Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier: gWzqWiiOR6fQL7MtFVf5p+ZOr/qpeGnGzva24+TWKC0=
Subject key identifier: 96:A8:98:D9:18:0A:BD:E1:AA:3D:EB:90:B4:52:68:53:70:12:6A:F7
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 019787A2034E8C6F0885E9EF7FEAFA3E7966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 10:00:31 +0000
Manifest this update: Thu 19 Jun 2025 10:00:31 +0000
Manifest next update: Fri 20 Jun 2025 10:00:31 +0000
Files and hashes: 1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=)
2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: I0RzzOJjHkpJczbphCQFy9GlKNk2FWuOPOewZwX88tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:03:4e:8c:6f:08:85:e9:ef:7f:ea:fa:3e:79:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: Jun 19 10:00:31 2025 GMT
Not After : Jun 20 10:00:31 2025 GMT
Subject: CN=96a898d9180abde1aa3deb90b452685370126af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:16:e8:f9:e2:51:9a:05:1c:1a:04:4e:ec:
48:75:4e:eb:37:fb:a2:51:3c:d5:fa:8c:d4:81:38:
8b:25:2d:e9:fc:e7:45:ad:b0:76:08:dc:96:57:b3:
89:fe:e0:c3:0b:20:d3:bf:46:f3:3c:fe:77:ec:89:
40:1c:4a:78:c2:ab:8a:a8:90:30:ae:08:9b:f7:8a:
51:5a:bb:c7:7b:f1:cc:20:cf:4b:1d:ca:7a:ff:ad:
0f:6d:41:d5:4c:6b:c1:ab:66:0b:d6:d7:58:69:16:
e5:09:45:a3:95:16:0e:d0:da:16:a9:81:2f:d5:fe:
ee:53:91:e7:40:19:42:c6:a4:64:c4:be:33:ef:e6:
5b:e6:71:d7:9d:77:1c:a4:a6:6d:1d:97:89:f5:57:
d3:1b:d4:ec:94:c2:09:ef:41:fc:0e:45:76:46:32:
cb:bc:7c:70:81:04:07:33:04:95:67:46:ff:a8:f8:
10:dd:22:4a:67:1e:fe:f3:e4:b2:ab:f3:eb:bb:6c:
fc:01:bc:07:0b:82:c9:c9:7f:9d:d4:73:78:48:08:
df:9d:84:2c:a1:82:04:61:39:b3:ac:0a:c5:0e:a0:
14:b0:89:01:3d:32:96:90:09:e3:cf:2f:52:82:5e:
89:7e:f1:c3:cc:5a:11:dd:f8:83:4f:71:2d:75:66:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:98:D9:18:0A:BD:E1:AA:3D:EB:90:B4:52:68:53:70:12:6A:F7
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:18:f4:6a:15:bd:5c:6c:54:d0:71:12:bc:bf:f0:b1:50:
aa:bb:ee:e6:46:51:33:df:17:f7:54:26:a2:81:37:8a:24:46:
4c:e2:24:c6:dd:f0:f4:b0:3b:1f:99:4d:21:f9:56:86:9d:d9:
59:5b:a1:9a:3c:86:45:18:53:97:a1:2d:19:c4:ab:56:a5:d6:
1e:db:bf:5f:aa:91:61:18:3e:c1:e1:bc:30:a7:3b:9c:dc:e1:
d6:7b:dd:75:c5:f3:89:5f:8a:e7:d0:32:46:dd:4c:a1:cb:62:
01:e9:8e:bf:d0:28:c7:2a:27:84:60:58:69:ad:14:dc:bb:9f:
c6:59:3d:ca:f0:66:78:6f:9f:91:c8:1e:55:31:63:b3:45:fc:
6b:af:e2:e0:28:b6:e3:0a:5a:e6:c6:7f:bb:00:7f:6c:ef:c5:
87:15:ac:36:8a:47:63:d2:5f:0c:d5:27:bb:17:f1:fe:2a:56:
9b:e4:61:1e:95:87:52:e5:45:8f:2f:84:96:40:b2:53:41:de:
b0:49:40:20:c4:24:7c:b9:be:8c:e5:c6:53:85:e0:42:90:9f:
ba:04:02:24:13:8b:6a:fe:1f:5a:c2:a8:9f:52:6d:67:25:c1:
4a:66:79:a3:f5:7e:02:be:a4:da:66:d9:16:82:fe:46:17:02:
85:8b:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:57:15 2025 by rpki-client