Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: chdE3CxmtiF5f4aZCXWAPr1rd/473dUDB8c0WPDI2a4=
Subject key identifier: DF:0D:1D:4B:F1:D0:F3:D3:E2:39:6D:9F:85:97:67:95:E5:BB:28:7F
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0197B7452512FF622D53DB170E66F6A32443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 01F4
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: p/FFID71kIkoGbTrm25w8tmXsAsBHBznJjVMZdTJge8=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:25:12:ff:62:2d:53:db:17:0e:66:f6:a3:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=df0d1d4bf1d0f3d3e2396d9f85976795e5bb287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:11:17:af:37:13:e9:0c:a3:29:69:e7:a6:
2c:be:08:bc:7f:55:a0:55:f8:97:5e:c2:8e:7f:8d:
dd:fd:5b:ee:01:a8:4a:3f:7a:0c:d7:71:05:91:b6:
c7:e7:1c:f7:52:34:b5:32:37:dc:88:52:62:f6:04:
5b:8e:da:c5:37:b7:e3:3a:e4:d2:ce:9c:57:60:10:
71:af:8c:91:d8:92:d8:56:3e:d2:ef:16:07:85:a7:
62:e7:6a:18:82:f5:14:04:f5:7c:53:db:14:bf:a5:
cd:4e:0c:13:f0:5b:1f:e2:0a:35:25:e7:71:8e:40:
94:ef:2c:6c:68:e8:55:c4:2a:82:da:7d:8f:a8:61:
96:c4:ac:2a:ad:73:71:ac:27:c6:e4:0c:13:86:8a:
f2:e6:fa:aa:ad:2a:e4:24:13:c0:c9:59:2c:88:a9:
df:90:4d:d5:4c:b2:2e:76:ed:29:fb:50:32:df:ef:
e8:b9:be:00:df:dd:06:c2:e1:c1:c8:69:da:f2:77:
19:6b:81:99:31:8b:33:bd:86:69:09:94:93:e7:8c:
91:39:1b:88:a3:4a:ad:91:df:91:32:7a:de:89:c6:
e4:f0:7c:8f:3a:03:af:45:01:f1:c4:a9:9d:53:5f:
1c:db:dd:d7:9d:39:a9:d1:df:7e:7e:36:09:12:ef:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:1D:4B:F1:D0:F3:D3:E2:39:6D:9F:85:97:67:95:E5:BB:28:7F
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c5:b8:fc:3a:ba:c9:73:af:5a:ec:fd:ef:32:54:9d:b2:06:
cc:4b:9f:12:ec:16:7e:3b:60:eb:40:48:e4:7a:1a:cc:fa:47:
ac:fd:25:ff:44:4f:3c:b3:8e:c2:64:91:e7:fe:68:2a:cd:8c:
ab:15:0a:63:24:7e:6e:9c:24:7c:ab:83:41:9e:8e:5a:d5:be:
85:4e:62:1a:ff:7d:83:e5:af:98:62:96:89:ec:57:a8:76:8b:
aa:31:72:bb:e3:4f:65:ab:9e:6f:e6:71:6c:06:bf:45:a3:9d:
a1:9d:75:1e:8d:86:c7:04:84:22:ec:4f:90:d8:39:f4:f1:ff:
1f:dd:a9:06:0d:38:2c:7d:15:8f:36:b4:8c:c6:db:67:d4:f4:
86:f8:1d:c1:d0:eb:76:09:8a:f9:b5:e9:a4:44:b1:f8:ce:66:
3c:6d:cb:3b:45:99:3b:7d:f6:9c:68:c3:9b:7a:35:f6:0a:0a:
75:00:9a:65:3d:43:da:c8:ec:59:50:ea:b3:64:a7:02:e2:72:
2e:47:40:cd:12:3d:7a:cd:d5:46:aa:5d:3f:21:9f:7d:1a:dd:
bd:7e:d1:39:b5:78:dd:0d:f2:fd:1c:6a:8f:d2:8c:80:1e:af:
bd:3f:ec:09:8b:43:fa:39:5b:54:85:09:41:bb:2a:ce:62:f3:
3c:af:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:03 2025 by rpki-client