Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: PFWJvJSWcuaG2ju/bJexBKKqA9Qi0eApJspuIANus18=
Subject key identifier: 76:DD:02:C7:6E:4E:25:41:AA:3C:F5:18:73:04:C6:F1:52:2C:1F:A2
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01976D067C5EBFBD20C478813213435A8E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0C28
Signing time: Sat 14 Jun 2025 06:00:30 +0000
Manifest this update: Sat 14 Jun 2025 06:00:30 +0000
Manifest next update: Sun 15 Jun 2025 06:00:30 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: AC2VZlD/49TmrG8fN2QhQt8KIuDbRWxwPrkQfKy7sRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7c:5e:bf:bd:20:c4:78:81:32:13:43:5a:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jun 14 06:00:30 2025 GMT
Not After : Jun 15 06:00:30 2025 GMT
Subject: CN=76dd02c76e4e2541aa3cf5187304c6f1522c1fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:47:b4:65:1f:d4:79:0b:bb:e3:6b:f6:c7:
d6:67:fb:17:10:7a:e4:15:ef:52:aa:18:db:41:28:
3a:ce:92:58:54:95:6c:3c:db:72:f2:0e:d6:0e:90:
a1:8a:00:9d:cb:9d:f6:8b:4c:04:31:57:3c:bf:b9:
24:a5:5b:89:71:33:1b:5f:15:7e:42:1b:18:d2:9f:
20:af:f3:ea:65:fe:8c:65:13:b1:bf:ad:4a:a1:fd:
f6:6c:d8:d7:25:62:5d:5d:ba:51:23:8f:36:fb:97:
7e:31:e9:c9:24:d1:2f:f7:68:3e:ff:2b:ed:1b:5e:
9a:a8:4f:ee:71:a8:52:33:a5:40:be:ae:f2:5e:56:
6e:e3:11:f8:a0:03:bc:bb:1a:01:e9:95:db:a9:2a:
fb:af:df:e3:ad:49:01:06:88:4f:51:79:39:4e:65:
99:ac:26:16:e8:8d:2b:93:5d:89:c4:eb:2c:76:10:
31:83:9a:4f:77:14:92:79:c4:13:a2:da:ed:9a:35:
2e:02:ae:18:14:c0:e7:d5:97:b5:55:33:79:44:30:
b1:39:87:c7:d9:6b:91:32:82:fa:9f:70:88:bd:df:
dc:91:4f:5e:c6:b6:cd:49:7e:00:23:16:f5:af:85:
0a:c7:89:85:55:75:12:fb:32:6d:f6:38:99:1f:fb:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DD:02:C7:6E:4E:25:41:AA:3C:F5:18:73:04:C6:F1:52:2C:1F:A2
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:5e:55:a6:45:69:5d:a5:a3:97:33:be:11:1d:32:72:b2:
92:e4:35:e7:f8:21:de:be:cc:d9:be:a7:b8:0b:05:a0:88:5a:
dd:1b:2d:2c:d9:d2:cc:17:29:3c:2e:35:b1:e3:47:95:d8:72:
ac:dd:2c:d3:4a:87:65:57:fa:cb:a2:6c:ac:8e:a5:f9:fe:15:
e8:78:14:13:61:1a:4e:e1:d5:86:f6:cb:eb:f4:e3:c0:48:9c:
98:1d:46:ac:89:91:8b:d7:96:c1:29:d0:b4:c9:9b:d5:22:24:
28:c0:e1:dd:b7:45:db:cf:d0:83:93:60:60:41:fd:b5:07:85:
58:c3:df:ec:1a:a3:99:5f:67:d6:5e:c2:f6:22:bb:3b:e2:d8:
ca:d9:57:85:04:02:1d:23:3b:7f:09:69:3a:58:d8:ea:2d:d9:
bb:a6:6c:6e:72:26:3b:55:f8:9f:0d:c9:cc:7a:87:b8:0d:6a:
9d:48:cc:ed:21:cd:f2:73:96:d7:7f:9c:45:8a:4d:97:b0:f5:
47:e4:5f:10:c1:d5:61:cb:e5:17:c4:8a:1e:5f:99:a1:09:4e:
c2:0c:a3:7a:21:04:77:c6:85:6a:1c:3a:0f:87:59:d0:7a:e6:
13:a7:0f:39:b9:54:51:a7:92:8d:ca:41:b3:42:66:14:6a:0a:
03:d0:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:32:06 2025 by rpki-client