Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 04VW/1aVIIqGpMCpGa8NO4rCxs0cb/JzCCFon+UexDE=
Subject key identifier: 1E:96:B3:50:99:6D:C1:FE:68:F4:9F:AA:A6:2C:8D:A6:63:7C:9E:A7
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0198D73B8C4A291E735164C75C2AA81729F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0232
Signing time: Sat 23 Aug 2025 14:01:00 +0000
Manifest this update: Sat 23 Aug 2025 14:01:00 +0000
Manifest next update: Sun 24 Aug 2025 14:01:00 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: xAjA4Fu3XlwD/oRKF4GJxu/N2EuQNrLxh5g4OUpfrF4=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8c:4a:29:1e:73:51:64:c7:5c:2a:a8:17:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Aug 23 14:01:00 2025 GMT
Not After : Aug 24 14:01:00 2025 GMT
Subject: CN=1e96b350996dc1fe68f49faaa62c8da6637c9ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:79:77:2a:25:33:36:59:d9:08:7d:d7:2c:
c6:32:fc:f9:b1:c1:0e:e4:14:ac:14:d8:6a:72:64:
25:73:28:98:1c:7f:54:13:7e:fc:ea:db:e2:ce:f1:
ab:2b:26:05:03:78:49:16:31:54:e9:64:1c:3d:40:
3e:eb:0c:76:7d:b9:f1:a4:51:0a:aa:bc:37:e1:32:
e8:c2:7c:76:84:46:c6:5d:46:76:2f:75:b2:4a:65:
67:66:a5:31:cc:cd:18:8f:f2:7e:10:c4:ed:4f:d4:
fc:06:c8:31:88:2d:25:e6:d8:83:ea:64:59:e0:19:
99:e5:b8:13:dd:c8:a4:4e:1d:3e:6a:bd:53:da:3e:
65:cf:05:f3:ef:75:70:3a:1b:b7:55:e5:1a:92:42:
a4:6c:5c:d8:46:34:03:20:67:db:b7:29:3e:eb:a8:
60:d7:9f:5a:08:32:2e:a5:e9:75:7b:b5:a2:88:0d:
6a:54:22:29:84:2a:ca:44:b9:01:99:bc:e5:d4:4a:
2d:c8:94:7e:64:1b:3e:35:73:80:12:19:fe:74:a7:
64:25:a9:07:be:02:c1:aa:9d:3f:ba:5d:1d:82:5d:
42:da:46:d5:46:8c:a4:44:93:cb:f1:14:52:26:54:
25:1a:29:15:7b:b4:85:eb:87:b1:d3:18:35:24:c8:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:B3:50:99:6D:C1:FE:68:F4:9F:AA:A6:2C:8D:A6:63:7C:9E:A7
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0d:95:7a:6b:16:56:f8:ad:7f:0d:37:32:75:ee:b8:f1:b5:
30:21:84:33:e0:3b:ec:f7:5d:e7:ab:b2:c2:71:e1:bf:ce:10:
4b:d9:5b:a3:cd:0e:9b:14:00:58:b8:f8:53:7c:90:bf:38:6b:
a0:2e:a9:62:27:18:6a:a5:6a:3c:54:d5:d5:73:8f:fb:7d:07:
53:98:a3:00:db:a4:62:55:ad:99:da:1a:e6:72:92:63:0d:5b:
bc:d1:93:2b:6e:50:aa:ba:ae:31:f3:e1:b9:d1:51:49:99:6e:
49:87:87:87:64:0c:be:08:26:b0:d0:aa:37:75:eb:96:5d:23:
5f:c8:b2:1a:5a:dc:44:7c:1a:48:11:e7:81:5e:68:50:49:15:
26:9e:65:9b:88:6d:35:e3:6c:bc:23:b8:c5:92:ad:31:16:2c:
2e:dc:a9:58:48:9b:7b:84:88:5b:30:17:77:96:6c:42:80:2b:
30:38:b3:cd:2e:4e:09:05:d7:3c:a9:71:8d:26:e5:6e:aa:49:
d8:cd:a9:91:e4:10:50:8d:bc:35:20:78:47:f6:9a:28:e3:2d:
f8:5a:4b:94:d7:f0:31:8d:cd:1e:3a:37:a2:60:38:fa:9d:fd:
25:90:0f:c4:10:2e:79:c8:e8:95:19:36:c5:d1:24:1c:d6:90:
1d:17:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:49 2025 by rpki-client