Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: 9lW4oA5RNWQh6eAid1meittKHNBfpCkYYiJ9Xwk2YbQ=
Subject key identifier: 8E:04:EB:6E:24:E0:5B:D4:30:95:BB:27:E4:A7:D9:BB:75:03:98:20
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 0197B88F9405FF5BB0D3A7B07BD4AF16FEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 6B
Signing time: Sat 28 Jun 2025 22:01:46 +0000
Manifest this update: Sat 28 Jun 2025 22:01:46 +0000
Manifest next update: Sun 29 Jun 2025 22:01:46 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: f8J3k7IBr3P1Xu2BlXlEa1LEHJRoF/toMUXZ6PICBjA=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:94:05:ff:5b:b0:d3:a7:b0:7b:d4:af:16:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 28 22:01:46 2025 GMT
Not After : Jun 29 22:01:46 2025 GMT
Subject: CN=8e04eb6e24e05bd43095bb27e4a7d9bb75039820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:a1:6b:65:82:5d:07:57:cd:1a:d2:7b:b2:
e2:44:28:3d:87:63:37:92:55:e8:08:64:95:3b:32:
0e:ba:dc:aa:c8:25:2c:7e:e5:c9:61:20:2f:e8:e0:
28:24:d0:20:a4:52:f4:45:7a:de:bd:95:16:23:65:
9b:a5:89:6a:52:59:1a:74:a2:61:a3:50:90:dd:9b:
10:4d:d5:ba:ec:9f:13:6b:1b:ae:f6:8c:01:7c:e2:
ad:b4:ec:ba:98:c7:ef:77:b0:4c:df:12:b0:ef:2c:
f3:f6:ae:4e:30:8b:21:c4:33:b2:5a:c1:fd:cd:68:
fe:ac:86:35:85:01:b9:bd:31:ea:27:b5:87:66:c1:
3d:7e:85:9f:de:d4:d8:4d:ca:55:42:7a:b8:82:8d:
46:33:5b:37:51:55:cc:25:b7:26:b9:44:a7:87:67:
a3:28:36:11:8a:0b:98:cd:47:7f:d4:eb:04:a3:64:
4f:50:f7:a1:0f:6c:8e:d8:dd:3d:d5:e8:03:c6:2d:
4f:ed:c0:67:dd:98:04:2a:d0:ad:2a:58:4b:6e:81:
97:7a:54:19:8a:b2:32:79:dc:19:b0:13:a9:e6:2a:
b5:b7:a7:41:eb:9d:20:ed:83:7f:39:3c:f0:cc:88:
a0:37:49:64:30:ac:9b:21:66:26:19:31:36:0d:99:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:EB:6E:24:E0:5B:D4:30:95:BB:27:E4:A7:D9:BB:75:03:98:20
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:bf:98:ef:e1:1f:b8:d3:dc:ad:8d:e6:6a:03:53:e5:a8:
84:59:3b:9b:ff:06:20:ac:ce:a0:c3:a5:3e:e6:d5:21:c6:16:
5c:24:8c:34:71:ee:f5:eb:cc:4e:05:30:92:08:80:d0:45:65:
99:6f:4c:6e:15:40:91:e8:b4:db:80:05:54:a5:35:13:3a:c2:
38:54:15:b2:b2:7b:89:91:f9:db:35:c2:e4:bc:5f:dd:40:fd:
4f:89:4e:6c:63:f7:1e:dd:db:7c:4f:f1:91:77:3b:30:71:50:
bf:4c:29:8a:b2:d3:8d:6f:5d:75:b8:e6:d4:25:cf:4c:c3:e6:
59:cc:74:df:57:90:45:da:46:fc:c7:5c:50:b7:0d:0c:d6:9f:
fb:34:72:f6:36:92:52:03:80:97:f5:70:9e:79:fe:5a:e9:22:
6c:46:36:0d:11:44:98:5b:e6:d7:14:dd:d6:59:5d:34:d3:a8:
6e:64:ee:a7:60:cb:4b:8f:c4:d2:61:0f:eb:ae:81:f4:7c:06:
07:84:ff:76:81:f5:b0:57:d5:ab:01:64:5c:b2:9a:b7:81:fa:
f5:13:35:06:5f:cb:78:b1:45:06:9e:35:da:53:76:50:a3:bb:
cf:e8:cd:32:1e:73:2e:ad:3c:b4:53:2e:6a:29:4a:0d:65:b6:
09:f1:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:04 2025 by rpki-client