Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: Q5W0+tRpNyFg8PZuDZ0b7Ua9B2YwLEY870ou0HQgGuI=
Subject key identifier: 9F:54:E4:76:5E:4E:45:C2:A4:9A:47:C7:8B:14:6E:44:B1:D2:7B:39
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 01977B9E0F9B004D8D2544E525C809E608AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 02:00:45 +0000
Manifest this update: Tue 17 Jun 2025 02:00:45 +0000
Manifest next update: Wed 18 Jun 2025 02:00:45 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: NQh10nrCt7WFEHgBvopdM5iduEXQEpgNWBwnlTyneNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9e:0f:9b:00:4d:8d:25:44:e5:25:c8:09:e6:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Jun 17 02:00:45 2025 GMT
Not After : Jun 18 02:00:45 2025 GMT
Subject: CN=9f54e4765e4e45c2a49a47c78b146e44b1d27b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:de:12:ca:4a:09:e7:8e:87:5e:df:74:f8:
6c:6a:8e:f0:1b:9c:db:0e:93:b8:78:50:c8:39:40:
1d:85:2a:c4:1b:6f:db:9f:af:9a:e6:f7:33:a1:38:
52:14:fb:bc:7a:9e:6b:4a:9a:3a:3c:a5:c2:38:b6:
40:f1:bd:a6:b0:80:9b:8b:5c:45:4a:9c:0c:d1:df:
1c:be:e1:69:57:68:81:7a:cc:a5:95:4d:96:51:41:
5c:0c:38:f8:5c:40:46:41:d2:4c:5b:5c:76:ca:58:
a3:82:c5:33:ad:b3:09:ce:da:67:55:71:97:ce:52:
56:6e:a0:8f:b1:74:64:b4:55:de:0c:d1:c5:ef:d4:
39:6e:66:94:9c:d6:ec:92:82:3a:3e:e6:ff:a5:ad:
ac:cd:22:b2:2f:2d:ca:00:cd:36:bb:8b:7b:81:37:
f1:2f:fa:ec:98:71:fb:49:6a:b0:7f:3b:d6:0a:82:
9e:72:83:79:6e:6a:fe:0f:3c:3a:eb:6b:44:fa:b2:
14:05:d4:a1:1e:a1:1f:90:e5:ef:20:fa:e3:4e:af:
5c:dc:76:51:53:10:a7:80:d4:6f:bd:de:db:8e:79:
ae:7e:49:18:d7:a6:d8:e9:70:c2:a3:d2:0d:b8:1a:
06:ed:a3:42:28:e4:dd:d8:1c:ed:97:67:29:0c:b3:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:E4:76:5E:4E:45:C2:A4:9A:47:C7:8B:14:6E:44:B1:D2:7B:39
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:18:a5:f3:eb:37:6b:41:e3:7c:df:bc:3b:0e:47:37:88:
7d:93:6d:61:20:36:ee:4a:1c:62:68:fd:bd:81:8e:2a:97:6a:
d1:f9:7d:42:3f:98:6a:77:7a:19:16:63:d5:f9:18:c6:f8:b0:
41:5d:10:7f:4d:c8:a8:ef:15:f0:24:20:15:f7:4e:5d:82:e9:
2a:b4:2c:ad:c1:ab:4d:aa:89:c5:51:f0:ea:82:1e:a0:a9:9e:
1a:b0:f7:fa:0a:71:ec:5b:04:13:44:db:dc:ec:24:9d:c2:77:
ff:84:ea:0c:0a:7e:72:73:5c:02:6e:7f:12:a2:79:85:93:a7:
de:be:e2:87:72:a8:0f:7e:12:76:5c:60:ae:25:af:a0:94:07:
46:9d:81:03:e2:62:29:b7:14:fa:78:c7:ec:01:d6:33:62:1c:
b3:dd:8e:0b:59:c3:69:b9:82:13:56:21:19:4f:40:8b:da:95:
00:68:d4:f6:93:ed:62:61:6e:53:3c:0b:bf:77:a9:f2:ff:97:
30:54:f2:e7:4d:32:e8:f7:8d:ea:f3:b6:f9:4b:d1:b5:9b:08:
ca:e6:f1:24:61:a0:a5:2f:da:2f:a4:d8:24:48:1e:85:d0:73:
92:bd:05:46:40:e6:75:56:a5:3d:01:24:84:c7:58:4c:43:cd:
8e:bc:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:21:23 2025 by rpki-client