Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: pjM1zWrkpoDYd/CNcAYVFA0UlUZrKN3mtyaSYs36sB4=
Subject key identifier: 30:E1:36:3F:6D:1A:43:00:99:A0:F7:A6:68:21:C2:58:C3:E0:54:C7
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 0197B7EAC7001A89C850B0D3260F9E401031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0B60
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: UoCUltwxOXVtXkGw7+zzP9FMv9ZBXZHq6ul01PGFMT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c7:00:1a:89:c8:50:b0:d3:26:0f:9e:40:10:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=30e1363f6d1a430099a0f7a66821c258c3e054c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:ce:91:74:0b:43:b2:b5:4d:e1:23:8a:7c:
16:84:de:4b:31:4d:67:9c:22:e1:ed:55:f9:1b:d6:
62:3a:20:f6:05:ea:78:be:61:78:d4:ec:ae:7b:76:
0e:19:ad:58:9d:7b:15:ed:b8:6f:3b:43:17:da:40:
7f:e9:d2:0a:24:de:c7:de:d1:eb:29:ca:0a:da:ac:
46:72:e5:50:17:ab:ba:e4:08:af:1f:51:3e:e2:3c:
55:d7:fc:f0:49:99:c3:37:dc:eb:4a:ac:99:58:72:
9a:50:01:c2:3a:32:1e:41:47:2a:ac:f1:c9:9d:2d:
92:45:5c:9c:56:92:01:6d:bc:d5:ee:78:59:aa:b4:
ec:24:0a:b7:2e:66:a7:ab:d1:d8:aa:01:b3:6b:16:
e3:6d:17:34:1b:c8:de:0f:dd:d5:30:82:ae:43:94:
a2:ee:ec:c1:42:1d:b7:96:6e:8c:96:f3:c1:aa:b0:
df:4d:03:f8:62:30:2b:75:5c:30:c7:a0:08:f9:f4:
5d:2c:cb:27:22:fd:6b:a9:25:95:c7:56:c1:18:3f:
f9:b7:e9:e1:0f:d7:a7:55:09:1c:3b:e0:16:63:75:
d2:52:ed:53:3e:75:26:cf:79:22:5c:a8:22:2d:d9:
0e:2d:23:f3:24:b4:40:1e:58:ec:b1:85:2f:6a:f5:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:36:3F:6D:1A:43:00:99:A0:F7:A6:68:21:C2:58:C3:E0:54:C7
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:a9:5a:f4:29:07:d7:c4:3a:d6:2f:06:9b:71:11:ea:eb:
2f:28:4a:e4:63:0b:8d:e8:35:6c:9b:aa:09:61:b8:9a:e9:08:
72:e9:17:6a:cf:26:f1:aa:52:a5:9f:07:ad:5e:cc:03:c6:b0:
fd:4a:db:af:54:2d:12:8d:cc:d9:f1:ce:66:f9:8c:44:46:5d:
f6:be:a8:ad:f3:11:38:7f:9c:bb:40:bb:c2:11:26:98:91:80:
4a:0d:4a:e8:f0:f9:fc:52:ea:99:f5:d1:a5:4a:5c:1c:ac:72:
88:e3:17:a6:6d:92:22:42:b1:1b:72:c7:e0:27:e4:d1:89:3f:
2e:b7:12:94:85:a2:09:71:a5:3f:87:98:f7:ee:e8:56:8d:ee:
9e:ec:13:2f:11:9f:89:95:30:90:90:85:65:c3:d3:20:5c:d4:
8c:7d:eb:fa:a4:82:04:f4:35:ae:2b:71:88:76:0b:32:2c:21:
cf:51:7a:7b:1a:f5:27:ba:64:19:aa:38:2e:0f:27:cd:2e:c7:
f2:c9:20:1f:c2:69:2f:17:ad:cb:5d:62:a1:b6:21:a7:52:0e:
0c:d7:68:28:cb:fa:29:c2:e8:f2:4f:5c:f6:f4:c0:58:75:31:
ba:22:b9:06:e9:11:0c:54:e9:8b:fd:02:63:00:56:1a:16:01:
c5:ae:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:02 2025 by rpki-client