Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: YaWuIgv3m21v073g48+fUvuPklpnDqL8ZZSN8i/QYZo=
Subject key identifier: F5:A1:9B:A1:F8:C5:E2:B8:91:18:92:01:13:0E:DE:A4:E5:05:A3:81
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 0197692A091E63A16C68835AA4F7EAEE9A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 031C
Signing time: Fri 13 Jun 2025 12:00:51 +0000
Manifest this update: Fri 13 Jun 2025 12:00:51 +0000
Manifest next update: Sat 14 Jun 2025 12:00:51 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: okZNhpY/w4o7aw4K5VWm0ogoWhRIVzEmaZpp6bPWEOA=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:09:1e:63:a1:6c:68:83:5a:a4:f7:ea:ee:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jun 13 12:00:51 2025 GMT
Not After : Jun 14 12:00:51 2025 GMT
Subject: CN=f5a19ba1f8c5e2b891189201130edea4e505a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:34:60:ce:53:2d:a2:6f:b2:52:1c:3e:ee:
73:99:6d:f4:54:d2:77:94:e1:47:5d:48:e2:13:41:
0d:d5:c9:e2:35:c6:44:2c:ed:e9:c2:6b:0e:8c:4b:
34:ce:53:4b:88:85:a3:69:26:fe:37:ae:e9:34:61:
34:aa:a2:b1:55:0a:68:d5:31:78:61:e5:ba:82:07:
c0:66:5f:90:8c:7a:b1:b0:cb:87:dc:f9:e4:71:07:
7f:c6:ff:ce:22:1c:ea:34:15:13:17:7f:11:40:ef:
ee:8a:00:a0:ae:07:fb:e2:39:28:8b:36:e4:97:21:
fa:95:94:b4:4a:ad:d0:85:04:02:c6:90:8a:dc:5e:
ab:a2:d9:24:49:36:7d:97:0b:a3:b9:ae:1b:ee:fb:
42:06:ef:c8:5f:bb:2e:dc:c3:d6:b8:01:93:2c:1a:
9a:a0:05:7c:ef:ee:2f:b0:4f:fc:f5:ba:f5:5f:ad:
39:24:aa:4e:9b:45:83:48:29:ff:34:11:bd:c8:cb:
3c:ca:4d:87:2e:cb:7f:93:71:8a:0d:7b:44:e9:2b:
5f:5c:71:04:0d:ea:57:0a:91:e6:61:f0:39:ec:d4:
fa:83:c3:b4:04:47:b7:cf:56:eb:24:30:2e:58:0d:
3f:e8:b0:7a:79:67:7c:f0:9e:99:fb:22:34:cc:03:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:9B:A1:F8:C5:E2:B8:91:18:92:01:13:0E:DE:A4:E5:05:A3:81
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:c0:c8:e4:dd:59:d1:da:d0:c5:4f:56:b5:d4:76:7a:89:
a4:cf:8f:eb:c9:7f:35:c5:25:d4:ef:92:60:9a:ef:0a:0d:02:
ae:47:61:d2:b9:b4:57:40:ae:19:00:15:37:82:26:1c:33:5c:
c1:d5:12:7a:b3:40:0e:a0:00:4f:5a:29:f9:f0:68:f6:3c:6f:
df:67:9b:5a:25:1b:61:a3:36:35:d9:4b:29:ce:80:b6:17:a6:
40:c6:eb:70:7e:e7:fe:16:d4:ee:7e:11:5c:e9:bc:2a:05:cd:
93:17:04:28:c4:c8:ea:ba:1d:ba:4d:da:41:fe:52:2d:46:c4:
2e:c3:15:0a:9d:e0:9f:a2:6f:ff:72:71:28:71:05:73:08:85:
7d:e5:1a:2d:8f:ae:c0:e9:cf:d2:ca:88:f8:4c:fd:b1:94:b5:
af:64:f2:de:16:0b:c5:ba:1f:3b:a8:4f:3c:a0:8f:ef:47:98:
8d:cb:ef:91:a4:5c:c1:b6:12:b4:9b:74:b8:c8:77:ce:4e:cf:
5f:62:5c:70:ff:a4:58:84:ca:de:64:06:60:b1:da:33:69:44:
98:81:72:66:e7:bc:70:86:66:b9:89:fc:a1:34:0f:cc:9a:1f:
68:f1:ed:e4:41:74:40:e6:ab:7a:7e:b9:15:8d:de:79:4b:09:
d4:7a:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:36 2025 by rpki-client