Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: F/PlN4h79sJQNnrdkg23I5HZhPNor+LS3exw+rL6zbA=
Subject key identifier: 6B:33:5F:C5:C7:FD:BB:03:DE:98:96:5A:C5:5C:3B:86:5C:67:FF:C5
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01987D1C41B26A6E18D2B47F7F5EE15425AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 020E
Signing time: Wed 06 Aug 2025 02:01:00 +0000
Manifest this update: Wed 06 Aug 2025 02:01:00 +0000
Manifest next update: Thu 07 Aug 2025 02:01:00 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: C4ivB/wYXmywo0ady0SKn+hXWUb5gXAkgBCg/yNFSk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:41:b2:6a:6e:18:d2:b4:7f:7f:5e:e1:54:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Aug 6 02:01:00 2025 GMT
Not After : Aug 7 02:01:00 2025 GMT
Subject: CN=6b335fc5c7fdbb03de98965ac55c3b865c67ffc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:0c:9f:b1:c4:e4:05:27:98:7a:f6:9b:b1:
b8:55:f4:2c:b2:6f:ed:44:bd:50:e1:98:c0:6f:f8:
9f:d0:d3:18:a0:a0:2c:e7:9e:91:1e:21:f0:98:09:
ae:38:be:2f:7e:36:f6:f0:53:10:71:60:c4:8c:69:
60:3b:75:ad:d3:2d:43:0a:63:59:72:f9:2e:96:f2:
bf:1d:9d:7c:09:97:25:50:64:f3:02:cd:66:94:41:
13:26:56:16:bc:31:3b:84:69:2f:59:fb:ac:9e:ee:
64:26:53:d1:00:df:af:0e:ce:c3:1b:7d:8d:48:3d:
45:5c:0a:05:a9:d1:5d:e6:4b:fd:12:37:c7:a3:d5:
4f:8a:ea:2c:c7:4a:7a:49:48:3b:74:c7:5a:27:6b:
f1:05:12:84:c7:d7:d8:1e:1b:c7:dc:b3:73:52:01:
86:42:2a:bc:43:4b:cd:14:0a:35:d1:a9:83:42:bd:
5d:a0:b3:ed:93:eb:e4:21:8d:07:70:3d:b2:c0:75:
e6:bc:b1:a9:cd:db:ea:17:01:12:89:fe:2b:cd:1d:
c1:8c:86:68:71:b3:71:12:51:a8:b7:7c:b3:f2:86:
e9:30:3d:14:f7:4d:49:1f:9f:f7:38:03:58:f8:8f:
aa:1d:04:70:ae:4c:92:cc:04:9a:d2:80:4b:db:28:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:5F:C5:C7:FD:BB:03:DE:98:96:5A:C5:5C:3B:86:5C:67:FF:C5
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:11:23:45:c9:80:4c:52:b6:b4:4e:70:61:c7:2f:96:87:
cd:1d:e8:b4:68:20:a8:4c:cf:49:ba:d2:14:69:ed:02:09:3f:
f6:94:90:cd:ec:c6:aa:de:47:37:55:59:64:a8:54:c2:d8:8a:
3d:81:60:bf:df:af:74:ec:00:f7:f0:df:a2:89:fe:bf:58:9e:
a7:44:c9:89:17:46:f7:16:bf:17:1c:69:87:26:f2:1f:13:36:
09:0e:2d:d1:67:72:44:0e:d4:62:12:78:7e:e7:74:3f:71:43:
2a:51:62:7d:63:37:02:c5:d4:38:3d:85:45:ae:3c:81:5d:ae:
4b:c4:ab:45:85:66:f9:d5:f7:3f:9b:6b:48:1a:d5:b0:62:cc:
55:cc:91:4c:f7:f3:42:5d:fc:b6:18:dd:64:fd:65:bf:2e:b2:
ea:cb:af:33:72:25:a5:9c:30:20:03:9e:0f:ed:55:9d:4b:a1:
c6:82:65:5c:d5:c5:ad:79:0e:d2:02:00:b5:9d:ca:be:ac:73:
32:e5:d1:4c:51:1a:03:b8:2d:1e:6f:4f:01:3c:fe:ab:56:18:
06:99:84:70:26:8a:9e:4c:a9:07:b8:40:42:39:69:18:eb:7e:
68:4d:b4:3f:81:65:bb:59:30:3d:d6:ba:b4:96:01:21:52:b8:
16:f0:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:00 2025 by rpki-client