Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: psXeajchZnmxErjbgeTvLSj2rGybNX3XB1QNzklQVo4=
Subject key identifier: E8:E3:0E:8F:64:B2:2C:8B:79:AB:00:B0:1B:A4:CA:F2:2A:68:ED:5F
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01987261B900388AFF40F60F57F683DA0B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1564
Signing time: Mon 04 Aug 2025 00:01:03 +0000
Manifest this update: Mon 04 Aug 2025 00:01:03 +0000
Manifest next update: Tue 05 Aug 2025 00:01:03 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: s00ehXMxd0hCFUmKZgmfE92ltW9N2JHA9l3+oTMiX7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:b9:00:38:8a:ff:40:f6:0f:57:f6:83:da:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Aug 4 00:01:03 2025 GMT
Not After : Aug 5 00:01:03 2025 GMT
Subject: CN=e8e30e8f64b22c8b79ab00b01ba4caf22a68ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:2f:79:bd:eb:7f:3a:42:7c:ce:22:2e:57:
4d:1e:69:a6:25:8f:03:12:ea:d1:47:bc:b3:0b:70:
51:5a:70:84:71:ef:5e:a3:9e:5a:0f:9b:da:00:cd:
03:f7:54:d4:1e:5a:f0:ed:1a:65:c8:01:97:b7:71:
49:27:a1:74:cb:88:2a:9c:cb:8e:8a:a8:05:ec:ad:
04:5b:71:bf:3b:7e:07:50:92:dc:18:6c:4e:15:28:
36:55:c9:0d:ab:95:6a:12:2b:9e:4f:52:b1:25:5f:
e8:13:8b:04:37:78:ab:64:60:5f:71:d5:5d:ce:18:
83:58:9d:92:88:ac:64:15:ad:9b:02:bf:76:f5:39:
b8:97:d4:c8:fa:33:e1:2b:dc:fe:55:b6:d4:31:70:
44:b8:62:a9:8f:16:b3:d9:c8:04:e4:ba:d3:95:e7:
02:76:f5:8a:c7:e8:6a:d2:a2:fa:0f:ec:ad:08:93:
16:9a:3d:05:7a:77:eb:a8:a9:71:b3:34:6a:78:23:
ae:19:33:3b:fb:2e:5f:bf:b1:bd:ee:26:98:de:8a:
62:36:98:83:43:97:60:dd:7e:79:fc:c5:b1:b0:7c:
dc:19:cb:75:d4:74:1f:3b:a2:40:89:39:e1:59:b0:
90:40:22:e7:21:87:d1:21:81:4b:f8:32:77:26:ff:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:0E:8F:64:B2:2C:8B:79:AB:00:B0:1B:A4:CA:F2:2A:68:ED:5F
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8d:84:af:86:d3:9a:25:57:3f:f7:fd:f1:e2:30:d7:a8:d5:
2d:d1:28:2c:1a:9e:66:e9:79:f0:6b:62:66:d6:7f:24:50:c5:
82:ff:42:88:1a:88:ad:52:a6:80:36:30:10:33:46:e3:4a:06:
1a:38:c6:d3:3d:01:6a:41:f7:46:cc:55:1c:46:01:48:15:57:
99:06:91:8f:f0:01:b1:69:b8:b7:e5:e2:36:1c:08:bc:d9:5e:
39:44:8b:e4:10:2a:c3:52:9e:a2:bb:25:c9:a8:eb:f2:01:cf:
7e:b4:51:88:85:83:0c:8b:19:9c:8d:76:9a:2b:e7:7a:cf:cf:
e7:cc:97:a4:93:03:02:42:a4:91:aa:4a:7f:41:24:a8:f3:37:
c2:f0:ac:df:59:e8:ec:5d:56:53:5a:b0:3a:9f:b8:a1:94:ce:
13:89:5f:59:88:a8:29:19:af:38:e6:a0:ed:79:2c:93:fb:f3:
bb:ce:5d:7f:6d:0b:5b:59:40:71:6f:01:c8:5d:f3:77:22:1c:
ad:38:0c:c7:64:66:ad:b6:eb:7c:af:81:6c:7f:ce:c7:f8:04:
d0:b8:e0:e1:ea:bb:3a:ca:10:c6:ca:b0:5f:da:9d:c0:e1:b2:
c8:b2:fb:b6:5f:76:95:46:63:62:3f:d0:b1:89:2c:ff:b5:d3:
88:0c:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:59 2025 by rpki-client