Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: EyfY0jDmcB0SK3dssoMKBy1EDfC8ohCcBhjqPJXG1Cw=
Subject key identifier: 53:7E:D0:55:78:9E:0D:57:E6:DE:CF:E3:79:3D:E3:68:01:75:43:2B
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 0197B96A6990A674F769A84A5A6793CFFDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 02:00:48 +0000
Manifest this update: Sun 29 Jun 2025 02:00:48 +0000
Manifest next update: Mon 30 Jun 2025 02:00:48 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: oDvorgS/onAFDhIhZMaSygx2Gsc9jCvclKDVYjDoyCg=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:69:90:a6:74:f7:69:a8:4a:5a:67:93:cf:fd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Jun 29 02:00:48 2025 GMT
Not After : Jun 30 02:00:48 2025 GMT
Subject: CN=537ed055789e0d57e6decfe3793de3680175432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:a4:80:31:14:81:e1:e1:9e:7d:ff:fc:ce:
56:26:49:1b:a5:6e:ce:c2:a6:0a:88:9d:a1:d4:fb:
a6:89:99:42:bf:35:a5:a7:2d:b7:f3:61:b2:85:54:
0d:bf:5c:db:ab:e3:cb:64:00:46:7d:d8:ac:7a:14:
90:e6:88:8f:3d:43:a7:de:85:ff:0a:1d:99:ae:93:
aa:9d:ea:24:6d:a2:29:27:28:3b:5f:f2:e6:69:10:
f1:14:af:91:86:49:ac:c5:63:36:49:cb:cf:2a:80:
a7:99:6e:ce:58:d5:ca:ef:ed:db:e5:3d:be:0c:97:
3c:de:b4:15:79:f5:a8:3f:43:4a:aa:96:51:11:1b:
ba:5f:df:9c:79:9d:e5:7a:5a:d7:ba:34:a3:66:56:
72:69:a5:ac:76:b2:58:5c:74:9a:86:a7:dd:09:ba:
65:48:cf:55:46:86:b1:32:f7:43:a0:e5:d0:71:74:
bc:3b:30:71:5e:3e:ed:fa:cf:2e:21:63:a4:05:d7:
61:fa:f4:2a:3c:34:1a:c8:f9:dc:0d:35:5a:0d:0f:
86:59:c1:3c:fa:1b:c0:0b:76:5b:85:f8:99:b6:8a:
3a:08:02:ec:68:02:dd:b4:ea:47:c6:02:49:03:7b:
9c:10:79:13:07:1b:bd:fb:2f:46:e6:04:d8:74:6a:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:D0:55:78:9E:0D:57:E6:DE:CF:E3:79:3D:E3:68:01:75:43:2B
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:0f:fc:b7:ae:da:c4:87:0f:52:2d:a2:dd:45:5c:7f:8b:
52:8b:c7:e1:d4:cc:9c:d6:12:3f:ab:90:82:1d:9b:cb:e3:30:
a7:cf:aa:52:ed:bd:0f:10:37:96:79:93:f1:67:de:46:56:a7:
d8:cb:2a:26:c4:50:ca:96:0e:f8:2c:9c:18:59:af:7d:52:5e:
16:6b:1a:53:d4:08:00:49:92:b1:f3:fb:62:5b:11:ba:3c:d8:
c1:c5:bf:84:4f:67:62:8d:28:97:19:e5:80:24:05:4e:f4:b2:
59:75:1f:5d:9d:51:6b:9f:1d:58:05:62:0f:d4:6c:19:1b:f6:
1a:24:ec:37:b1:a2:10:4e:9f:19:a4:7e:4d:48:69:84:2b:de:
52:55:50:96:ab:47:3b:65:f2:59:a6:c0:ec:fb:99:c9:ea:82:
00:34:57:e0:d3:e8:98:13:73:81:22:f2:58:ae:1e:0f:25:55:
ec:b2:73:7d:d4:96:2f:26:9b:7c:1a:ac:be:6a:52:93:5e:7e:
fe:17:01:45:6c:eb:16:aa:ec:d8:5d:fa:cd:89:0b:6e:c1:dc:
8e:b5:d8:e6:80:d0:7a:96:4c:f4:d0:36:dd:30:1f:cd:79:bf:
c2:8b:f6:bd:db:25:de:ca:8c:8d:0f:7b:65:d2:eb:bd:c9:7e:
91:3f:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:20 2025 by rpki-client