:b3:78:
a4:a3:be:82:bb:57:6d:b3:9b:eb:48:91:b8:6d:25:
3a:88:8b:18:c3:6c:f9:e3:4a:12:11:ba:c9:87:87:
db:cd:a0:77:d6:0d:38:81:04:ed:d0:39:9c:2a:07:
e8:2d:02:c2:45:23:8d:1c:0b:e8:57:89:62:2a:2c:
98:14:16:a4:ef:55:8a:f3:01:44:94:16:8a:43:60:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:1A:14:F6:FE:CB:67:BF:94:F5:28:07:A7:3B:66:C4:FA:99:B8
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:b9:cd:67:4b:cd:0e:2c:db:bd:cb:39:2f:9a:7e:54:17:
e2:c1:a2:77:09:f4:b7:a6:28:c6:06:da:4e:06:54:d3:03:68:
0a:01:41:44:6e:be:f1:92:b5:08:45:51:f1:ce:66:8c:d5:f6:
0a:bb:80:1b:87:64:86:37:05:7e:66:4b:cc:f3:39:8b:24:f0:
e6:36:86:34:53:35:9f:78:6d:d0:01:5f:8a:a0:5d:4c:bd:81:
80:6b:5b:c1:4b:f6:93:7c:c0:bf:2d:7e:b4:ba:85:fa:73:95:
f0:af:0b:b9:f7:95:20:3b:a9:60:15:1e:f4:3c:9e:d5:1d:4a:
e6:80:17:e3:f8:98:7e:fa:24:4c:3c:7b:f2:f2:ba:fb:e2:c7:
e4:97:e7:f3:af:84:53:18:99:89:65:dc:fc:23:61:e8:12:be:
70:0e:07:9f:57:c1:2a:09:04:57:8a:ab:c2:1a:41:ae:ba:de:
86:cb:0e:ae:5a:ff:8f:64:63:56:91:ff:ff:10:60:95:13:5f:
55:f4:24:94:c9:5a:01:49:ad:15:e1:dc:21:4c:c4:43:69:ce:
6d:6e:b2:54:51:be:3f:6a:43:c7:4e:10:f0:76:c9:97:6f:f7:
d7:80:1a:d5:ec:76:a1:cf:06:ff:6d:ed:35:7a:d9:03:64:f6:
e7:13:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:56:57 2025 by rpki-client