Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: kil9a6XjUBGhGMpaNNxNB2q44kKPsDsNP95HshW8FWQ=
Subject key identifier: 54:4B:A2:91:47:E6:1D:2B:6F:60:78:82:6F:80:EC:A1:C4:EB:1A:A1
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01977008037CF4A67582DCBF373CAB8AE908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 08C3
Signing time: Sat 14 Jun 2025 20:01:02 +0000
Manifest this update: Sat 14 Jun 2025 20:01:02 +0000
Manifest next update: Sun 15 Jun 2025 20:01:02 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: s351/wCzxIyvXzApZ7+FYc226Iv06cOd0Ag705Qjg6Q=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:03:7c:f4:a6:75:82:dc:bf:37:3c:ab:8a:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Jun 14 20:01:02 2025 GMT
Not After : Jun 15 20:01:02 2025 GMT
Subject: CN=544ba29147e61d2b6f6078826f80eca1c4eb1aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:81:27:60:16:cf:f2:49:3e:f3:f5:29:b3:
d3:55:61:8a:94:4e:eb:38:e8:ff:be:79:47:05:03:
0f:98:af:d6:da:90:90:b7:7d:79:bd:b7:b9:16:9e:
54:1e:b9:f5:c8:bb:d3:a1:3b:9d:b8:cb:90:e2:4b:
19:47:e2:d8:fa:ad:99:5a:48:06:cd:6a:dd:c9:99:
a0:ba:63:01:0b:bc:3e:1e:21:9c:3d:6b:f6:0e:c5:
38:5f:bb:8e:59:56:e1:e6:31:cc:d9:6b:d0:7a:a1:
92:f5:16:82:8b:2f:06:eb:37:c1:56:73:3d:6a:7b:
15:bc:78:cc:96:10:ec:0c:e7:f1:ce:7c:ad:b1:9b:
bb:2d:95:1f:90:3e:0e:3f:6e:81:b8:bb:a5:08:7e:
53:68:76:c1:01:5e:94:b9:70:1a:84:8d:f9:ba:50:
b8:f9:6a:6c:10:fe:34:d6:ca:40:b9:e8:80:2c:4e:
80:69:92:cb:53:9a:48:f9:63:4a:e1:90:de:56:ad:
83:3f:56:9c:98:62:cb:5f:c0:f6:fa:1a:e4:cb:63:
e0:2f:5d:4c:66:3b:5a:86:dc:24:68:b3:2f:78:37:
81:ec:b7:58:3a:f7:db:1e:ef:7f:f8:d8:11:e4:8d:
06:85:a1:f9:cc:19:b1:a2:ac:8c:54:40:c1:7d:99:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4B:A2:91:47:E6:1D:2B:6F:60:78:82:6F:80:EC:A1:C4:EB:1A:A1
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:04:39:43:fe:d5:d3:23:9a:fa:34:35:28:4c:4d:43:f8:64:
17:6a:26:d9:9e:e9:fb:19:ee:65:c5:39:0f:7b:94:67:b6:28:
45:01:d4:70:c8:b7:6c:fa:ef:b2:d1:0f:b1:1a:37:9a:e2:9f:
01:bc:bf:d4:7b:d9:62:07:a8:2e:46:65:a7:46:50:31:5e:00:
58:cd:b8:00:c9:8f:e6:56:cc:c8:38:03:72:57:98:74:1c:88:
23:7e:ad:1f:43:98:9a:e9:53:3e:61:a3:1f:6a:0f:b4:f6:46:
b6:4b:b6:60:1d:f4:32:5d:b3:a0:d3:49:86:d6:59:2b:00:3a:
b3:e9:d4:88:5c:6a:db:26:7c:56:7a:b8:7d:f6:55:53:a7:b8:
06:40:21:d6:b9:b8:b3:c8:27:11:57:75:06:ce:17:a1:70:bf:
ac:51:9f:65:fe:f7:16:70:20:36:7c:d1:ca:a0:fc:2c:ab:40:
68:14:f6:b1:03:21:59:7b:9a:7a:17:b9:fe:f2:c4:ca:cd:4e:
f5:ea:a1:70:00:79:ec:b1:a4:92:1a:8d:12:55:87:ac:b2:ca:
2e:4a:78:8a:7d:f4:d6:ed:c6:c2:b9:9f:49:63:8f:98:c6:9a:
0d:73:cb:a4:fb:78:d6:b4:e0:7e:04:a4:f4:23:fc:88:ae:ac:
f9:dd:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:31 2025 by rpki-client