Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: MuxOL4DzZC3orPg/pkDJJjJxhXk4rd12PZlPULX9at8=
Subject key identifier: D9:7C:47:F5:A9:70:92:23:F4:A0:62:8A:47:7E:CC:78:A9:54:3A:66
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 0197CD5F0E5AAE4562EFDDDA0256EB47852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 14B1
Signing time: Wed 02 Jul 2025 23:00:48 +0000
Manifest this update: Wed 02 Jul 2025 23:00:48 +0000
Manifest next update: Thu 03 Jul 2025 23:00:48 +0000
Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: KFntizUphGf7npTSHrGQ+aPwqSQMW5e0Spm/29bj5CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:0e:5a:ae:45:62:ef:dd:da:02:56:eb:47:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Jul 2 23:00:48 2025 GMT
Not After : Jul 3 23:00:48 2025 GMT
Subject: CN=d97c47f5a9709223f4a0628a477ecc78a9543a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:cf:5f:55:bd:47:bc:0e:01:c6:92:79:45:
b0:1d:bf:4d:4a:a6:8d:93:0e:11:02:8f:f3:f4:1d:
04:bd:d8:b9:01:7d:5f:fb:27:07:ee:0e:fc:c5:b1:
b3:84:0e:14:28:f7:0a:ba:a8:f0:34:77:f1:32:4a:
81:a8:7e:a5:cc:dd:5c:c2:ef:59:ff:09:e2:da:01:
2c:31:c3:04:34:5f:49:29:7b:f9:c2:51:a1:f5:a7:
d8:6f:99:4d:28:d9:e8:34:4e:e7:26:e3:de:c6:50:
d8:90:69:48:d0:9a:9b:68:38:b3:41:07:f3:f9:f5:
e8:ae:f0:46:46:a2:71:79:95:57:c0:14:7b:ca:5b:
64:0a:61:e4:c2:80:5a:c9:f3:01:04:77:fb:f8:1f:
4f:77:4d:61:fa:21:b0:be:74:12:83:c3:b9:33:46:
f4:0c:17:27:2b:25:4d:e0:f6:fe:ca:62:82:e5:d1:
a6:54:99:ab:cc:e8:35:3c:67:5e:a6:6d:88:b7:94:
93:c7:a6:74:91:78:93:bd:86:cb:d7:72:59:f1:9d:
5c:7d:49:8b:e2:1a:11:40:b0:42:dc:48:6d:f3:3d:
95:78:3e:0f:80:ae:77:79:06:97:0e:91:e9:ca:bc:
de:98:aa:ce:0e:e8:20:09:45:96:da:50:a3:ea:4e:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:47:F5:A9:70:92:23:F4:A0:62:8A:47:7E:CC:78:A9:54:3A:66
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:60:be:9d:60:24:c1:a4:35:3c:81:2b:a1:4e:60:6c:ed:fc:
91:6a:97:4c:bc:7a:e9:4b:33:fa:c7:0e:fe:bb:48:2a:66:d7:
d4:fc:ad:e5:2e:48:2d:24:62:8b:e1:d0:fc:27:c4:3b:14:f6:
c8:1f:03:7b:b8:28:2e:74:a5:ef:89:d1:3c:0c:b7:82:28:f9:
52:a7:63:0a:fa:49:0d:0a:7a:23:ad:8a:d1:c7:47:e8:c6:0d:
d0:d4:e7:76:16:68:4b:c3:aa:d1:e9:f4:6a:34:92:fe:6a:81:
37:e2:e2:0d:0c:54:78:92:45:13:c2:c1:78:44:58:f3:87:3f:
eb:bd:f8:26:00:0b:46:08:6c:d1:d8:35:17:f7:47:f9:53:7f:
dd:c4:42:2b:ac:19:8f:ce:0d:f1:a1:c6:35:d2:ec:dd:bb:a5:
69:54:e5:1c:d8:52:5a:34:14:48:d8:89:65:84:17:b6:13:7b:
48:41:70:cc:b4:f7:15:0e:a5:d8:94:c8:23:2d:9a:c9:3d:66:
6d:e0:c0:53:85:53:13:0f:7c:d7:f8:f2:e4:11:9d:3a:5e:18:
43:28:60:37:9a:d1:d7:d4:95:45:e0:d5:ac:aa:bd:c0:09:f5:
4c:4f:e3:2a:8c:ad:40:48:ea:53:ed:31:7b:06:85:3d:0a:a5:
0a:06:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:04:33 2025 by rpki-client