Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: ONCUxJnhfqKgFClF/N+0MxIdid++XHYyDUsFzETpIow=
Subject key identifier: 7D:BD:7B:F2:F7:6A:E6:35:86:51:9D:90:46:70:B3:3C:EF:77:5F:84
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019897128189F0269B74191374B506BA6AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 03:00:28 +0000
Manifest this update: Mon 11 Aug 2025 03:00:28 +0000
Manifest next update: Tue 12 Aug 2025 03:00:28 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: P6QqzTWTnmlZyjZKWwqBhsXkseFCXkL8O4pBr7Zcwhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:81:89:f0:26:9b:74:19:13:74:b5:06:ba:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Aug 11 03:00:28 2025 GMT
Not After : Aug 12 03:00:28 2025 GMT
Subject: CN=7dbd7bf2f76ae63586519d904670b33cef775f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:05:7c:8c:e6:d5:d4:67:cc:e6:f2:2c:57:
60:38:8b:4b:ca:aa:e4:94:bd:18:6b:49:20:9e:e9:
ab:03:ba:f9:29:59:16:de:70:96:00:f6:ee:81:ec:
f8:78:06:c3:ee:60:0a:e8:c8:bf:81:3a:6f:31:97:
e4:3a:b2:eb:e8:b3:44:56:39:21:4b:72:66:53:77:
14:45:c2:d2:3c:96:74:6f:dc:26:25:d8:00:7b:ad:
fb:bd:36:0d:cb:fe:fe:8f:30:23:2b:f7:d4:41:19:
8b:7a:55:d1:a8:f4:1a:f8:3e:56:77:93:8a:51:ca:
3c:03:f7:6b:ac:2b:60:b6:2d:48:75:3e:2f:1c:fa:
b1:1a:db:37:69:92:08:63:6f:b7:78:f2:03:05:ca:
f6:7c:9e:0d:54:93:ac:16:0b:e8:89:4d:7b:2b:02:
63:12:38:72:fb:c8:99:ad:40:f8:e5:0f:1c:73:40:
7e:45:b0:4c:0e:1d:14:6a:0a:ed:bb:a6:a3:27:01:
1e:9e:fa:c2:45:42:44:dc:42:68:8e:55:74:b2:21:
b9:1a:06:3d:ea:f0:38:2f:d1:33:51:a2:e9:64:59:
ef:51:09:47:43:a2:89:09:e6:a3:1c:45:42:76:50:
b6:e9:8f:ea:2d:86:41:2d:08:e2:a3:9a:56:28:e6:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:7B:F2:F7:6A:E6:35:86:51:9D:90:46:70:B3:3C:EF:77:5F:84
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:08:a5:63:e3:c3:cd:40:64:bf:79:e5:ec:a6:b7:9c:0f:
c0:c8:e3:71:38:5a:7d:0f:e8:2f:e1:2d:68:c2:ef:4e:70:5f:
d1:2f:04:f7:e4:16:2e:e6:a9:33:30:b8:84:9f:d4:e2:6c:fe:
12:91:6d:1a:89:db:9a:96:e1:3e:ac:f7:c4:fd:79:9b:24:32:
31:51:05:16:89:45:82:83:93:ae:46:4f:9d:9f:ef:eb:30:9b:
6c:e9:39:c2:f3:d1:29:51:5f:87:cc:11:05:cf:0c:e9:2a:0a:
81:06:62:49:23:dc:cf:7c:dc:00:34:fe:29:39:b8:e2:e5:d5:
37:04:c9:bc:e5:f4:0b:03:4c:a1:a6:e4:11:38:c4:3f:3e:fb:
81:fa:22:05:5b:41:20:5a:7c:c6:f3:e9:97:af:d5:8a:6c:bd:
29:38:63:0b:f2:19:2e:20:e3:7f:1e:c4:73:af:95:dc:be:78:
a3:a2:3e:27:65:7c:5a:2d:d5:65:e7:8d:0d:4a:98:1a:e6:3a:
7e:64:85:7a:7c:71:d5:f2:7f:4a:a2:31:dd:c3:1e:4f:5c:f0:
c5:a7:d9:bc:e0:87:67:91:4e:61:28:16:f3:10:b3:8e:10:3f:
91:c0:8d:ba:67:71:73:4b:97:ea:98:cf:b7:68:36:be:18:f0:
c7:14:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:46 2025 by rpki-client