Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: iv+lrwy543bf0jUGqMqIcB4jhuJDwz8p6RDEj32V7Xo=
Subject key identifier: B6:2B:0D:F6:A8:69:65:AF:50:53:24:46:5E:06:C1:2D:E2:6A:91:97
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 01987DC0AF87D8B5A064800C5FA2098B567B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 08EA
Signing time: Wed 06 Aug 2025 05:00:36 +0000
Manifest this update: Wed 06 Aug 2025 05:00:36 +0000
Manifest next update: Thu 07 Aug 2025 05:00:36 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: GV1+ovddupnCATIy00O1RNbGWfnCGLqFZqIkZwIVgOk=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:af:87:d8:b5:a0:64:80:0c:5f:a2:09:8b:56:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Aug 6 05:00:36 2025 GMT
Not After : Aug 7 05:00:36 2025 GMT
Subject: CN=b62b0df6a86965af505324465e06c12de26a9197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:ce:db:1f:8a:c6:17:e7:73:de:9d:c3:7b:
f9:99:42:a3:5d:97:46:19:52:66:91:0d:92:b3:2e:
e5:a1:7f:86:4d:7b:5c:a5:f2:76:96:5d:74:20:05:
f7:2a:89:c5:05:7f:84:55:9d:7d:1c:a9:50:76:b4:
29:62:f2:70:a1:78:07:0e:52:e3:09:15:29:93:4e:
92:b4:95:ba:24:01:27:35:d6:7a:6d:e9:79:e9:93:
c0:73:99:eb:19:0c:8f:62:6f:33:ac:6c:7a:50:25:
50:90:36:22:9f:33:86:a1:0f:2a:46:a1:fa:06:82:
af:81:a3:09:e8:c8:3e:b5:cd:8e:a7:e1:66:66:e5:
10:c2:5a:a3:0a:e6:0d:34:89:08:3b:19:7b:72:bc:
d2:32:59:3a:5f:fc:0a:0d:e8:47:a6:9c:79:a3:26:
e5:59:76:b8:3c:a7:c9:6f:27:8a:a1:61:a3:6b:44:
0a:5b:31:84:ed:eb:3f:46:f7:74:d0:e8:51:0b:09:
5c:0c:7b:35:a5:28:2a:59:50:bb:57:5a:98:fd:36:
ab:7e:a4:04:5e:1f:d9:19:2c:ab:4f:27:60:c1:eb:
03:19:dc:b9:f1:80:a4:da:ed:e2:ca:1a:58:82:48:
e6:6a:95:e2:89:07:23:18:d4:d0:e9:c1:54:7c:96:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2B:0D:F6:A8:69:65:AF:50:53:24:46:5E:06:C1:2D:E2:6A:91:97
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:13:c1:89:e3:0d:41:5e:0f:13:18:55:7b:13:5a:00:d6:ea:
23:1f:e8:e6:19:b9:91:06:f8:71:3c:91:49:12:31:b1:22:5d:
be:03:e7:bf:76:9c:38:19:7f:a5:9b:21:56:2d:cb:27:bb:51:
89:e5:62:b6:c6:65:28:ed:5e:cd:fe:a9:84:a9:ba:2a:4b:0e:
1a:00:28:dc:72:4b:de:1e:de:4f:0f:47:b4:8e:76:cd:53:80:
bb:3e:2b:bf:14:77:fb:f0:38:70:ce:83:e1:57:01:9a:ba:fc:
7e:6d:ad:d2:bf:21:07:8f:cb:78:a3:a4:18:e4:94:8b:a6:db:
d4:fb:03:5d:92:71:65:4d:69:e4:6b:8e:b8:33:3e:49:8a:66:
4a:ce:a5:99:51:70:65:d0:08:86:b1:47:fc:b3:2a:cd:21:0c:
ec:83:35:3e:05:11:eb:82:7d:a9:50:d2:3c:d5:b3:a5:a1:c0:
96:f9:1b:af:0a:d9:26:74:29:59:85:fd:4c:22:3f:e1:74:68:
88:8c:26:2b:bd:eb:a1:18:e1:18:7c:f2:22:cc:4e:d0:5f:5d:
4a:33:8a:14:38:7f:f0:a0:eb:de:18:c1:58:aa:1c:f8:ce:4a:
75:46:0f:9f:9b:e0:24:aa:3c:85:c2:61:e1:0a:c2:20:ff:ab:
ce:5e:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:14 2025 by rpki-client