Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: PUh1zleaF8aQw2mB6v6MGoEmnMrIdpI90LTJ12xRvQs=
Subject key identifier: B2:6B:64:CE:E2:AA:4D:01:2D:2B:87:A7:3A:77:E2:46:EE:E5:D9:B6
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0197B77C16D032FFA7AD9720C4B5927383A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 0120
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: NR//NVyzZBNQ84Oxxi66PRg+vRHf9VZZGWfXd+Mnxjc=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:16:d0:32:ff:a7:ad:97:20:c4:b5:92:73:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=b26b64cee2aa4d012d2b87a73a77e246eee5d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:4f:f9:35:0c:ea:98:bb:a5:73:bf:ea:c3:
ad:04:92:2e:7a:18:f6:fe:3b:be:75:76:14:b6:0a:
af:69:74:20:7c:7a:a9:61:9a:e7:f3:7f:15:79:4d:
a8:c5:bf:f4:cd:1d:e1:bc:36:45:2f:44:66:17:79:
26:e7:30:a2:42:eb:d1:b3:14:b4:f9:4e:85:0f:b6:
8e:46:4a:6d:66:f1:d2:33:80:d0:3e:14:37:7b:f2:
62:89:8e:18:bc:0d:91:c9:36:a7:e8:16:27:64:e2:
e5:e7:2d:a1:a3:ca:59:6d:aa:2c:d1:ff:93:34:ab:
29:46:a2:e7:4a:3e:17:bc:cc:f0:8e:45:f9:e1:40:
79:6f:b5:a2:c3:58:78:bf:87:aa:5f:59:07:53:af:
ed:51:d1:99:d0:b7:4f:ee:d8:29:88:5b:96:b5:07:
70:6a:c3:8f:71:8c:9f:49:93:bc:6c:63:d0:56:49:
ec:b9:eb:11:1b:fd:fe:4b:7f:38:fa:68:5c:0f:25:
3d:f5:45:6e:96:07:59:d7:9b:38:62:80:d5:37:9f:
95:50:70:1d:25:ac:ab:c8:99:45:f1:81:35:9f:e2:
1c:02:89:7f:61:ef:ea:cf:74:48:43:2d:f7:96:84:
a9:26:31:61:a8:2a:01:a7:4f:9f:c9:87:a6:06:be:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:64:CE:E2:AA:4D:01:2D:2B:87:A7:3A:77:E2:46:EE:E5:D9:B6
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:34:5d:6c:64:1d:eb:ab:b7:5f:fe:7b:d6:5f:d1:e1:15:2f:
7e:20:5d:6a:13:24:58:79:88:4a:6b:75:22:18:f6:98:cb:33:
63:22:2a:c2:a4:50:42:a9:8d:0b:46:d9:89:01:5c:80:97:9e:
41:36:76:2c:4d:f5:e5:44:73:41:dc:29:09:e6:b4:e7:61:8a:
6a:36:6d:51:ee:ec:ee:5d:54:fa:1a:6b:d4:e9:68:e7:1c:af:
f7:bc:f0:cc:15:92:43:18:e0:97:17:63:1a:7f:54:c5:c0:60:
cc:18:b7:65:f7:73:84:59:1c:1c:1b:81:dd:ed:26:72:cb:49:
09:b7:fc:12:6c:31:77:ff:9f:fe:41:9f:ac:77:76:04:9e:1b:
cf:28:62:c5:0b:1a:70:0e:9a:62:eb:c3:c7:6d:62:29:da:8d:
d8:b7:9b:b9:57:69:8c:14:f8:7b:ed:65:5c:fa:7e:2e:7c:ab:
81:f6:3c:fb:0c:d3:88:72:d9:fa:63:f9:5c:30:0b:3e:6e:cb:
e9:d6:17:73:5c:6c:62:b0:0f:57:ef:34:21:cd:3b:3d:48:a0:
10:9c:8e:19:a1:c5:44:bf:c5:65:03:ec:23:18:31:8d:74:34:
eb:24:b4:43:0c:bb:5b:12:66:4c:ee:27:28:d4:39:7e:94:d9:
fe:3e:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:13:57 2025 by rpki-client