Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: 1gzNIPDVmCM/vX9z8xETTGYxhS9AUFdANDzP8W2rqnU=
Subject key identifier: 1D:6B:CE:60:CD:D4:8F:95:F8:A2:8F:30:29:A9:FD:EF:37:78:05:36
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 0197B6A1DDBBB159A19D7CD00ADA6418F6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 29
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: 9yfQ9QLRNOga68aDZpnNUhYm810D6Cm4yVydo7Me5PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:dd:bb:b1:59:a1:9d:7c:d0:0a:da:64:18:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=1d6bce60cdd48f95f8a28f3029a9fdef37780536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:85:93:ae:d5:45:82:9b:6d:32:f4:c6:d1:
88:ef:ee:b0:ff:47:b5:cc:97:94:f9:dd:95:20:5b:
ba:bf:07:9d:1d:eb:3e:0f:0e:2f:7f:09:79:d6:b3:
00:fb:06:75:88:63:08:91:88:5e:7f:c4:a1:38:ee:
38:68:f7:cb:f1:7c:3e:b7:00:c1:09:1c:c1:e0:6c:
f3:41:ec:34:43:44:41:7b:26:ce:d2:f4:c1:8d:3b:
a1:10:52:b3:d4:1d:15:8d:93:ce:c1:6b:7d:10:82:
5d:2d:2f:87:81:4d:28:00:0d:e0:d1:37:7f:11:5b:
1c:a9:78:02:c1:63:93:67:dc:d4:27:33:4f:83:a6:
09:d3:20:6d:97:fe:2a:1a:eb:78:1b:ac:92:95:55:
af:92:a0:8b:02:17:24:5c:a8:e3:f6:dc:94:ee:ad:
2e:07:a0:cb:3e:d8:dc:14:6c:d9:86:d8:a2:c9:38:
a0:ba:ba:db:16:21:bd:09:61:c3:0c:13:fc:94:c4:
43:07:83:5a:04:e4:6f:05:aa:b2:59:7b:a1:ad:67:
e6:9c:c3:32:40:a0:8a:8b:02:3f:2e:c0:69:1b:e1:
86:c6:57:be:a8:5f:0e:ec:9d:45:0e:aa:ec:2c:ac:
ae:56:4f:d6:e6:93:65:97:50:cd:c4:68:b3:f5:e8:
9f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6B:CE:60:CD:D4:8F:95:F8:A2:8F:30:29:A9:FD:EF:37:78:05:36
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ea:e0:64:ad:2a:60:58:6a:91:04:61:5b:bd:c0:4b:43:14:
02:d5:98:ea:87:c3:9b:8a:f8:22:15:fb:87:3a:0a:e8:c5:55:
77:36:85:8d:6f:8e:da:d4:f1:23:4a:00:89:46:8d:35:6a:fc:
25:27:38:a6:28:52:a8:4b:16:78:01:a7:40:bf:a9:8d:c3:ab:
a3:e8:67:6e:9c:7b:40:55:7a:36:05:a3:29:cc:58:57:a2:3a:
9f:d6:ea:ca:06:a5:28:ae:b5:fa:2b:9f:b9:9a:84:93:d6:b7:
42:9e:35:c7:75:80:81:e4:96:1a:14:ff:8b:3f:60:5d:3f:76:
df:05:6f:8b:d4:db:f7:79:a2:91:1b:a5:19:8b:de:b3:bd:4f:
ec:2a:a7:f4:17:87:8a:cf:c3:d2:33:aa:6f:72:a2:0b:07:4f:
b3:98:52:76:be:a3:70:b3:10:43:cd:2f:ac:c0:9f:65:e9:6c:
b6:eb:18:ad:de:ee:db:cf:20:cc:50:4e:b4:c9:b7:24:56:51:
7d:58:35:29:fd:ae:6b:3a:9d:2d:6a:d4:5e:ae:04:29:f0:9c:
50:08:69:b8:16:9c:eb:01:46:13:54:9b:db:6d:0f:ce:82:5e:
9a:f0:0c:19:2d:0d:7c:5a:28:d7:0c:c8:88:07:32:2d:01:b4:
ad:74:d4:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2od27sVmhnXzQCtpkGPbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi
ZWNlNDUwHhcNMjUwNjI4MTMwMjMwWhcNMjUwNjI5MTMwMjMwWjAzMTEwLwYDVQQD
EygxZDZiY2U2MGNkZDQ4Zjk1ZjhhMjhmMzAyOWE5ZmRlZjM3NzgwNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26aFk67VRYKbbTL0xtGI7+6w/0e1
zJeU+d2VIFu6vwedHes+Dw4vfwl51rMA+wZ1iGMIkYhef8ShOO44aPfL8Xw+twDB
CRzB4GzzQew0Q0RBeybO0vTBjTuhEFKz1B0VjZPOwWt9EIJdLS+HgU0oAA3g0Td/
EVscqXgCwWOTZ9zUJzNPg6YJ0yBtl/4qGut4G6ySlVWvkqCLAhckXKjj9tyU7q0u
B6DLPtjcFGzZhtiiyTigurrbFiG9CWHDDBP8lMRDB4NaBORvBaqyWXuhrWfmnMMy
QKCKiwI/LsBpG+GGxle+qF8O7J1FDqrsLKyuVk/W5pNll1DNxGiz9eifrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1rzmDN1I+V+KKPMCmp/e83eAU2MB8GA1UdIwQY
MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt
ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl
LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOrgZK0q
YFhqkQRhW73AS0MUAtWY6ofDm4r4IhX7hzoK6MVVdzaFjW+O2tTxI0oAiUaNNWr8
JSc4pihSqEsWeAGnQL+pjcOro+hnbpx7QFV6NgWjKcxYV6I6n9bqygalKK61+iuf
uZqEk9a3Qp41x3WAgeSWGhT/iz9gXT923wVvi9Tb93mikRulGYves71P7Cqn9BeH
is/D0jOqb3KiCwdPs5hSdr6jcLMQQ80vrMCfZelstusYrd7u288gzFBOtMm3JFZR
fVg1Kf2uazqdLWrUXq4EKfCcUAhpuBac6wFGE1Sb220PzoJemvAMGS0NfFoo1wzI
iAcyLQG0rXTUaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:19 2025 by rpki-client