Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: xw5Qr+T9TMgkY2S+JznZCSMYUlQEEUpZj4AKFYjBR7k=
Subject key identifier: BF:1B:89:AE:A5:44:CB:41:73:85:BD:50:B6:57:63:88:ED:47:F5:82
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0197B6A17B8C7464A0E956A5E964AF681ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 15D8
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 6HVs4e44WTYN0SjQz8bcZcsvNtEwN2V35AxhhWsSze8=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7b:8c:74:64:a0:e9:56:a5:e9:64:af:68:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=bf1b89aea544cb417385bd50b6576388ed47f582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:86:8d:9c:e8:85:c2:dd:af:48:4b:1d:0a:
34:96:5e:21:2a:e3:df:35:3c:10:02:52:05:49:1d:
f9:e4:38:7a:76:b9:c0:27:d1:b1:60:b9:79:74:e7:
b9:1b:d6:ea:6b:87:a7:cc:d9:e5:1e:ff:21:95:a6:
78:9b:33:78:7a:b4:b4:d8:aa:89:22:ce:ed:3c:13:
45:1f:af:a9:27:5c:d0:54:71:9e:0e:12:e2:8e:64:
1e:b7:d7:35:38:71:2d:3c:1f:83:cb:e7:a7:da:a5:
76:bc:fa:44:33:9b:10:77:95:02:51:53:d5:40:ec:
67:56:62:29:75:42:d6:81:a1:4d:d3:6c:a2:f2:28:
3e:cb:7c:77:cb:46:6e:39:da:54:8b:a0:07:58:6f:
f7:78:95:ec:2c:74:2c:4f:e8:d2:e9:64:e5:fb:f9:
6e:83:f5:53:b7:1d:88:22:ad:47:72:cd:29:f8:b8:
8f:3d:8c:c8:e6:72:92:ea:0c:e9:2d:90:b6:65:24:
91:d6:90:65:4f:aa:41:2d:1a:69:ae:00:64:bd:c3:
a1:37:f3:df:b4:46:d9:4b:56:6c:a9:5b:b1:2e:10:
00:e2:a0:b4:e9:a6:ee:8e:9e:2f:69:68:ed:25:8c:
ab:ca:a5:64:ad:75:8e:20:ec:15:a7:60:09:02:39:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:89:AE:A5:44:CB:41:73:85:BD:50:B6:57:63:88:ED:47:F5:82
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:79:8b:5e:b5:48:97:ec:fa:31:22:b0:54:63:85:4d:ca:
cf:81:1f:5f:42:f1:60:49:64:de:f6:b0:09:9c:bf:19:8a:66:
68:f2:c7:ba:79:e8:07:ec:52:32:e8:47:08:84:e4:f1:c3:4b:
8e:5c:bc:49:65:66:ef:82:ee:a3:5d:39:a3:c1:0c:a4:41:b0:
7e:c0:da:52:41:b1:9c:bd:b5:35:af:9a:35:84:ff:59:9a:d8:
f2:f8:d1:5f:f0:02:1b:f5:68:e8:d5:01:1f:e3:e6:61:21:99:
91:ce:a7:ef:45:b6:0d:de:da:05:dc:51:7a:03:c3:14:c9:6a:
42:85:a6:d9:23:b2:8c:22:e6:be:f8:6b:02:42:c4:39:e8:df:
d7:37:37:e2:dd:11:53:d3:af:73:80:4f:3b:08:ec:6d:de:2f:
de:48:2a:bc:3e:a6:cf:13:fd:4c:e6:2f:10:b6:65:f6:60:f7:
52:5a:4f:65:3f:ac:0a:2d:f4:04:42:f1:31:48:fb:16:ca:85:
da:ba:f3:c7:d5:32:56:ee:bb:d5:e9:8d:25:83:12:ed:0d:ca:
23:58:12:be:a0:dd:69:12:e8:6c:e7:18:b4:36:32:7c:ad:d3:
21:8f:ec:5c:42:9e:49:e3:44:ef:39:79:36:40:cf:7d:b0:66:
c8:36:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:34 2025 by rpki-client