Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: s5ehskU1AcUiQXGGV5WnelIWND73YeGOOvgTEvxcV8s=
Subject key identifier: A9:EB:E6:8E:60:81:58:30:0A:71:3F:A2:00:C2:17:F1:F0:1E:F7:EB
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 019769CE87DD8B1425270E8462F1812FC67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 02FF
Signing time: Fri 13 Jun 2025 15:00:32 +0000
Manifest this update: Fri 13 Jun 2025 15:00:32 +0000
Manifest next update: Sat 14 Jun 2025 15:00:32 +0000
Files and hashes: 1: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: HX02JCPBtHxk6dl5MofSkATvKhcD02qNeB3deEGpDF0=)
2: x2Xaez7Ra9vjvF4FG3Er4hO4ovk.roa (hash: T67Ch/iuLueDDibfJIFSKnLQW9UiEIt+71JVmL/jUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:87:dd:8b:14:25:27:0e:84:62:f1:81:2f:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Jun 13 15:00:32 2025 GMT
Not After : Jun 14 15:00:32 2025 GMT
Subject: CN=a9ebe68e608158300a713fa200c217f1f01ef7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:77:88:03:24:8c:8a:c7:50:4a:5c:c2:cc:
df:e1:c4:e3:24:ea:33:c2:5e:53:86:1b:43:ce:45:
a7:73:30:18:ae:e6:37:4d:17:0c:c3:b5:67:1f:99:
5c:cf:a8:c4:4c:0c:73:ea:c1:56:31:c6:37:8c:87:
2f:dc:94:e4:dc:5d:cf:1b:78:bb:45:60:7c:af:b0:
15:ce:f6:88:ce:d3:08:98:af:4d:cb:32:0c:45:ce:
ed:c5:54:a9:9e:c0:ec:fc:8a:e6:8a:aa:4a:5d:94:
08:f1:ac:6a:b9:d1:54:63:dd:e4:e2:42:c8:35:c7:
bf:1a:a3:63:53:f7:c3:c7:01:db:47:f8:f2:5f:c4:
1f:1a:16:58:d0:8d:29:67:8e:f0:bc:3f:4b:a7:b9:
a1:fa:a3:94:86:f1:d8:c3:ae:aa:88:73:d2:48:2a:
cd:96:7f:5b:63:89:07:60:1a:3c:c4:76:60:54:81:
cb:ef:31:ce:cb:dd:5b:e7:de:b7:e7:04:75:77:fb:
f2:8f:15:87:a0:7a:0c:b3:af:e9:16:d6:d1:c8:a9:
71:74:66:f0:39:b2:76:b2:b0:29:30:e2:c9:56:cb:
14:f8:4b:91:8d:c3:41:74:cf:0f:43:1c:d2:0c:d1:
bf:49:74:f7:c0:17:0e:ed:63:15:c5:11:5c:37:1d:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:E6:8E:60:81:58:30:0A:71:3F:A2:00:C2:17:F1:F0:1E:F7:EB
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:61:63:12:90:26:18:47:04:e9:f5:39:b3:a7:87:5c:bf:
59:65:bd:2e:56:d4:45:e1:3a:e2:2d:61:c6:bf:92:88:25:9b:
dd:f3:74:67:e3:fc:aa:ce:c6:5e:5a:34:65:d1:46:cb:80:5d:
ff:55:3a:58:62:4d:d2:61:fd:8d:57:a5:81:0a:48:91:f3:14:
be:fc:ea:1d:04:22:24:bd:c0:fc:4e:7c:b2:5a:97:65:45:ed:
6b:2e:42:37:8f:d2:5d:8f:08:24:52:aa:3c:a4:01:e8:16:4d:
ae:ac:8d:57:cd:ca:54:2c:ed:61:16:d3:99:42:7c:16:24:d1:
3b:1f:f5:39:4c:f6:46:a8:50:90:43:4b:e3:1f:ee:42:e2:c5:
06:0a:46:9a:b9:dc:cf:25:8b:6c:be:fd:34:e6:5f:20:ee:3a:
72:71:c0:97:7e:47:bb:ca:b8:ef:2b:1d:ba:1c:5a:53:88:61:
e7:2d:b0:e2:4d:92:82:f0:ee:12:f7:48:5f:99:75:f1:78:98:
18:35:5c:11:86:09:9e:45:ca:0f:4c:e0:cc:a9:f6:f5:bc:23:
11:50:93:ae:7e:3a:b9:15:11:1e:52:2c:4b:b2:51:9b:65:1e:
43:a4:5e:b0:7b:05:0f:90:27:ad:5d:2e:12:58:4b:3a:73:eb:
7a:bd:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:54 2025 by rpki-client