Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: v3s9jo1EM1LB25WJ77IV0tEzrsk9Fu2kVWL6AQgTEaQ=
Subject key identifier: 89:A5:A4:B9:E6:53:AE:51:20:7C:E4:04:3B:0D:9E:25:03:A1:9F:13
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019777C153D7ADFC14D3FC937B0B0926339B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 15B2
Signing time: Mon 16 Jun 2025 08:00:47 +0000
Manifest this update: Mon 16 Jun 2025 08:00:47 +0000
Manifest next update: Tue 17 Jun 2025 08:00:47 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: JJHHhhvC+ChgQ3eiTphBVzV4MdMfbPbk+NXrSIs1ilQ=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:53:d7:ad:fc:14:d3:fc:93:7b:0b:09:26:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 16 08:00:47 2025 GMT
Not After : Jun 17 08:00:47 2025 GMT
Subject: CN=89a5a4b9e653ae51207ce4043b0d9e2503a19f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:cd:96:05:84:dd:d4:bd:e4:79:d5:d3:46:
08:38:a0:5b:03:cf:77:07:0f:2b:8c:9e:92:7f:e1:
dc:6e:4f:52:a1:95:c3:a8:e3:2f:c2:ee:cd:c5:a3:
74:bb:d6:81:4c:54:e5:cf:28:0d:2c:9a:3b:cb:82:
9b:7c:8d:3f:8d:27:1e:dc:2b:5c:1e:3c:bb:be:5e:
5d:4d:bb:57:4d:08:72:28:33:98:21:72:4d:ce:dc:
9e:12:0a:75:1c:e8:3d:3c:d9:15:3e:71:2a:ea:70:
91:e3:99:48:cf:4a:ce:92:2a:b7:8c:79:ed:53:e9:
c6:89:c0:8f:22:d1:0c:47:86:2c:48:d6:e7:76:82:
10:37:1d:67:d5:39:01:ab:95:39:5c:78:8d:77:61:
35:e5:af:e4:e6:a1:26:e1:d2:10:85:a1:60:55:57:
c5:43:b5:fb:a9:b8:39:55:2e:c6:0a:d1:61:87:66:
42:94:8a:1b:e8:87:c9:71:a5:05:85:78:d5:bb:e5:
07:62:b3:e5:13:8a:d1:b3:73:53:9d:06:81:21:70:
0f:c9:af:60:0c:9a:11:24:d9:d3:12:00:70:e8:bc:
fa:f7:88:8d:0d:92:49:54:71:b6:7b:9b:5d:89:72:
bc:f4:db:bc:43:42:97:41:f5:9f:8e:59:67:3b:d1:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:A4:B9:E6:53:AE:51:20:7C:E4:04:3B:0D:9E:25:03:A1:9F:13
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7a:50:10:31:ef:20:0f:e6:d3:d5:3d:89:11:0d:e2:fa:eb:
f9:c0:58:ea:0b:eb:e0:8a:f5:de:2c:fc:47:1e:55:7b:6c:06:
20:6e:48:47:6a:bd:82:7e:7c:53:4b:d4:79:86:d6:f2:42:bc:
74:51:e8:2a:f3:d1:92:5a:4a:6d:f8:5c:a1:53:70:25:58:bc:
2c:f6:68:b2:d8:cb:89:11:4a:44:18:3a:0f:00:22:96:d5:fa:
10:d3:08:6e:55:95:d4:52:51:5c:de:f2:8e:f2:41:21:df:7f:
f4:77:b9:df:bb:c5:8d:b5:df:04:9f:8a:22:2c:89:65:5a:bf:
90:12:98:80:c7:5f:72:e1:8a:e7:af:d9:32:27:2b:e9:8a:e9:
14:2a:a4:f9:9f:7b:39:7a:fe:74:68:a1:bf:d4:ad:9f:36:69:
1c:3e:48:4f:01:c2:8c:93:d2:c4:06:03:6e:1a:ca:e8:8e:52:
ce:78:b4:e6:75:31:ee:e4:b2:0a:a2:40:10:37:60:02:22:35:
10:f5:bd:cf:ad:8e:f4:6d:bd:70:b6:7e:dd:a4:ee:c7:6d:fc:
d7:f5:f3:35:7a:a9:4e:64:c1:d6:84:2b:d3:11:cb:47:08:38:
fa:a9:e2:18:a3:ad:55:85:33:b1:37:0d:d4:a4:cb:75:e3:46:
74:38:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:26 2025 by rpki-client