
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 4PVxeHtVhJOHz3IL5IvkkKz6M+PlF86APrcaVquczqw=
Subject key identifier: B8:AB:32:BF:66:ED:AD:34:E0:94:67:7B:08:85:44:80:43:04:A6:93
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 01987E6595557004CF2B8725E6E43C0CB1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0176
Signing time: Wed 06 Aug 2025 08:00:43 +0000
Manifest this update: Wed 06 Aug 2025 08:00:43 +0000
Manifest next update: Thu 07 Aug 2025 08:00:43 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: hF6fS2Uz4ztP5H37dlDTu5y1KodKoYji49UFkkv0fp8=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:95:55:70:04:cf:2b:87:25:e6:e4:3c:0c:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Aug 6 08:00:43 2025 GMT
Not After : Aug 7 08:00:43 2025 GMT
Subject: CN=b8ab32bf66edad34e094677b088544804304a693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:0b:c8:26:ad:f7:06:ab:57:a4:80:27:13:
36:40:e6:c1:3a:54:3e:13:c4:81:5e:fe:65:b0:fd:
6b:80:7b:c8:70:7a:d8:3f:c8:3b:20:2c:b4:8c:5c:
5a:af:c6:86:7d:5d:06:9c:70:5b:e8:a3:46:d4:b4:
cf:51:4c:e1:67:52:6d:ff:ca:01:73:ff:d6:13:06:
63:2d:c8:3a:03:e1:73:a8:8a:32:2e:2b:9f:14:77:
c5:3e:11:b7:39:69:2d:36:3c:ad:0f:fb:4f:3b:3c:
73:a7:ef:f6:59:cc:9a:a4:47:9a:e2:22:d7:61:a3:
b8:d6:bc:f6:ba:07:5f:c8:08:f3:33:0f:ff:ff:c1:
16:48:c0:37:2c:83:7a:aa:20:24:76:77:f4:2b:82:
88:6a:8b:87:22:29:aa:50:eb:d7:b2:09:3a:39:bc:
05:36:1f:1c:82:35:44:c3:1d:e9:f7:e3:23:e6:3e:
75:42:cb:97:bf:9a:07:2e:9d:f0:e9:3f:5c:51:ff:
be:e4:03:50:b9:7f:5c:bf:19:b5:f2:a0:75:0f:40:
c2:71:4c:60:0e:ac:27:be:42:b2:8d:fe:d4:71:5b:
ed:fc:de:75:d9:a3:e8:83:c9:85:e4:36:54:0b:06:
41:88:6d:62:8e:14:2d:2d:c9:df:f3:14:38:03:4a:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:32:BF:66:ED:AD:34:E0:94:67:7B:08:85:44:80:43:04:A6:93
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:43:1d:83:f6:8a:54:7c:21:ef:57:0e:14:5f:a9:f1:38:89:
69:89:61:09:f9:4f:2d:6f:b8:b8:bf:d6:5c:3f:26:5a:07:a0:
4e:95:39:d9:9c:1d:c0:58:2a:6c:56:44:aa:df:20:be:50:81:
1e:fa:e8:ae:fb:7f:3a:23:72:b2:24:9d:96:8c:57:84:71:17:
4c:35:75:63:cc:88:ef:17:d4:50:97:d6:dd:c5:6c:69:63:a8:
27:dc:99:68:75:d3:58:77:71:d2:7a:a8:2e:e3:12:d1:5b:80:
41:8a:5f:bd:f5:cb:ed:7f:d2:42:5e:29:a6:20:ed:de:02:27:
85:cf:61:98:03:08:ff:57:e0:4a:e6:6c:bf:f4:7b:0e:b6:00:
f0:f6:22:40:33:0c:82:ff:c7:e2:66:2a:d9:14:0d:47:c8:b7:
18:9a:64:7c:d5:d8:4b:16:31:d5:53:a3:18:13:28:32:97:24:
21:95:b8:6f:c4:3c:ea:36:30:99:ad:75:87:96:1a:4e:26:70:
bd:6c:22:e0:cf:d9:e6:77:24:a1:a1:d0:7a:c2:2a:d8:36:94:
9a:64:ef:1e:b7:ea:29:49:2f:8c:9c:6e:e5:cb:50:3e:a8:97:
4a:a6:76:5e:ce:bc:60:27:0b:de:d0:98:f4:67:52:f4:10:53:
2d:17:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:50 2025 by rpki-client