Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: LEPTmhwCV+CO8fHz2HajAeeQBoc5dsSQKmloDVOVaxo=
Subject key identifier: 1E:45:DC:D1:D2:04:D8:31:84:20:3F:71:C9:DF:C6:DB:C6:C1:96:53
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019773099F49FAA677B3BFA1627E914891B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1150
Signing time: Sun 15 Jun 2025 10:01:39 +0000
Manifest this update: Sun 15 Jun 2025 10:01:39 +0000
Manifest next update: Mon 16 Jun 2025 10:01:39 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: qamGuBQGdvYFXDpjj/9wuGaBrA7Z/zchfPHPw9pAuBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:9f:49:fa:a6:77:b3:bf:a1:62:7e:91:48:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Jun 15 10:01:39 2025 GMT
Not After : Jun 16 10:01:39 2025 GMT
Subject: CN=1e45dcd1d204d83184203f71c9dfc6dbc6c19653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:c2:15:84:bf:f8:88:6b:2f:8c:24:69:b8:
c8:58:a8:ca:ce:9f:37:2b:57:5b:8d:62:a4:3f:49:
01:bb:81:dc:41:72:72:f3:43:7e:e7:ae:4c:57:9e:
03:1f:f0:8a:1c:6d:f2:a1:93:e0:34:b9:37:d9:5c:
fb:91:34:5a:be:47:aa:8f:b4:02:e2:04:0b:d5:66:
81:e1:61:84:01:41:03:47:da:67:f4:1a:51:f7:6c:
0a:af:9b:fc:58:f3:ea:7f:80:00:d8:de:e9:2b:bf:
e8:f3:86:0f:ef:73:ad:2f:55:0e:22:96:a7:d3:64:
d4:7b:1e:d6:9f:2b:38:18:1d:a7:04:cb:60:7a:f9:
a5:3d:c0:76:dd:38:98:14:26:1a:39:f8:87:f0:17:
cd:a0:69:4b:37:47:96:a6:78:63:4a:0a:b8:c7:cf:
b2:6f:75:7d:2a:2e:b8:41:2c:16:05:dd:33:a8:0e:
92:59:0b:6e:56:80:37:a8:75:a5:51:de:1e:f2:51:
cd:bd:e4:22:18:e3:fd:1d:8b:ac:da:23:66:60:1c:
8d:51:da:45:d3:2b:33:1f:c3:9c:fa:4f:15:40:22:
56:bb:b0:ab:ee:97:be:f0:58:7a:33:f6:20:91:d1:
a0:4d:fa:f9:5a:80:72:89:00:bd:63:e5:ee:9b:92:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:DC:D1:D2:04:D8:31:84:20:3F:71:C9:DF:C6:DB:C6:C1:96:53
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:59:2a:47:85:dc:41:6e:7f:f4:13:09:a9:3a:8f:a1:91:8d:
59:e2:b4:90:16:ce:2e:38:5e:43:6d:87:c6:ef:de:57:38:31:
8c:43:92:a1:82:68:a5:61:4e:a9:cd:9b:eb:31:82:18:9e:42:
7c:79:e2:b4:73:8d:b0:ec:79:e2:ed:5c:aa:ae:57:7e:25:86:
dd:1b:47:85:f7:29:fa:13:4e:f1:5d:f4:4a:11:fa:ac:41:95:
37:12:4c:6b:a0:df:4c:0d:e4:8a:09:a1:5e:4e:a6:ef:da:d4:
2f:cb:47:b6:1f:ac:c8:86:4f:5c:3e:33:92:08:6b:25:7f:c7:
0d:e8:e9:fb:72:e6:1f:ef:7d:a1:59:bb:f8:49:ff:6d:b8:c5:
38:66:bd:1b:17:83:0c:99:80:cb:94:98:55:80:db:5d:92:ef:
3c:4f:33:c6:37:d0:6a:5f:7a:b3:d0:23:65:3f:05:4c:45:e4:
d7:9a:c5:b6:4b:8f:3b:3b:f5:09:fa:5c:7e:2a:9c:66:5f:0d:
cf:36:22:a5:d3:51:74:49:f6:5c:19:f4:c5:c2:90:26:1d:19:
96:ac:e9:b6:56:c8:cc:43:9c:80:47:fd:c1:63:fe:28:fe:2e:
0f:f8:b1:90:6b:a0:b0:68:6a:fb:ac:49:76:b5:88:98:ec:f2:
23:c0:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:19 2025 by rpki-client