Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: 0r53jS9MJBLULXermRjFFMdbc5OEAjcrny78OVw3Xfk=
Subject key identifier: 0B:CC:E5:19:33:BC:2E:10:3A:5F:70:FE:74:50:17:79:89:92:40:E6
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0197BA7D9F397F8A354B821107113BF7FA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1175
Signing time: Sun 29 Jun 2025 07:01:24 +0000
Manifest this update: Sun 29 Jun 2025 07:01:24 +0000
Manifest next update: Mon 30 Jun 2025 07:01:24 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: fZwUCT0kBE/OzIEC7p3ZdxU7RKbOTTH/wjdu736kBo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:9f:39:7f:8a:35:4b:82:11:07:11:3b:f7:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Jun 29 07:01:24 2025 GMT
Not After : Jun 30 07:01:24 2025 GMT
Subject: CN=0bcce51933bc2e103a5f70fe74501779899240e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:c7:71:38:50:4c:cd:22:1c:6b:de:3d:8f:
32:d2:57:b4:53:91:8c:45:3f:e4:ec:4d:4e:80:99:
bc:1f:cc:23:08:1e:80:e6:fa:8a:ee:2d:37:fd:6e:
b1:e4:4d:b3:52:dd:40:2b:31:c2:46:64:c7:4b:c7:
51:73:3f:9b:cf:46:37:53:48:e1:c0:b6:f3:46:1f:
47:41:45:c8:6f:36:81:ff:fc:34:67:f4:d3:cf:3f:
17:75:e9:f0:b7:26:3a:c9:b1:58:74:bb:cd:e1:cc:
4a:2c:1a:74:fe:1d:6a:ed:ce:6f:f9:60:67:dd:3b:
98:be:d1:f1:ec:ea:c9:8a:c0:f4:1d:48:65:5e:79:
3d:06:23:c0:20:ad:0c:f3:de:fe:d4:bb:67:a7:a6:
7d:a5:73:38:8b:da:58:59:0e:7a:d2:b4:50:4d:a6:
83:e2:c1:2a:28:4a:09:5b:3d:2b:23:95:63:7a:e5:
30:40:18:f5:82:72:57:e8:8a:9d:ae:62:1a:25:d0:
e9:58:c5:25:b1:58:eb:6f:4b:4f:1c:d5:72:58:18:
a7:e1:3e:79:49:6b:cd:0c:4e:34:fa:2e:fb:30:17:
86:e1:fc:9c:5c:d4:97:e3:0d:13:fe:51:f3:98:20:
c0:b5:8e:3d:b6:6a:52:e7:1e:c2:a0:a3:9a:1f:5d:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:E5:19:33:BC:2E:10:3A:5F:70:FE:74:50:17:79:89:92:40:E6
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:a1:72:e8:cc:9d:7a:2a:e0:78:d6:ca:9e:e6:9c:71:cc:
62:04:de:89:3e:3d:8f:06:f7:67:58:96:bf:0e:3e:bf:d5:44:
e7:cf:86:d1:67:aa:4d:0d:41:5d:d0:ca:dd:c7:85:4f:28:2f:
d5:2a:e0:4e:68:cc:89:6f:e7:08:64:3c:cb:90:30:d9:ca:af:
86:ab:0f:09:c1:14:f4:88:1f:c5:c7:7f:b4:11:fe:65:d0:98:
9d:4d:35:9c:0f:36:89:8a:a6:9c:4e:bc:58:af:9b:e7:96:f2:
94:88:f8:84:92:15:0a:24:3d:68:28:a4:fe:58:f8:2b:30:dc:
3f:39:c9:96:e3:a7:18:5a:d8:79:be:56:21:ad:4c:87:ef:03:
7a:40:ec:ea:76:f7:a2:f7:86:c0:96:b1:35:3a:e6:12:f6:70:
4c:3b:75:e9:4a:77:2e:13:01:cc:86:93:b0:3a:2e:40:68:c6:
02:78:5c:6b:d8:56:e7:2e:7c:41:55:cd:26:10:41:16:07:ba:
0c:d1:36:4d:d2:0d:3e:36:1f:c0:cf:8c:ee:ab:00:c3:89:39:
aa:ed:2b:02:c2:12:1f:bf:38:66:1d:bd:0a:df:a0:cf:e8:ae:
e8:ca:fa:f9:32:e1:7e:16:3e:00:ca:ea:d4:91:d2:50:74:e0:
f3:73:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:56 2025 by rpki-client