Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: kFubRHDiBMJWVs4xq/mbH7BZ8MQoYWrC04IsgEN1FeQ=
Subject key identifier: 87:C4:3D:0A:F9:36:92:56:F8:82:CC:26:16:2A:53:27:B1:76:1D:DD
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019771BF3A8B452C6DC48ECF41D087E7B4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 02E9
Signing time: Sun 15 Jun 2025 04:00:47 +0000
Manifest this update: Sun 15 Jun 2025 04:00:47 +0000
Manifest next update: Mon 16 Jun 2025 04:00:47 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: eDdd2LmDfO5Wp0v0hwwdoHqqCBiqEjnnVOdlBlXC1Fo=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3a:8b:45:2c:6d:c4:8e:cf:41:d0:87:e7:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Jun 15 04:00:47 2025 GMT
Not After : Jun 16 04:00:47 2025 GMT
Subject: CN=87c43d0af9369256f882cc26162a5327b1761ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:e5:70:04:b4:88:c1:e9:23:c7:d4:33:95:
06:9f:6e:f5:0b:09:36:9b:ad:53:1a:a9:a7:d6:01:
29:03:9f:9d:19:c9:f6:fc:99:51:a3:61:88:cd:8e:
46:ac:f0:0a:b7:35:15:a6:9c:9e:2f:c4:e1:43:b3:
55:85:08:f0:5c:34:93:c6:a1:b1:bf:3e:a1:d0:a9:
3b:73:43:81:8e:d5:3c:1c:5b:79:0c:1c:f4:87:36:
c1:ac:c9:69:e2:38:d4:68:0f:d9:5e:c3:12:b8:19:
fe:82:f3:6d:7d:fc:37:60:21:71:fc:f0:0d:6d:45:
03:de:a9:45:7d:af:a6:79:54:ff:ee:de:21:9c:04:
77:52:13:c3:78:ec:77:14:33:9a:d9:21:01:13:16:
7b:c1:7d:27:30:3a:a4:bf:94:64:9e:dc:7b:70:31:
0e:1a:34:cf:98:6f:3d:f0:7b:e7:42:72:b3:5a:fb:
4b:3e:ac:14:a4:ed:83:12:95:e1:ed:77:ee:1a:9c:
2e:33:7b:b6:8c:50:88:06:e4:43:f0:ef:8e:d0:9c:
95:97:03:b8:99:ef:a8:87:ed:49:fe:d0:42:45:31:
3b:48:c9:2b:6d:a9:84:ac:92:3f:9e:71:b7:f5:34:
64:d0:c5:00:46:72:34:9a:0f:0f:7e:34:6b:80:d1:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:3D:0A:F9:36:92:56:F8:82:CC:26:16:2A:53:27:B1:76:1D:DD
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:49:88:aa:2c:0c:4c:d8:65:bb:09:e5:50:0d:65:b1:56:79:
15:3b:97:bf:54:b1:a0:ab:c1:88:e0:dc:81:ae:2d:b9:34:38:
11:f3:be:d1:13:06:93:bc:09:87:cf:22:8d:c3:65:f1:01:37:
63:37:e1:03:03:5e:b3:6f:d2:42:7d:95:24:e1:08:43:52:b2:
d5:5d:af:69:83:f9:6d:08:99:08:a6:6f:89:ed:52:11:c8:9d:
a0:cf:bb:a6:31:ea:ff:fd:eb:c7:52:31:2e:e3:78:df:ea:84:
f5:a1:b6:0b:9b:35:35:cb:7d:c8:e0:06:18:57:49:25:3d:7c:
30:ad:93:2f:fc:7a:38:52:fb:70:48:be:cd:48:32:a4:3c:9c:
c4:f1:65:43:38:8b:8f:c4:63:8c:95:93:ad:95:c7:fb:fe:7e:
1f:96:f1:0c:e9:33:5f:f0:7b:73:f5:34:58:68:6c:85:67:c9:
58:dd:cb:8b:06:c2:76:20:45:fe:df:3f:88:2c:b1:5f:51:d2:
05:28:82:e6:4f:fb:5c:c5:4b:e0:a3:81:79:8a:c7:e8:7c:86:
ad:05:c0:82:e4:95:97:30:9b:9a:0f:a3:56:fd:35:aa:cd:42:
b3:02:5d:88:7c:69:26:d8:b2:c3:cd:a1:31:4c:b1:72:25:b3:
9d:87:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:56 2025 by rpki-client