Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: apEVdZkGVDWvKGFq8bFoeyC91cT8NZw761hcFPnDy8s=
Subject key identifier: 6E:2F:45:D2:5A:B7:59:CD:ED:5B:00:4D:D4:D5:FE:5A:13:61:EB:AB
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 0197B70F1B826B8EB23DF1A2CE803E222775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: iSayFgTjfN+0XRFxTf4eAUJcdJnBP8gFkGDHrZGiZDc=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1b:82:6b:8e:b2:3d:f1:a2:ce:80:3e:22:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=6e2f45d25ab759cded5b004dd4d5fe5a1361ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:f8:5d:d3:1e:f8:da:04:0c:6c:65:e8:42:
52:ac:41:fa:cd:4c:15:a3:cf:7e:23:4c:07:6d:5f:
6e:9d:f2:2a:06:e6:2e:cd:aa:e1:aa:ef:56:34:01:
4a:20:2d:2c:d3:24:d3:47:a1:ae:95:67:31:ef:ba:
9d:c8:5b:27:b6:60:5c:79:2b:32:fa:c2:e0:98:25:
8c:75:67:98:25:f6:d2:b6:3b:13:67:76:ff:9c:8d:
a5:82:96:f3:ef:70:0d:99:bd:64:3d:d1:1c:37:96:
d0:57:6c:1f:49:89:3d:cb:4a:47:b7:6f:f4:d2:d9:
8a:85:5a:db:81:c1:10:d7:0c:db:9c:9d:88:0f:c1:
18:4a:9c:a9:70:03:f1:69:00:f0:f3:5c:3e:ad:28:
d3:60:fd:e1:c2:6b:cc:72:8d:1d:ad:66:00:a1:0e:
f8:23:7f:82:a9:04:be:b8:da:d4:36:44:64:de:47:
41:55:a2:34:36:41:5f:67:22:30:a1:f9:d0:8a:a7:
d5:93:a3:15:5f:68:8c:3a:c1:b2:0e:ae:cf:5e:33:
58:20:4b:9d:bc:f7:5e:30:56:7b:02:3d:38:57:f0:
3e:0d:0d:c1:dc:bc:9f:78:08:bf:f7:e4:7d:6a:77:
a6:9c:e3:43:d5:ed:fb:f7:20:38:dc:ea:ef:36:3f:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:45:D2:5A:B7:59:CD:ED:5B:00:4D:D4:D5:FE:5A:13:61:EB:AB
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d7:34:9e:69:e6:e1:7b:3a:6e:93:83:4f:79:43:12:8d:76:
c1:8c:8d:13:e8:bd:97:10:ea:2c:76:e7:da:bc:22:c5:40:20:
07:af:f1:e6:75:72:bd:bb:4c:a3:d9:a4:94:6c:44:81:26:4a:
5a:31:e2:6c:ef:fc:dd:e8:0d:b8:a0:09:29:bc:1a:61:35:83:
b2:a9:c4:e1:16:f0:56:bf:c3:41:e6:b1:a3:27:0c:0f:91:a3:
cf:41:ac:70:18:c4:e3:9a:ed:23:25:48:34:10:3d:69:9b:e2:
32:36:1b:b2:c4:48:42:e7:ca:b0:56:e1:8b:35:aa:4e:be:7c:
b7:b6:fa:92:30:2e:99:6b:40:f2:5c:19:dd:62:8d:de:79:a2:
06:ff:e9:70:4a:99:58:aa:7e:49:4f:91:60:bc:e5:c0:fe:07:
ac:1a:2d:65:7e:8a:99:97:21:5c:66:5b:e3:bd:a9:85:76:f8:
b4:18:26:ee:61:6d:14:df:e3:54:22:20:65:0e:c7:1f:6f:22:
3b:49:74:59:fd:15:04:c3:df:25:16:81:78:01:ac:96:9a:b6:
cd:c4:b9:ac:81:55:50:b9:21:87:02:bd:6e:c3:71:09:e6:a8:
c6:ce:f0:cf:fb:98:d0:0d:27:c3:55:8f:a9:3d:3b:91:54:84:
ae:c2:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:24 2025 by rpki-client