Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: 9rAc+fW2ivgUj+/eTEJivdTr9J10qw+8gr4+AeVkm64=
Subject key identifier: 8A:AA:E1:E3:2B:46:3D:93:E8:DF:D2:41:7C:82:12:FC:84:BF:FB:CA
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0197B8FD6FC1C4ED787FDA7C3503B3594E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0EE0
Signing time: Sun 29 Jun 2025 00:01:46 +0000
Manifest this update: Sun 29 Jun 2025 00:01:46 +0000
Manifest next update: Mon 30 Jun 2025 00:01:46 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: t/1SRMOaTzo5cG1kBrDsRnvYfntJE8nYlLxQCkYQh7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:6f:c1:c4:ed:78:7f:da:7c:35:03:b3:59:4e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 29 00:01:46 2025 GMT
Not After : Jun 30 00:01:46 2025 GMT
Subject: CN=8aaae1e32b463d93e8dfd2417c8212fc84bffbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:2f:e3:d0:81:ec:03:e4:ff:1f:a1:ca:f6:
ef:ee:e9:bc:2f:74:99:f8:35:08:e2:81:47:17:a5:
1e:c8:53:3a:2b:e5:25:1b:9b:ee:51:5a:04:6c:b7:
2a:52:26:5c:2b:f8:2e:bd:16:d2:94:0b:84:cd:bd:
dd:da:49:80:d8:55:56:45:7c:a1:a2:eb:d7:ef:cc:
92:31:02:c2:c4:c6:b3:ec:f1:92:b8:14:a6:5b:0e:
86:f7:07:71:e3:bc:8c:a8:2f:d0:fd:16:ea:f6:da:
bd:88:dd:6b:8c:c6:ed:ac:74:75:05:80:4f:62:e4:
87:f6:25:d7:96:4c:18:d2:73:4d:b4:cc:88:1e:c6:
a0:b4:72:22:5b:1d:83:22:45:b5:c7:3e:4e:33:72:
44:b9:c5:de:4e:90:d6:e3:33:b8:f2:45:94:b1:90:
5e:9d:ff:53:da:8a:5d:26:82:de:5d:52:8c:f6:a5:
05:87:fe:db:36:f1:b6:fc:52:32:0b:6f:0d:97:7c:
45:f9:bb:50:cf:43:78:90:6d:a1:33:71:8c:97:b6:
1f:20:b0:80:1e:33:f2:c4:cf:e2:56:ea:9b:e7:ea:
00:52:a1:28:a7:b3:de:fe:46:78:5b:e5:56:89:1d:
df:2d:c0:ce:99:14:91:ee:3e:b1:15:97:df:a6:5f:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:E1:E3:2B:46:3D:93:E8:DF:D2:41:7C:82:12:FC:84:BF:FB:CA
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:3e:a0:b3:26:27:c8:c8:53:14:c3:0d:c0:28:42:c9:66:
83:b5:78:eb:13:be:d3:42:b0:9d:4a:9c:21:01:9f:b0:39:04:
af:bc:db:4d:00:26:76:c9:a1:4f:f0:a8:6c:e4:2c:1c:4d:7d:
fc:7d:b2:48:7c:e7:a2:6b:ee:32:ed:93:bd:63:06:f1:03:49:
07:ca:7f:ec:09:a6:45:80:91:48:3e:94:99:55:d5:12:ef:b1:
2b:9e:7f:89:c2:89:b9:17:91:aa:18:da:d7:d9:cd:19:13:d0:
bb:3c:10:6c:b4:a6:1e:f9:2e:63:3b:03:52:e4:ee:fa:5f:40:
15:9a:c1:08:f7:cb:3a:2a:1d:9a:76:1e:32:06:f3:b8:ae:c5:
60:64:12:89:45:56:00:16:19:6e:8a:9c:d6:af:ac:85:c8:71:
1e:97:cd:9f:45:d0:b9:ad:b0:6d:21:3b:03:ce:eb:95:df:63:
5b:92:c3:d4:56:f9:c6:0d:15:7b:33:a6:62:ac:5a:72:81:e9:
a4:02:88:9d:83:e4:e1:12:98:8e:48:41:cf:ec:1c:4e:dd:0d:
97:82:d0:ee:25:4e:dc:91:ba:3c:0e:50:c8:1e:47:2e:fc:5c:
e3:cb:35:82:d5:54:c4:27:d0:91:8a:aa:29:8a:bd:eb:67:e6:
58:1b:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:16 2025 by rpki-client