Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 7o2hq/W1c0ap2qtgEbpLZ37rjNJGcLVoT40LonTc/oQ=
Subject key identifier: 6A:9C:F0:10:A2:D6:43:37:4C:73:D1:EB:A5:F7:C6:12:E6:58:D6:01
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0196BC6DE40B542884670B8076AAA4CDF2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 011B
Signing time: Sat 10 May 2025 23:00:40 +0000
Manifest this update: Sat 10 May 2025 23:00:40 +0000
Manifest next update: Sun 11 May 2025 23:00:40 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: 0oUqaqsGKsmIZIQfJCt+VQzGVL97Fk47mljci+eTx6I=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:e4:0b:54:28:84:67:0b:80:76:aa:a4:cd:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: May 10 23:00:40 2025 GMT
Not After : May 11 23:00:40 2025 GMT
Subject: CN=6a9cf010a2d643374c73d1eba5f7c612e658d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:bf:b1:67:63:e8:c4:a9:b9:3d:94:1c:4c:
82:b1:33:17:4e:a4:a4:5c:6f:80:61:d0:90:cf:dc:
27:ef:19:28:42:6d:c2:59:49:a6:c0:6f:8a:2b:4e:
26:db:93:fd:cc:88:47:e4:e0:ac:e8:d2:d1:c0:59:
12:ef:ad:1c:56:60:4c:3a:c3:d9:4f:3e:de:52:41:
42:f7:a9:3a:73:2a:4a:15:27:e6:ec:45:9a:47:52:
5b:29:d3:49:5b:2c:a6:c2:0f:08:5c:1e:16:01:16:
f1:0a:1f:e6:7b:a0:97:53:df:7d:2c:1b:71:a9:af:
6d:34:88:f2:fd:70:a2:4f:d9:bd:fe:05:bd:74:51:
6e:46:c5:fc:e9:f7:82:f7:bb:75:40:db:f9:97:39:
b9:fb:3d:45:0b:a9:51:1c:29:55:aa:9b:06:3f:89:
92:8e:02:b3:da:17:b3:4a:64:cf:30:8f:66:e9:19:
bf:d3:38:09:c5:98:04:f1:97:3b:8a:da:e3:58:ff:
3c:22:1e:0f:d8:b7:8b:fc:72:38:8d:20:c7:ed:2b:
13:3d:b2:08:83:a7:ac:1c:61:86:b8:41:6a:80:f9:
a7:ab:da:fb:73:f9:1e:e4:05:68:ef:10:02:6e:93:
64:d9:e1:e7:91:19:5f:a5:bc:07:b8:e3:c3:ee:b6:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:F0:10:A2:D6:43:37:4C:73:D1:EB:A5:F7:C6:12:E6:58:D6:01
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f1:a6:29:d9:b1:43:af:54:a3:1a:2f:c7:6f:60:20:9a:f7:
56:2f:4e:c0:d5:48:d4:da:82:22:74:68:eb:fb:ee:51:78:86:
41:65:ed:16:e1:f6:64:2e:3a:63:49:1d:0d:b9:02:d9:a4:42:
99:da:d1:5f:f6:11:b8:e6:ba:51:f6:96:32:69:e8:0c:3b:4a:
61:91:48:ae:cc:d6:c3:91:44:1f:36:64:1a:21:75:45:de:9c:
70:dd:5b:e6:ac:43:33:07:e8:e3:11:89:cd:d8:4a:a7:7e:ba:
f9:77:fe:14:7f:43:6f:83:eb:ed:7b:bf:3d:38:cd:9e:15:bf:
2a:d9:d9:78:aa:34:38:ec:83:81:46:ff:a6:8e:24:16:55:88:
2c:60:37:94:a6:02:55:85:18:2e:cb:b0:b6:95:b0:1a:b4:38:
5f:98:ad:5d:27:67:32:c3:76:8b:6b:3d:5e:1e:76:ee:fc:5a:
20:c2:b8:96:6a:da:a9:79:d8:5b:2f:a9:4f:80:5e:89:31:f0:
3b:b5:6b:5e:36:6c:fd:64:9a:14:6d:d3:fb:b9:6f:7f:67:91:
07:62:49:af:7f:76:13:03:19:24:44:c5:7a:61:c9:28:6d:40:
12:73:92:a0:36:cf:a5:9d:51:a7:45:3f:ea:ba:d2:9c:fc:b8:
b7:c6:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:15:16 2025 by rpki-client