Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: FF6Ou3eLS2C7keigOrCPXGd+Lz+DtN9jn28SD+U8Nv8=
Subject key identifier: D5:6B:FF:E2:90:78:DE:7A:EA:CC:88:97:93:D8:8B:A3:EA:9B:02:A0
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0197B77C2388C18F893E486A78C26B9BBA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 019D
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: DBd3TvRz1PxNXdnvy+s0AjEg4UQn4woVbceTHwhzDD8=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:23:88:c1:8f:89:3e:48:6a:78:c2:6b:9b:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=d56bffe29078de7aeacc889793d88ba3ea9b02a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:f0:a1:25:79:1a:45:0a:f5:3e:62:c7:1c:
e0:c0:84:f6:f6:be:51:22:dd:89:90:0c:65:2b:fe:
c2:0a:ed:d3:0d:b9:98:4b:50:9e:5d:ce:f1:eb:03:
78:20:8a:94:77:0c:b7:8a:fd:cc:fa:38:67:2a:cb:
09:88:2f:5c:cd:47:22:95:01:c1:2a:89:ce:18:99:
0e:70:24:e6:0c:9f:d6:84:00:cf:fe:65:83:f4:f4:
ff:48:fe:99:9e:58:90:a8:06:09:67:23:c7:74:11:
9c:7d:30:d8:c4:38:c3:d3:a0:48:5b:4f:2b:4d:6c:
47:3a:15:de:b9:40:9f:1c:39:e1:fa:66:a9:e2:d2:
08:30:3f:8b:0e:0f:80:0c:2c:49:df:88:8e:4f:62:
54:5c:e2:76:2a:ce:06:d5:f8:4d:04:37:40:2f:e5:
9b:d6:e3:e3:4e:c4:33:db:5f:c9:f7:c8:f3:53:ab:
81:3a:08:d7:d8:c2:87:f1:f2:ef:6c:eb:c7:2f:c8:
17:26:7d:ab:6a:38:d0:31:ae:a0:61:d4:eb:1c:f6:
aa:df:dd:30:a5:8d:27:f3:cf:01:92:f7:1e:90:11:
bb:eb:59:f6:56:08:04:de:46:29:6f:db:fa:76:91:
83:d5:4b:fb:56:87:d8:da:23:cc:e6:4d:58:71:03:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:FF:E2:90:78:DE:7A:EA:CC:88:97:93:D8:8B:A3:EA:9B:02:A0
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:b4:ce:de:35:95:6e:f8:0f:0a:7c:ae:04:72:44:90:d0:
f6:49:38:9b:eb:3a:4f:37:d5:f5:7b:b4:65:ef:56:d0:02:95:
31:24:72:a5:1d:ee:7a:52:65:79:41:7c:bf:2c:59:13:47:99:
46:ac:58:ff:ab:13:97:0c:34:74:65:14:36:d5:1c:4a:1a:b6:
9c:87:ba:be:5d:3e:e7:6f:68:ca:3f:fd:05:49:e8:9c:50:1d:
a3:53:83:de:1d:8d:32:55:7d:16:7a:27:92:04:84:56:26:98:
b0:97:68:10:b4:ad:ce:ba:23:eb:a1:51:25:4f:b8:65:88:d9:
d7:9e:cd:b9:c3:41:9d:92:69:29:1a:7b:41:a9:e0:c6:53:70:
4d:3a:08:4f:cb:17:40:de:1f:f0:c7:e4:88:25:72:2b:82:ed:
c7:c1:22:df:e8:2a:99:49:e5:38:99:bf:ea:d6:8c:52:ac:cf:
64:65:00:ea:61:69:a9:e9:8d:2a:b4:5e:39:d3:40:b7:aa:6c:
0b:76:34:6b:38:79:4f:11:07:ed:58:34:3e:e9:c3:41:33:d2:
5a:fc:9c:c9:e5:54:fb:a4:ef:7e:c2:4b:b2:f0:2e:62:c7:2a:
1d:9c:d3:3c:a9:d8:29:7e:2d:c7:16:e9:b7:3b:5f:cd:cb:20:
1b:bc:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:30 2025 by rpki-client