Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: 0Ns0j2JqerLFySnnUemqCtxjGONlC6QfavZ0iCHqj30=
Subject key identifier: FB:67:6B:EA:82:31:DD:DC:D3:C2:C1:FD:01:4E:F0:6B:99:D0:BC:C7
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01976BBD091152C96BAEE74E4BEF5A88A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0901
Signing time: Sat 14 Jun 2025 00:00:40 +0000
Manifest this update: Sat 14 Jun 2025 00:00:40 +0000
Manifest next update: Sun 15 Jun 2025 00:00:40 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: r3JiJy1avppDyyN+c5nCB3MCyzU4ekDBrnaOaZKxPjc=)
2: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:09:11:52:c9:6b:ae:e7:4e:4b:ef:5a:88:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jun 14 00:00:40 2025 GMT
Not After : Jun 15 00:00:40 2025 GMT
Subject: CN=fb676bea8231dddcd3c2c1fd014ef06b99d0bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:7a:09:00:fa:9a:0a:fc:e4:27:9c:30:63:
b5:e2:00:0e:e9:9f:83:72:ad:0d:30:63:b0:ce:1b:
e8:c3:0f:28:c0:da:ea:fc:4c:d4:92:5b:6b:ea:80:
22:a1:50:66:b4:33:1c:d6:cd:91:a9:4b:81:b9:c7:
e9:e3:16:62:2f:8f:72:c3:b8:29:25:ed:02:0f:6f:
7f:ea:a2:89:89:38:74:33:2a:b5:34:03:91:f8:67:
82:f2:dd:6a:67:b9:f8:a5:06:4d:a6:99:b3:8c:14:
39:ad:1e:33:fe:39:b9:fc:a2:1b:d1:07:8d:14:2e:
21:92:2e:83:fc:3a:a6:87:3b:4e:0d:d6:5a:28:59:
b6:6f:59:cc:2e:59:26:47:5d:96:dd:da:b6:db:10:
0f:06:95:db:ff:85:a5:8c:dc:79:51:c3:12:b2:64:
bf:a0:28:98:c3:15:5a:fd:7e:4c:4d:ac:06:c6:0f:
c9:1b:8a:90:83:fc:b9:eb:49:fb:05:72:b7:64:08:
0a:9e:16:32:ed:7d:c3:4b:aa:36:57:fe:44:80:17:
ae:31:e0:5f:8e:cc:d9:8e:73:6f:89:a4:36:38:c6:
7e:8f:f9:bf:8b:fb:9e:5c:4e:c6:99:8a:9e:b4:91:
35:bb:b0:96:c0:75:40:49:3d:e2:a6:65:4e:bc:8c:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:6B:EA:82:31:DD:DC:D3:C2:C1:FD:01:4E:F0:6B:99:D0:BC:C7
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:f8:d9:b0:c0:e9:fb:75:b7:4d:78:c2:14:d9:cc:e4:6b:
e4:6c:dd:d5:0d:38:b7:38:0d:56:db:27:c7:d7:06:68:9b:c8:
0e:8e:0c:14:22:24:b5:eb:82:8a:6d:f0:4d:8f:a3:18:82:53:
d5:e2:b7:21:d6:89:1c:96:be:52:8c:5b:4c:f6:c3:f8:04:9d:
7d:24:ce:79:92:13:e7:4f:84:b0:9f:77:73:77:0d:5d:6d:2e:
e5:74:62:f4:2c:43:76:5e:59:15:ca:40:9a:d5:38:cf:9c:d6:
ea:9b:95:d4:27:c4:3d:b3:99:f5:6a:5e:29:5d:8d:2b:87:f5:
a7:c0:58:73:c2:ef:e6:e6:90:03:22:18:b3:ee:06:c5:59:36:
ce:95:95:64:1f:ac:cf:f3:c4:37:d4:e6:8f:8d:34:3a:d6:4a:
90:15:f7:ab:94:c9:98:a7:c8:9f:d3:bc:e9:b0:69:3e:9f:89:
51:26:9b:21:74:b1:2c:2a:e3:00:bf:a2:11:5c:4f:08:6f:4c:
58:23:cb:bf:21:7c:53:2e:d4:85:87:37:94:bf:4b:07:73:58:
b8:06:19:c3:e1:30:42:b6:ca:b1:36:26:60:46:9d:96:ca:c3:
f9:b0:19:12:d7:d6:41:76:f3:b0:8b:b6:17:55:80:0e:65:ca:
73:ee:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:58 2025 by rpki-client