Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: T9Z2NiG0OHYWUWfTcXxMJa9GK35W52aWw62EoM/Rshg=
Subject key identifier: 5D:55:60:38:70:E0:C1:F5:AD:CE:3B:69:3B:C7:2A:B3:87:02:A5:60
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 0197B88ED2592EE1CDB87512A54521462A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:00:57 +0000
Manifest this update: Sat 28 Jun 2025 22:00:57 +0000
Manifest next update: Sun 29 Jun 2025 22:00:57 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: y9MNhiRv5G4d9eJ3YIGdVo4qa8PTt6+CCCdZZAAW63Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d2:59:2e:e1:cd:b8:75:12:a5:45:21:46:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Jun 28 22:00:57 2025 GMT
Not After : Jun 29 22:00:57 2025 GMT
Subject: CN=5d55603870e0c1f5adce3b693bc72ab38702a560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:f2:4c:73:77:9c:f7:ee:81:c0:63:6e:1d:
9a:b3:9c:27:f0:53:5b:61:83:8a:32:18:be:bf:13:
db:f6:53:22:2c:2e:3b:cd:43:54:d9:82:68:a5:5c:
fa:85:65:e6:4a:0d:78:94:17:d5:ac:b3:70:78:f5:
95:e2:01:23:e3:01:fd:f6:ad:5b:12:6a:aa:43:56:
3f:3b:79:67:67:92:a3:66:5e:b2:af:d1:a9:70:84:
4f:84:ab:23:85:c8:ea:61:01:be:4a:58:83:6e:74:
c2:dd:b9:e8:14:48:12:14:d1:bd:76:18:f9:84:ca:
b8:4a:cc:e0:03:7e:1f:1f:7a:b9:64:eb:75:4a:90:
cc:64:cf:03:f1:05:51:33:a0:c0:c1:c1:a8:4f:63:
68:e7:03:c8:45:03:9c:fd:86:61:cb:6d:08:e7:73:
07:5c:fa:0d:19:7d:db:a3:88:6d:b2:75:3a:f4:16:
2f:ad:9d:c3:1e:7d:aa:9c:29:d8:65:8a:cd:c7:2d:
60:94:d9:fb:a8:c2:9c:90:69:98:68:87:c7:af:83:
0f:3e:7c:8e:97:29:ec:dd:1b:c4:3d:e0:35:c9:d6:
07:a2:ca:ce:51:08:be:7e:e9:0a:75:b5:35:00:89:
f1:50:01:0e:88:5d:8b:48:6d:3d:1e:f3:58:47:44:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:60:38:70:E0:C1:F5:AD:CE:3B:69:3B:C7:2A:B3:87:02:A5:60
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6e:02:c9:1f:9d:1d:45:af:da:12:3c:c8:8a:69:08:26:d7:
0d:0f:e9:a0:b5:25:2a:b6:ec:e1:b0:3c:cc:bf:1c:d1:e2:2b:
16:b8:9f:69:6f:af:66:73:f6:0c:c5:9a:fa:84:dc:9b:d7:1f:
8e:49:95:63:de:de:75:91:fa:c3:98:74:69:1b:3f:ab:85:10:
65:e8:1e:19:27:2d:43:84:11:bc:8a:60:68:ec:30:09:f4:f1:
96:65:3e:b5:d5:40:8d:d3:4b:a8:1e:17:e7:3a:72:48:20:0f:
63:f7:c7:af:f8:35:73:d2:27:4f:6a:db:84:c8:a9:69:39:a2:
f2:de:30:32:8e:5e:ed:d2:23:a8:8f:e9:90:94:81:97:84:00:
ef:ca:60:3a:5f:57:4f:b2:32:77:bc:f5:18:4c:35:d1:0a:8f:
5e:60:c7:d1:19:1f:96:be:b7:73:f0:1c:c3:18:d4:b8:71:c9:
29:1d:36:69:06:5c:65:9a:a7:8b:40:86:cb:5b:3c:9d:bc:f4:
3a:9b:bf:f7:e3:2c:10:62:08:4f:79:1c:0a:70:c2:d1:fd:8b:
21:44:01:a6:fc:db:19:80:e3:e1:8d:cf:75:49:e1:09:2c:6f:
77:27:5d:3d:45:24:57:35:01:7a:9a:ed:29:3e:2e:12:ae:bd:
e6:6b:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client