Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: u9OOofSsRJvBneb+y6m0cA8O7+Nhqy4woZhpF615kU0=
Subject key identifier: 6F:18:62:3E:C8:95:AC:8B:FB:9A:D5:73:66:D6:FC:F6:D9:63:FB:28
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 0197B8FD4CDDEA1EDF1584EA932FBFA339EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 00:01:37 +0000
Manifest this update: Sun 29 Jun 2025 00:01:37 +0000
Manifest next update: Mon 30 Jun 2025 00:01:37 +0000
Files and hashes: 1: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: oLaptfItq6ibMxuycg2hgzdJYq6DDQtwithESWnh/xg=)
2: O3Kl40jGDsPRJGH1EFnf65-hUj4.roa (hash: aMzq4HH1WAeogtvzS32mERsBxOMZNMYLSy3wIuq38+8=)
3: fCTecUt77UHhtXHXll1piF7Zd6c.roa (hash: q3pUeUA6qW+DpXb5gimft6PsFNA4pETS9zhmS0g+5v0=)
4: hZ2yySpjQiTMjZvchaaZ9n1kGlE.roa (hash: pY371ydI1VeBW+n9ngZnpHGBKKkDLyF2vNs37egLERQ=)
5: pFZVBmgqiU0csf9W43g6FIWRCTM.roa (hash: eUwZvrYwb50UrEhmGEwgTxwUKEPb4F3y0cFhI/MdzLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:4c:dd:ea:1e:df:15:84:ea:93:2f:bf:a3:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jun 29 00:01:37 2025 GMT
Not After : Jun 30 00:01:37 2025 GMT
Subject: CN=6f18623ec895ac8bfb9ad57366d6fcf6d963fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:f2:08:f9:0f:86:6e:df:ed:c0:6f:97:48:
a4:f1:00:6e:34:4d:5b:b4:3e:f8:ec:87:be:c5:0f:
d4:c0:21:5f:9a:5a:87:d9:20:83:7e:d4:ca:a8:fa:
4a:d0:63:2f:c2:cd:37:54:0e:97:48:6d:30:d0:bb:
15:04:52:5b:df:d0:fa:c4:67:4c:24:7c:1d:58:6d:
6d:d7:85:04:1f:5d:2c:3e:14:27:f7:02:c1:fb:5e:
48:67:59:07:fb:96:a1:52:7c:fc:7c:6f:5f:30:af:
98:3e:1e:c2:3c:c8:54:32:c0:9a:32:05:dd:cb:17:
14:aa:c4:10:93:a6:f4:4c:41:5a:26:cb:e4:38:68:
8e:ba:45:e2:c5:49:f9:dd:f8:2b:3a:ee:9e:aa:19:
6e:e7:75:e8:b3:6b:e3:3e:68:14:ef:c4:83:01:c7:
76:e8:f7:07:80:f5:1f:66:48:cc:c2:93:7e:8a:b2:
08:95:36:27:b9:1f:19:25:cd:13:39:44:e9:fc:7b:
f4:2c:4d:9c:68:92:03:8b:6c:65:95:6a:86:f6:b2:
3d:46:30:9e:80:cd:2d:eb:96:98:9b:7a:ca:81:f4:
67:f9:f1:3d:9b:b3:91:2f:0d:1d:88:23:fd:3f:6c:
c4:3a:7b:3a:30:bd:09:7c:15:2e:10:1d:d7:24:c9:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:18:62:3E:C8:95:AC:8B:FB:9A:D5:73:66:D6:FC:F6:D9:63:FB:28
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:7d:d1:7d:a4:fe:25:cb:4e:2f:73:12:3f:4f:90:f9:80:
67:0c:ec:75:55:5c:40:81:b3:62:33:53:75:95:c6:f6:0e:86:
0a:00:9d:7d:6b:1b:23:61:80:6c:fa:50:bc:e9:89:89:75:ad:
78:5d:81:12:6b:c6:4a:f5:19:0a:7d:5a:a4:a0:9b:19:52:c6:
4f:e9:18:1b:97:e9:1d:72:23:91:55:29:4b:d9:5d:0a:c2:9b:
d8:7a:7e:9d:80:8f:a2:16:69:cf:91:b3:e8:e1:e1:0c:27:5b:
22:df:3f:a9:c7:63:45:9c:ea:21:f8:64:0a:14:47:fc:0c:eb:
8a:67:f6:ba:29:47:50:5d:79:2a:91:d9:cd:44:6d:4a:52:44:
46:31:27:86:a5:86:99:24:d6:13:f4:23:95:dd:63:a6:8c:70:
21:92:2e:ff:a9:2c:56:fd:66:cb:49:2f:cf:d3:43:58:ff:ce:
bd:d3:0f:ab:25:54:0c:30:bd:e6:fd:5f:48:87:ff:e8:d4:d8:
15:11:40:ab:89:d2:78:68:b7:61:ea:65:88:30:c7:d7:c7:c8:
8f:17:a4:3e:76:ca:25:e4:81:e2:3a:25:e4:24:28:6b:a6:43:
54:c9:68:92:16:dc:68:27:ee:0e:6a:29:e8:45:1c:c5:53:2b:
6a:f9:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:08 2025 by rpki-client