Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: QkaYt9pe7xbZ2QaxqmOutLeRo+YCJwoen51zQRIe2ms=
Subject key identifier: C2:24:87:00:52:57:F6:38:DD:E7:39:EA:D8:9F:34:86:09:E1:68:BD
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 0197CCBA4D6916B7CF84C395FC7B9E32F4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 15D2
Signing time: Wed 02 Jul 2025 20:00:50 +0000
Manifest this update: Wed 02 Jul 2025 20:00:50 +0000
Manifest next update: Thu 03 Jul 2025 20:00:50 +0000
Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=)
4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: ACLsWY1HMZTlHn8Qn5s8aZ0hCcv4b312oCc/ZnL0Cp8=)
5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:4d:69:16:b7:cf:84:c3:95:fc:7b:9e:32:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jul 2 20:00:50 2025 GMT
Not After : Jul 3 20:00:50 2025 GMT
Subject: CN=c22487005257f638dde739ead89f348609e168bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:25:26:59:fc:88:c6:9c:78:9e:e2:98:25:
ce:31:16:fd:e1:e0:16:14:a6:d1:fa:15:8e:ae:a6:
49:8f:f6:04:2d:64:ce:e7:50:58:6f:3c:1e:06:1c:
64:b6:af:10:c1:c3:19:92:be:3d:c8:77:32:68:7c:
c2:68:a9:59:d3:63:80:ec:54:62:c0:12:f4:2b:37:
12:47:cc:d4:e0:04:b8:67:c5:1e:4d:40:10:cc:b2:
3c:d2:a9:0e:2d:d3:31:8c:4e:57:b6:90:4a:5f:c3:
9d:e1:5e:02:2f:fd:32:88:25:f1:fc:70:36:f3:56:
0e:cf:8e:e9:77:e2:bd:ad:1c:4e:76:6d:9c:c1:d2:
e2:b7:71:24:9b:08:96:97:de:1c:7f:c7:67:3c:95:
ae:4f:5d:98:9f:05:47:6b:48:17:83:0f:b2:97:ca:
57:e9:63:eb:6b:e3:a9:ed:f6:b0:3d:19:b1:af:f4:
a9:95:f3:69:c6:7e:c9:07:42:47:1e:cf:1b:c2:55:
65:34:89:e9:b1:38:88:3f:b4:d6:97:7c:3a:0c:d1:
5d:ed:8a:fa:e4:dd:98:97:f0:1e:74:8b:c7:3a:e4:
bb:87:a0:4c:f8:ab:e1:a8:2f:cf:a4:23:93:e7:10:
5e:5f:fb:45:a3:ec:81:7b:fa:34:95:5e:ac:23:81:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:87:00:52:57:F6:38:DD:E7:39:EA:D8:9F:34:86:09:E1:68:BD
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1a:4e:8e:f4:0a:8e:a7:a7:0d:64:03:23:23:75:65:48:6b:
0d:64:dc:67:c1:36:b0:84:76:07:1b:8a:ae:42:1b:2a:bd:d4:
29:57:98:f7:92:c9:87:0d:58:c5:ea:eb:a4:e3:4c:33:0c:55:
e7:a8:49:80:96:bd:bf:34:9b:43:7d:67:fc:3d:cb:22:9a:14:
c8:4b:a6:09:dc:25:fd:7c:8f:2f:dc:c4:1d:86:c7:f0:75:70:
73:6a:07:1a:9f:54:86:35:a0:ec:35:1e:d5:b4:00:97:19:be:
32:34:24:fe:e7:fa:c1:3a:15:01:96:e6:07:23:db:60:5f:17:
9c:ca:66:fe:80:67:3d:bc:32:fe:34:84:5d:b5:d7:68:d9:68:
cf:47:6e:87:f7:4b:ce:35:46:dc:69:47:d1:7f:e6:57:ba:1e:
e0:a0:c0:83:9d:83:94:91:ae:ba:d6:2a:04:c0:f9:97:66:70:
0d:e1:83:36:20:8c:ae:bc:33:44:f0:4f:5f:26:c5:b6:db:e7:
e3:ea:26:fa:30:27:f1:dc:d5:2e:eb:86:26:00:91:12:47:f5:
1b:69:d0:44:17:e2:a6:ba:d5:00:60:59:3d:12:42:a6:0a:21:
ef:e8:83:4e:af:fd:e0:5a:55:23:d0:21:cb:55:56:37:89:9b:
4b:ff:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:10:35 2025 by rpki-client