Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: FndqVlywhYrfPWu3pIyX+QHcFPQsH3GxiG1PO1Kz4bs=
Subject key identifier: EF:39:44:FB:31:68:16:37:0D:EC:FA:51:7D:32:77:D6:25:D7:9E:BC
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 01988D6A995A1FA1F5A5F27FF43AF5D269E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0FBB
Signing time: Sat 09 Aug 2025 06:00:30 +0000
Manifest this update: Sat 09 Aug 2025 06:00:30 +0000
Manifest next update: Sun 10 Aug 2025 06:00:30 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: E/ywHbf0CugHHIdSeOyq8oKRyZb5DSC2nmNx0VuvVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:99:5a:1f:a1:f5:a5:f2:7f:f4:3a:f5:d2:69:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Aug 9 06:00:30 2025 GMT
Not After : Aug 10 06:00:30 2025 GMT
Subject: CN=ef3944fb316816370decfa517d3277d625d79ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:5c:a2:b2:90:57:78:44:45:14:89:47:93:
f5:29:ad:13:43:01:b2:5e:d7:cc:49:ac:9a:95:ad:
c4:34:5d:ef:7d:46:ad:c1:2d:0f:84:cb:57:43:ce:
6f:a0:9c:f6:36:2e:86:17:e9:e2:c3:1e:af:28:bf:
04:e5:97:0b:a9:e0:3c:88:6f:e6:3a:1c:f6:b0:e3:
c8:e2:60:15:09:8f:c6:a2:cd:c9:7f:f2:41:13:ac:
0d:30:78:d8:8c:a1:a8:53:4b:c9:4b:d3:58:39:d9:
d8:73:cc:e8:a1:02:94:3b:a8:30:f0:ee:f1:07:e4:
89:d7:1e:ca:c0:13:40:7a:22:19:fb:20:45:6d:3e:
b7:be:97:aa:17:29:b9:6f:54:e7:c4:71:1b:5a:80:
25:d1:ef:46:84:93:07:d7:f1:91:73:c0:87:78:16:
6d:3f:dd:36:e4:ac:63:50:3d:32:a7:9c:f9:bf:0c:
15:5a:91:72:09:e8:80:cb:2d:28:10:e2:81:67:89:
67:f5:33:1e:b2:ca:7b:a5:93:59:00:46:ad:c6:91:
7b:f9:5b:7f:8a:6f:bb:2f:b1:b2:45:d8:87:69:ff:
1f:b9:10:c0:a7:f4:b1:6c:8e:92:3a:1f:26:a9:7f:
51:a2:be:aa:a0:98:94:9f:aa:92:0c:42:d0:fc:58:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:39:44:FB:31:68:16:37:0D:EC:FA:51:7D:32:77:D6:25:D7:9E:BC
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:70:1d:6e:ae:a2:01:6f:81:13:0e:d2:27:7d:ff:4e:2c:
4e:5e:e7:8c:66:da:1a:f1:00:51:b7:b0:08:01:2f:69:01:dd:
9a:48:65:b1:7f:db:66:73:cf:c9:f2:43:34:ef:8a:92:0a:22:
d6:70:fd:9a:39:87:83:15:7a:d2:29:32:a9:3d:5c:e2:c3:05:
d2:b5:b1:bb:d6:c6:b2:e1:6c:51:cb:69:26:c6:6a:fa:21:fa:
3a:f3:46:27:4a:1a:e7:7d:83:b5:8f:79:35:8f:63:8f:da:5d:
9a:cf:a3:c1:0b:73:22:0e:c5:84:d4:c4:da:d3:10:08:6f:c4:
7b:58:90:8f:b9:f2:7f:93:c5:53:3b:f4:60:f8:31:fd:2f:33:
30:f3:79:3c:f3:9d:06:b8:7d:97:17:de:fb:05:c9:cd:78:fc:
a5:b3:cb:05:af:01:1f:86:ed:7e:e2:2c:65:a8:b6:35:5f:3f:
db:0b:d3:5f:90:f5:26:0c:fa:37:bc:99:3d:05:fc:2c:99:cc:
c4:4b:78:2e:76:0e:19:6b:37:6f:0c:0d:80:67:a3:bf:69:13:
74:d3:e4:ab:e4:71:d2:7b:56:d0:d4:f0:bc:ea:09:d4:09:59:
50:ab:7e:88:2a:94:77:dd:0d:5d:5c:c1:9a:00:9b:94:9c:fc:
85:d3:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:10 2025 by rpki-client