Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: yA/qJTI5V3ELzsLT5n4Rr/1/Q9InCRXpS4pw74ibNjM=
Subject key identifier: DD:45:F3:77:A3:0D:DD:0E:70:16:BF:C9:83:2B:C4:77:11:3D:10:38
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0197B6A0B4DCFEF68E3B73489FF8609F26FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 14F4
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: n8SoX9XOCbgC+VjAN4egxhloyoWuOVSxWn/WHYb4ETo=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:dc:fe:f6:8e:3b:73:48:9f:f8:60:9f:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=dd45f377a30ddd0e7016bfc9832bc477113d1038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:8e:f1:e4:1f:6f:e6:e4:7c:85:9e:5d:bb:
9d:11:21:bb:ad:22:e7:4b:b3:b2:9e:f9:f8:0b:a8:
a9:0a:b9:e3:9e:25:56:8a:ff:5c:64:c9:de:55:e7:
ae:d8:fe:7d:0e:4e:ff:e6:57:e9:6c:2e:27:ea:e9:
92:4f:e8:62:6b:f5:55:ae:9f:77:cf:fa:ae:67:0b:
d9:69:4c:25:3c:f7:61:51:eb:db:34:3c:48:2c:b6:
dd:7a:43:95:0a:dc:b7:a2:bf:f9:d7:8e:78:64:a6:
24:c6:e3:d3:de:89:58:80:cb:2b:e6:00:5b:a5:07:
e9:c9:94:3e:c2:1e:03:0f:44:e5:86:fa:2a:ea:38:
f1:62:f9:06:e7:2c:49:fd:dc:3e:9d:0a:2d:b8:2e:
7e:d3:4c:be:9b:f0:43:db:4c:7e:43:44:4c:05:a8:
05:13:75:75:7a:71:72:d4:9a:52:2c:68:bd:29:cb:
7a:83:66:d1:34:92:ba:bb:e7:2d:e4:ea:55:3c:47:
07:1d:00:cd:8b:0b:6d:0b:6c:9b:48:16:e8:53:b2:
ff:a0:cf:1a:4f:0b:0f:27:0f:c0:68:9e:da:5d:f9:
44:ea:ab:75:31:3b:22:b4:31:ec:b4:3c:32:ac:fd:
2e:15:11:4c:86:f8:46:a0:b9:ae:18:d1:2a:2a:b3:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:F3:77:A3:0D:DD:0E:70:16:BF:C9:83:2B:C4:77:11:3D:10:38
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:28:a1:28:c7:a0:f8:c4:97:0e:f5:fd:3c:cd:a0:db:f7:
08:8e:89:39:4a:e8:69:e3:f6:f9:32:bd:7c:8e:55:06:04:2b:
78:14:ec:8e:da:f7:31:88:f1:a1:80:5c:01:8a:ba:c2:7a:23:
27:c9:ea:5f:16:f6:ae:7f:3a:79:12:c8:ff:e1:fa:ee:38:12:
8a:d8:3e:75:75:ad:f3:98:c8:ba:c8:8c:c6:f6:db:a2:64:be:
2f:5c:35:18:57:ad:a3:fe:ce:5e:69:05:46:94:99:64:a5:d8:
e3:4b:22:2c:11:17:52:a0:94:60:cd:02:8c:4d:8d:a0:cc:3e:
d0:78:46:fd:17:4c:38:13:ef:81:ad:21:72:bb:63:32:67:47:
2d:08:33:e8:29:bf:d7:3a:28:e7:69:1c:1e:24:4f:ad:96:07:
4c:f9:b2:d0:8f:85:87:f3:fc:52:a4:52:59:b6:c7:f1:2f:2b:
3b:07:2c:bf:73:89:7e:0f:df:88:f9:37:0e:5d:55:72:f2:8d:
f5:99:e8:f1:26:d1:ba:bc:99:ab:0b:1d:95:7a:22:49:cd:c9:
61:58:92:7d:d3:9e:84:58:72:3b:1d:9f:02:2d:89:06:53:7f:
7d:8b:fc:66:25:f9:9e:a5:e0:c3:31:05:be:ac:74:a0:16:f0:
72:05:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:04 2025 by rpki-client