Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: 9lxSjW39/C+47F6ooIEccdmrzOnbdiV/ZdLxSONfwN0=
Subject key identifier: CE:B8:3B:40:0D:02:E6:DE:AA:7B:06:04:EF:88:9C:96:8E:ED:7B:E3
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 01976CCFF506D78F1C0077FAB88D2888B51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0BE2
Signing time: Sat 14 Jun 2025 05:00:57 +0000
Manifest this update: Sat 14 Jun 2025 05:00:57 +0000
Manifest next update: Sun 15 Jun 2025 05:00:57 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: QI3GZXRza6w5OAYgMeAb1X963bXIZio80XOaIZl450w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:f5:06:d7:8f:1c:00:77:fa:b8:8d:28:88:b5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jun 14 05:00:57 2025 GMT
Not After : Jun 15 05:00:57 2025 GMT
Subject: CN=ceb83b400d02e6deaa7b0604ef889c968eed7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:ae:53:a6:40:af:d9:a4:32:47:8a:31:b3:
f9:05:d6:7c:4f:d3:fc:31:c5:a4:9a:e4:5a:ed:3a:
fb:51:90:a2:da:b2:7c:f7:24:78:b4:c4:0c:d5:35:
b0:16:07:e4:dd:c0:b9:09:6d:a7:6c:30:70:27:ea:
03:4e:66:e5:c2:6c:5d:83:f9:f4:16:a1:15:52:aa:
1c:af:74:bf:19:73:d8:be:aa:0b:5f:17:d3:ab:99:
c2:85:f7:fe:65:95:2d:c7:e9:d5:5d:50:e5:af:a4:
a7:a6:d8:93:83:81:80:4a:e0:06:61:1f:45:a3:8c:
69:de:34:a2:47:65:29:ef:70:cc:55:73:d8:57:2b:
d8:21:5f:7f:a7:bf:a4:aa:70:2f:5a:d4:4b:91:ac:
ae:b4:a6:85:67:44:44:97:8d:4a:8a:3f:c0:2f:c0:
f1:46:58:4d:b3:f3:5e:43:ea:5d:10:94:d6:4c:0d:
1c:93:9f:f4:02:3f:d9:2c:5c:16:c7:33:c6:0a:53:
c3:01:f7:83:c1:15:5e:1f:0c:7b:e5:da:1d:5f:be:
50:3b:7e:81:f5:db:95:8e:2e:7d:d0:ee:5e:49:ec:
30:db:af:02:0f:5d:17:d5:36:c6:57:68:cb:a9:b0:
93:24:d7:9c:a7:cc:f0:7f:fc:d9:49:76:cf:47:87:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:3B:40:0D:02:E6:DE:AA:7B:06:04:EF:88:9C:96:8E:ED:7B:E3
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:19:f6:3a:1e:c7:11:28:ed:c6:8e:3f:b5:13:d5:60:b2:
2c:78:e5:32:35:d0:38:c2:e1:9a:55:00:00:dc:df:63:da:3c:
92:59:31:72:c2:5b:b0:af:42:10:02:de:6d:03:b9:0f:4c:cf:
72:21:cc:68:03:89:19:dc:0b:3b:56:77:75:3e:82:2b:2f:ab:
78:5c:b0:9a:0f:77:2d:c7:e5:3d:c6:e3:d5:44:86:c6:2d:d9:
fc:f9:dc:a7:0c:81:37:53:dd:f6:34:8e:28:85:1b:e3:51:e1:
94:6f:3e:c1:cf:35:3c:18:87:27:50:f5:0e:b8:12:d2:47:a0:
ed:eb:eb:67:b0:48:e6:99:bf:cd:05:5e:b9:ca:f9:31:d7:7e:
26:c1:f1:be:32:ae:db:6e:90:ce:81:4f:02:36:58:b3:af:45:
ab:f7:28:31:1d:a2:05:89:5b:f7:20:b5:b0:05:f4:d6:8d:a8:
63:1f:d9:94:b6:de:01:08:a0:df:28:9f:ad:97:28:e9:6a:e8:
3a:c7:79:c6:fa:ae:05:b8:66:b3:a4:a3:b0:2d:70:36:bc:24:
88:51:f9:a2:f8:d5:f0:5d:f0:37:f8:b2:cd:15:63:09:a8:1f:
35:18:b9:45:95:7c:de:68:46:5d:26:91:c4:b9:7a:1d:38:08:
48:16:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:15 2025 by rpki-client