Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
File: nEswhmFPR4OKPoCj5uBR09imkvk.mft (raw, json)
Hash identifier: 6ONEpE+4DImj73YcsgNJebFbI/KPfZvGHToJUAYO73A=
Subject key identifier: 21:AE:F0:0B:F5:E3:A7:84:0A:5E:16:EA:2C:71:8A:30:EC:63:AF:DB
Authority key identifier: 9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
Certificate issuer: /CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Certificate serial: 01976D06892AB936923B104ED630CCACEF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
Manifest number: 05DB
Signing time: Sat 14 Jun 2025 06:00:34 +0000
Manifest this update: Sat 14 Jun 2025 06:00:34 +0000
Manifest next update: Sun 15 Jun 2025 06:00:34 +0000
Files and hashes: 1: a_Q0Oj2hhJ8gyCrgqERD5VjhULo.roa (hash: ix5ZmIac7PSSZ8cbH+U6PyHdhcxmOIX450xPjZ8S6o0=)
2: nEswhmFPR4OKPoCj5uBR09imkvk.crl (hash: jYGsjXBazsiPQC1uACbxED67TG48VLUB3mkyBahKMYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:89:2a:b9:36:92:3b:10:4e:d6:30:cc:ac:ef:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4b3086614f47838a3e80a3e6e051d3d8a692f9
Validity
Not Before: Jun 14 06:00:34 2025 GMT
Not After : Jun 15 06:00:34 2025 GMT
Subject: CN=21aef00bf5e3a7840a5e16ea2c718a30ec63afdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:29:24:d2:98:9f:3b:ba:40:b8:ba:fb:72:
3f:d3:b2:91:a9:7f:8e:e8:f6:29:b5:56:30:1a:2c:
6a:1e:77:9e:a1:9b:ff:ec:cc:d7:b9:92:89:6c:da:
19:75:89:a9:ca:14:f5:19:a8:65:9d:df:94:ba:77:
9c:86:a0:a3:e9:83:05:39:38:24:45:a3:8d:6e:97:
21:2f:ac:3f:d3:e8:e3:86:ca:54:0a:57:3e:3a:e9:
de:b1:65:ef:78:6b:2f:6a:d9:37:8b:e9:4c:c0:cd:
01:67:80:0c:ed:81:4c:53:f3:63:02:5d:9f:ae:2e:
e1:c3:f1:b7:26:d3:12:24:cf:ab:61:73:90:87:3c:
74:cb:ad:f8:68:3e:d7:13:86:8d:f1:90:d3:6f:f3:
e0:9c:4e:1d:92:4e:88:0d:ca:ea:7f:78:59:f5:3c:
6e:58:58:da:55:66:33:b1:35:83:44:c6:68:a3:b6:
d6:5d:95:eb:c5:95:7f:e3:75:68:66:d4:5c:3f:47:
5f:34:f6:8b:64:9c:ed:72:0f:ba:02:10:90:2e:d8:
75:fa:31:95:33:fc:ae:74:fe:47:36:77:64:d0:64:
28:27:77:67:a4:d3:e4:e3:9b:c6:8f:9c:eb:a2:ab:
83:ef:9d:02:57:1f:7b:1f:66:d1:b9:e8:e7:b2:56:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:F0:0B:F5:E3:A7:84:0A:5E:16:EA:2C:71:8A:30:EC:63:AF:DB
X509v3 Authority Key Identifier:
keyid:9C:4B:30:86:61:4F:47:83:8A:3E:80:A3:E6:E0:51:D3:D8:A6:92:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEswhmFPR4OKPoCj5uBR09imkvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6296d7-c008-4c31-ae7a-84ef9cabb9b6/1/nEswhmFPR4OKPoCj5uBR09imkvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:5f:78:45:17:1a:10:2a:48:cb:0d:e9:d6:c8:b0:bd:2f:
5c:92:6b:dc:f1:15:1e:3d:db:cd:63:33:f3:16:a7:1a:c7:5e:
f4:46:a8:97:33:1e:50:bc:66:55:11:8f:d6:99:6e:02:cb:3d:
a9:ed:43:49:27:8b:cc:6a:ff:db:e5:f3:74:33:5e:25:3c:da:
a3:0d:60:7f:49:de:59:d8:d5:0e:ce:64:2c:1a:5f:38:1a:ec:
d7:32:eb:03:7d:42:4e:09:d3:f5:ff:7b:61:86:7e:3e:d2:f7:
8e:60:28:ac:a4:9d:c5:30:48:12:2b:48:1e:76:2a:fb:ad:8f:
10:57:b5:a9:06:63:55:4e:6f:7d:f8:51:d5:7a:a2:9e:cc:ac:
97:ff:ee:bb:d2:1a:77:a4:69:4f:11:68:76:d8:db:04:db:70:
77:05:af:dd:8b:27:b4:25:6c:be:c1:79:0e:e7:f5:20:3a:ff:
ba:84:08:7c:62:3f:44:ed:5c:7c:f2:28:6c:69:50:46:83:83:
91:36:f7:bb:9e:25:c5:61:38:c6:c7:42:05:e3:d1:ee:5f:c0:
95:55:5c:91:e5:b4:b5:f1:ec:8b:df:79:69:a7:86:af:91:c7:
d1:91:3c:f0:3a:8f:4e:7b:fe:01:0e:25:42:06:a9:69:d8:7e:
78:c4:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:11 2025 by rpki-client