Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: 8mT3h0oqjknwymBdqCjbiT/6TkzmqlxBjCwpgLl4hDM=
Subject key identifier: 88:9A:2F:1C:82:E7:64:30:57:4D:C4:AF:97:CC:02:DE:74:D8:55:F9
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 0197B70F2C57ED1FF723AC271D800F96CB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 1574
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: UeYKpXI5eR+rqjk4lnIgl/neZ6AsvZn/Gn6d0SL6xuk=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2c:57:ed:1f:f7:23:ac:27:1d:80:0f:96:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=889a2f1c82e76430574dc4af97cc02de74d855f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:4d:ce:b8:60:bf:f8:56:1d:86:c5:37:ec:
b2:6e:dd:f3:2b:d3:6c:cc:15:f7:86:25:fb:52:b3:
9d:b5:05:c4:0e:4c:0b:b8:8a:8a:e1:86:24:88:16:
3c:0c:1e:8f:ac:50:cc:a3:3c:c8:e9:da:88:78:32:
84:0a:4f:1b:12:ba:ef:65:43:0b:63:f7:f9:1d:72:
43:7e:2a:ee:72:4c:98:86:7d:20:2c:19:b5:f4:ba:
66:30:5d:f2:ce:41:64:64:f8:87:25:ca:31:1c:2e:
c4:6a:c6:36:bc:cd:27:01:00:22:46:b9:f9:7c:f5:
4c:c2:1a:a6:8a:2b:db:e9:a3:8b:a6:9e:6a:09:d6:
86:62:f8:93:dc:3d:81:df:8c:ae:ef:98:2b:f5:87:
bd:9c:f7:1a:31:30:3a:fb:72:51:04:e1:93:dd:b2:
9d:30:c4:1f:97:fb:b6:b4:a5:b5:a0:b8:8d:4f:17:
b0:7a:ec:64:7e:00:e9:0b:84:5c:ce:1b:52:41:09:
e9:8d:d0:0e:ca:7e:2e:1b:98:de:28:4a:8b:f1:4e:
cb:bb:1c:f8:11:a0:86:1c:2f:5f:a1:25:cf:36:33:
1a:37:2f:dd:67:b5:12:75:b0:b0:1c:c5:66:9b:95:
23:46:e8:1f:79:6c:52:51:3b:02:55:08:48:9a:f3:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:2F:1C:82:E7:64:30:57:4D:C4:AF:97:CC:02:DE:74:D8:55:F9
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:cf:7d:51:79:a6:20:31:37:19:cf:58:b0:68:22:91:10:
48:67:d6:21:b8:cd:af:a0:9b:7d:0c:17:c1:78:14:00:10:0e:
23:b4:2f:8c:8d:8a:ce:ea:17:db:ad:25:ad:ef:e5:20:25:ab:
01:4b:59:f1:19:22:8b:c4:d1:39:08:b5:40:4e:56:ec:ea:53:
52:e8:2c:c5:7f:b4:2c:2f:70:b6:0d:9f:9b:ac:91:6e:0c:d1:
53:7c:de:9c:6f:22:22:70:ee:99:aa:20:95:47:47:42:06:08:
2e:4f:47:36:e9:0d:bd:2d:62:0e:9f:b1:df:af:bd:d3:2e:f2:
18:45:00:70:e0:45:48:47:b2:d7:29:85:8a:f9:33:7b:ac:d8:
9d:90:99:20:44:10:8a:50:ee:30:44:4e:02:d3:1f:9d:54:70:
84:4a:5e:3e:8f:c8:cf:f2:27:06:34:d5:76:45:44:7f:04:83:
8f:59:00:5f:6a:e2:4a:dd:38:5e:59:7e:d3:1a:2a:29:8c:c0:
23:6c:97:7d:d1:b0:ad:e9:38:92:66:fc:8e:f4:d2:30:f2:59:
4d:01:67:3c:d5:8c:68:19:bd:f8:c0:af:c2:23:4e:a6:1f:9a:
44:54:0d:4c:cb:53:c1:1f:70:0c:c8:ef:04:56:60:23:e9:ed:
8b:90:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:20 2025 by rpki-client