Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: oOMP+Lizgp7St7KCo9HmBlTVf+8Fdt7RsoBZJmqxTiE=
Subject key identifier: CC:C7:8B:C4:FA:37:2A:E0:67:B8:14:B8:73:A5:02:8E:A7:A0:D5:D6
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 0197B96B168F463B79EA611365AC069E8058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 02:01:32 +0000
Manifest this update: Sun 29 Jun 2025 02:01:32 +0000
Manifest next update: Mon 30 Jun 2025 02:01:32 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: iFH0beaeoitByzx5PaxClpaK0B3RVkDqBVMEer4AeOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:16:8f:46:3b:79:ea:61:13:65:ac:06:9e:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jun 29 02:01:32 2025 GMT
Not After : Jun 30 02:01:32 2025 GMT
Subject: CN=ccc78bc4fa372ae067b814b873a5028ea7a0d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:b9:24:e0:9b:87:dc:d8:79:7e:96:57:ed:
d6:4f:0d:44:12:e7:50:e1:c2:5c:bc:18:c2:a9:13:
1a:1a:93:f9:63:12:77:f5:10:e3:6b:a9:27:b5:ef:
3b:f6:d2:6e:a2:fb:8c:73:98:32:85:a2:2e:d0:e4:
2a:25:a8:aa:b8:92:52:69:ec:3d:53:98:66:43:82:
aa:dd:d7:e8:02:ca:1d:22:42:ad:eb:cf:9f:bc:9a:
62:35:fe:0d:21:8e:91:64:50:f2:23:0b:08:e9:ec:
0e:cd:b2:21:c6:13:7e:83:f8:ab:7a:3b:11:74:a1:
e8:39:37:b8:96:a8:db:1d:81:f8:d0:fd:13:26:f1:
c0:c5:d5:9a:f5:d5:2d:37:cc:aa:3f:a0:d7:cf:6e:
51:dc:cf:94:25:44:99:06:7f:99:57:fd:94:71:c9:
7a:44:74:2a:c3:1a:3e:68:4f:3c:b6:d8:b5:60:e3:
e3:69:18:25:8f:9d:9a:cb:d3:4a:03:34:15:f2:87:
7d:a2:42:38:2a:1f:62:32:70:8a:d3:38:3b:8e:e7:
2f:21:e4:f3:21:af:19:58:4b:3d:db:7b:bc:6b:9c:
90:8d:f3:db:67:ce:92:6d:98:c1:2f:c2:0c:1d:9c:
ae:a0:30:f7:a8:e4:c3:4d:5d:a4:20:1a:69:f8:5a:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:8B:C4:FA:37:2A:E0:67:B8:14:B8:73:A5:02:8E:A7:A0:D5:D6
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:2d:ba:43:51:e8:ff:12:7a:23:ce:46:79:39:e1:c3:bd:
c8:7c:41:98:d4:ad:29:2b:11:f2:37:50:c0:f9:2c:79:38:fd:
fa:b9:9e:92:99:07:6f:44:cf:aa:9a:52:c5:75:cc:d4:6b:46:
2e:55:23:ca:6d:be:a1:4f:61:a5:41:35:ae:e5:e7:c7:6f:c8:
65:04:88:86:00:49:ac:9d:f6:75:e0:62:16:65:c9:38:60:25:
08:a3:0c:26:07:4e:86:9b:fd:3f:4a:9c:a5:f5:40:ee:bf:9a:
54:c2:ff:24:07:6c:b9:b5:44:8c:c4:e8:c5:be:6f:12:b2:18:
e3:40:96:92:e1:00:4a:b5:f4:22:b1:97:1b:dc:2e:18:27:83:
79:e6:92:64:7d:69:a6:8d:d4:ed:54:e5:92:d5:34:1f:4b:4d:
d5:2b:b5:f0:ee:d3:8b:ab:e4:5e:72:2f:b1:52:d2:44:15:bb:
f3:cd:cb:e1:45:da:a9:31:f4:6e:aa:00:1f:6b:72:f8:d0:d2:
bc:94:d8:d5:29:20:b5:dc:7b:9f:63:b4:ee:c5:8c:6a:1f:0e:
96:6a:37:06:1c:6e:d2:5f:e3:c7:fa:9b:29:91:f4:a8:31:70:
b7:70:dc:03:38:04:49:27:05:18:8c:bb:fa:fb:b0:6a:26:1b:
af:9f:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:10 2025 by rpki-client