Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: 7eKwr5lPbEGOl34Y6VqVRPHr3Jx0NQY/jUu47CC0qHI=
Subject key identifier: 5B:3D:83:34:36:E9:A7:12:54:DB:96:12:E0:E2:65:99:5D:67:54:3E
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0197B77C1FE3F6A8F5247E8B8DFE5B75CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 0F7C
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: daCRV/n54CalnZ9E9LUTq69ncFez7Enr9lJKo10+PX4=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1f:e3:f6:a8:f5:24:7e:8b:8d:fe:5b:75:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=5b3d833436e9a71254db9612e0e265995d67543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:2e:f9:ec:98:ce:55:6b:57:5b:dc:7c:e2:
ea:22:09:80:36:34:37:90:20:e4:67:64:ac:fc:63:
ff:85:9b:a0:55:f0:ef:17:11:d0:9e:f7:a6:f5:ce:
e0:a7:b4:e0:83:b5:27:cd:11:f8:fd:9a:3f:a3:11:
83:d5:66:1a:08:d7:94:c7:c3:a6:04:99:bf:f3:78:
a7:10:9e:cc:ab:04:38:db:91:89:a2:f3:95:fe:35:
5a:38:76:5d:e0:73:45:b6:31:00:d2:47:5d:46:5d:
65:12:58:87:2c:d7:d5:17:55:01:ef:58:68:fd:aa:
82:ff:26:82:84:8c:d6:2e:70:be:4d:7f:08:a6:79:
ce:e2:3f:c6:bd:dc:f0:92:00:70:7a:e4:7d:49:2b:
f4:62:a3:ca:1c:cc:d0:b3:7d:06:9f:96:05:ae:ec:
c1:ac:04:f5:21:3d:bd:ba:6a:b1:a5:d7:92:76:63:
fa:e9:aa:df:91:b8:30:50:a9:a2:dc:86:85:9d:0d:
80:a2:b0:ab:22:ea:47:b3:46:1b:bb:3a:ec:07:66:
c8:16:5f:c6:e6:72:00:d9:dd:fb:10:24:63:1c:9d:
fb:d9:15:e6:f6:51:c1:5d:da:c5:2c:cd:47:65:cd:
45:09:ae:ba:9d:6a:58:c1:df:52:e1:0e:39:88:55:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:83:34:36:E9:A7:12:54:DB:96:12:E0:E2:65:99:5D:67:54:3E
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7c:b1:55:ff:80:f1:48:c1:39:eb:ab:91:d7:bb:50:8f:11:
84:77:32:4e:83:aa:cf:2e:db:be:78:aa:8a:b5:58:b4:c3:65:
89:5b:b0:0d:8e:35:25:71:1c:d9:f5:0c:fc:8c:50:b4:9e:d1:
8e:e4:fd:b0:9c:79:8a:9e:1b:11:3d:a3:45:01:0c:e8:c3:35:
b9:8b:f0:03:a8:4e:82:2a:8a:96:26:0d:b6:2e:7f:e8:64:b7:
5f:1c:a1:17:90:9e:14:18:5c:29:18:28:88:6c:b0:01:b2:38:
2d:4b:9d:c5:8e:b2:38:fc:cc:ca:76:21:d0:67:fe:ef:63:8c:
d9:ab:10:20:9a:64:f9:c1:96:85:8d:46:b2:db:e0:c3:af:0d:
69:20:a2:4e:ac:ad:1c:a4:6c:e9:57:7d:ed:dd:8b:26:38:a4:
44:cf:3e:d0:77:c3:54:1a:97:da:e2:94:0e:d9:4b:69:2a:f3:
b6:b4:32:3b:22:87:6c:35:46:80:9e:42:99:53:c9:db:55:b4:
72:10:f9:ad:95:98:62:8b:aa:e7:3d:0d:02:67:8f:42:7b:56:
46:06:6d:6f:1c:03:f2:59:6a:88:23:35:fb:ed:1d:14:08:f3:
b3:4d:13:b7:15:d0:3c:aa:20:33:b2:e9:7d:68:6b:86:62:db:
aa:51:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:25 2025 by rpki-client