Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: lpErb2X5Avfvb3VJLVljtII1DJRAzxe+UyYlXgO2vr8=
Subject key identifier: 07:88:36:C7:D6:29:E3:C6:FD:47:BD:30:FE:1A:9C:F6:4A:BC:52:1C
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019889209CE206EC61E138726D6C8B105CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 06E8
Signing time: Fri 08 Aug 2025 10:01:12 +0000
Manifest this update: Fri 08 Aug 2025 10:01:12 +0000
Manifest next update: Sat 09 Aug 2025 10:01:12 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: yoXR6xtFFt+sEMU0g+4QSQo78Z62vAdJQUUTX7Ahk1w=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:9c:e2:06:ec:61:e1:38:72:6d:6c:8b:10:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Aug 8 10:01:12 2025 GMT
Not After : Aug 9 10:01:12 2025 GMT
Subject: CN=078836c7d629e3c6fd47bd30fe1a9cf64abc521c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:9b:5b:3a:27:89:6a:c4:ed:1c:f7:02:0a:
01:f7:8b:e2:47:3e:b3:43:f9:4a:3d:59:83:a9:e4:
b0:e3:75:76:36:78:c5:ae:44:a8:be:c4:50:a9:31:
8c:95:f3:8c:33:71:9a:ee:90:80:bc:20:47:8d:1a:
62:8b:de:8c:3a:e7:b1:77:8e:de:c4:44:31:f5:18:
ef:0f:0e:9c:66:d4:66:7c:e1:c7:cc:ba:2d:34:5c:
eb:b2:8a:0a:69:a8:2d:cc:8a:ee:2d:cd:f7:f1:75:
90:75:10:a8:f5:a5:45:80:9c:2c:28:a2:0c:c4:fd:
c7:44:76:ba:88:e8:88:ac:26:67:ce:b8:8d:7b:ab:
09:e2:dc:b0:ac:29:7c:bf:aa:ea:fc:a0:3f:52:71:
f5:69:80:51:38:f0:11:4d:70:d9:fb:ae:c1:4f:49:
20:8b:aa:0d:24:dc:94:9d:77:7b:3a:d0:51:f6:c2:
6c:5a:7a:44:c2:40:b3:fa:4f:83:7e:d6:2c:4b:68:
24:52:cc:1c:d8:ed:f3:6a:14:62:06:91:20:7d:33:
ae:dd:e5:80:21:be:76:ec:d6:06:22:cf:aa:45:97:
0c:18:b6:21:de:70:ed:5d:2e:4f:1c:d8:70:bf:b5:
4f:94:cf:31:2a:0a:2d:21:e3:e7:53:20:30:4b:bb:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:36:C7:D6:29:E3:C6:FD:47:BD:30:FE:1A:9C:F6:4A:BC:52:1C
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:47:4e:3c:16:62:82:55:b3:7e:1e:49:59:8a:3f:b1:fa:
bf:65:14:ac:18:46:5d:97:58:8d:3d:06:5e:26:c1:0e:3a:4b:
52:9e:e4:44:ab:37:62:8c:16:ee:7a:1e:d7:60:bd:26:db:9d:
e8:ed:ca:d8:2f:34:5f:8e:d3:3b:2a:9b:7b:07:81:12:bf:4c:
61:6c:b2:be:20:c8:d2:de:cc:f8:d3:a0:61:77:76:3f:eb:e9:
57:b9:9c:da:23:a6:0b:31:bb:23:d8:8a:e3:34:75:1e:52:e3:
52:86:9c:85:46:57:b8:5c:cf:71:28:d7:25:c5:3b:ae:47:ad:
d0:2b:e0:16:30:c6:c3:49:25:27:6b:06:2f:aa:eb:b3:d3:34:
f1:70:3b:b6:76:d3:a5:7c:27:26:f3:11:ee:82:97:e6:6b:aa:
46:d6:b5:33:90:48:60:e9:6a:99:97:5c:26:45:35:38:66:a4:
b8:ce:eb:aa:26:5e:fb:fe:83:77:03:94:85:28:48:b3:81:8f:
e5:88:1c:0f:f6:c0:0c:88:8b:49:88:cf:f1:24:85:e1:9f:4c:
72:72:58:d3:62:d0:a8:1b:4c:40:51:3e:ea:f9:23:36:7c:db:
e3:71:48:68:05:0f:7c:4c:1a:03:44:45:34:d3:6b:fb:84:5d:
23:fe:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:20 2025 by rpki-client