Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: /Co6+dFYewPr42KDGoQSDB0I8STCIGJwEusqg8UnqQ8=
Subject key identifier: C4:4C:32:FC:9B:15:C2:9D:67:14:3E:3E:96:F0:03:C2:A6:AB:D5:A6
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01976C61F9C33A68969DFB4AAC0EE11AEA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:00:49 +0000
Manifest this update: Sat 14 Jun 2025 03:00:49 +0000
Manifest next update: Sun 15 Jun 2025 03:00:49 +0000
Files and hashes: 1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: l0YnazMUUxTFSFwZ3aJAIbS1646q1y9s/bFFucFJcdg=)
4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f9:c3:3a:68:96:9d:fb:4a:ac:0e:e1:1a:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jun 14 03:00:49 2025 GMT
Not After : Jun 15 03:00:49 2025 GMT
Subject: CN=c44c32fc9b15c29d67143e3e96f003c2a6abd5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:f1:e9:40:4b:79:3e:80:2a:91:77:32:7a:
4e:d1:e8:07:77:25:15:af:1a:b1:69:f9:e1:c0:21:
d2:dd:09:3c:76:73:4f:c2:8c:97:72:8b:e4:3e:67:
75:1d:47:d4:9e:a2:8c:33:94:7b:d3:c4:be:0f:47:
f4:cb:c2:93:91:36:19:1e:35:e5:3e:c0:02:d7:03:
23:18:83:c4:b6:de:91:8a:b7:c0:10:4d:01:9b:06:
3a:bc:a2:45:a9:f3:2d:12:c3:f3:63:ba:b8:ff:2b:
9e:2d:2c:df:44:2a:5d:75:d6:61:e2:20:28:36:16:
d8:46:07:9c:39:94:f7:66:ff:77:33:e5:a4:2c:17:
a1:64:92:d2:2e:4f:5b:a7:bd:f4:c6:c0:e4:17:23:
83:85:30:bb:1f:80:d0:6e:12:98:c0:65:2a:25:24:
27:38:fa:75:e9:7c:7c:ae:5f:98:82:ed:71:fe:fe:
e1:c4:6e:ec:ee:f5:6f:c4:61:c4:c4:18:a2:59:33:
57:b4:b7:ec:be:1c:6b:09:34:ba:0c:61:12:ea:49:
58:b5:12:a8:79:85:17:99:be:23:e8:3d:35:16:5c:
5a:7d:92:61:bd:a0:7a:eb:52:24:5a:91:46:fd:3f:
0e:0b:33:de:3a:47:e5:c1:7f:ad:a9:9f:ba:fe:a5:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:32:FC:9B:15:C2:9D:67:14:3E:3E:96:F0:03:C2:A6:AB:D5:A6
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e4:e1:ed:b9:6e:8d:6d:4c:c3:f9:fe:81:22:64:34:6e:26:
aa:e3:a4:bd:07:20:be:49:17:ac:ad:89:5e:6a:b2:13:ff:cc:
64:f0:89:d4:ba:6e:35:73:0a:f9:a6:ad:da:e7:48:a2:88:6c:
37:14:2a:d5:d2:20:c9:80:29:bf:fe:19:73:ac:ac:5f:cd:be:
d0:c6:7b:a5:c5:02:5d:f3:00:b1:9f:b1:be:69:c1:b0:82:0f:
95:ef:0b:22:84:b9:55:c8:4c:d8:08:83:60:70:11:a9:bb:bc:
30:1f:60:2c:1f:f9:a3:4b:d3:2a:00:4c:14:15:47:93:cd:58:
22:97:3a:d3:b5:fa:7d:70:ac:7d:af:ca:a2:90:8c:8a:b4:85:
16:7a:2b:8d:64:71:c5:b4:b5:2e:93:60:3c:04:c6:89:88:03:
c0:b8:c0:47:cd:03:a1:b7:94:0a:b3:a9:d6:bd:89:99:a6:44:
c5:c0:0b:ee:46:82:c3:87:6a:3b:da:0b:99:67:39:2e:a8:53:
d9:2c:d7:90:0c:f1:f7:32:6b:ce:fe:6c:2f:f4:1c:ab:78:50:
7e:67:6c:3d:aa:f5:bd:29:4c:9f:77:40:c3:25:2c:14:f9:b7:
12:40:87:c6:83:e9:96:fd:bd:cd:8b:cc:32:03:43:fe:a1:8a:
f5:29:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:16 2025 by rpki-client