
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: rFvkyPVOfDhG3Yp8cfX4DPLA3M8crqY/+Lm5fenMmIg=
Subject key identifier: B3:43:BA:97:19:CF:F9:DA:66:B7:9F:C5:93:8C:CE:FC:F1:00:DD:CE
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 019768F2DEF643F89E16B05B50BDB1C46C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 129B
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: chtaImGfnG2o92qtd7mR3zFNotX9RiT3H2kM6IURmCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:de:f6:43:f8:9e:16:b0:5b:50:bd:b1:c4:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=b343ba9719cff9da66b79fc5938ccefcf100ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:1f:81:43:49:7b:bb:02:c0:40:3c:33:7a:
1c:af:6a:50:ee:51:9f:41:a5:36:16:6b:ce:b1:75:
0c:a4:fc:cd:b4:d6:64:7f:de:0a:07:e9:f6:57:36:
89:b9:27:e0:a8:89:bb:78:0b:4c:29:34:9b:70:88:
96:8a:98:c7:15:01:29:dd:d7:1d:24:11:8f:9a:4b:
b9:99:cd:c3:c6:45:e9:db:81:a1:9c:89:a0:f5:70:
76:cf:fe:c0:17:60:78:50:9c:4f:a1:a6:8c:32:61:
3d:4a:6c:c7:07:04:c6:78:53:04:72:9a:0a:a2:51:
98:ea:4c:75:cd:ab:d8:d2:19:e5:31:85:3f:99:44:
7f:ea:28:0a:e3:48:5b:1a:c7:44:ee:15:32:08:af:
43:95:6c:79:4b:d9:45:ef:dd:61:08:76:b0:e5:b1:
fe:97:f9:1f:f5:b7:a7:44:5e:61:30:43:d5:c3:14:
a4:5a:7b:e9:c9:50:8a:d1:1a:f5:e8:c3:13:85:4a:
e0:8a:bd:bb:c6:f5:f6:ba:8e:dc:9a:35:ff:db:af:
70:9e:74:76:52:71:88:e6:07:dd:e9:fb:16:06:44:
ef:ee:6f:f3:bc:9e:22:9f:d8:2f:d1:19:cf:4a:c3:
9d:5c:1e:cf:53:f2:bc:39:25:88:5d:21:01:86:1a:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:BA:97:19:CF:F9:DA:66:B7:9F:C5:93:8C:CE:FC:F1:00:DD:CE
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b3:e5:3b:d3:25:7a:fd:31:a5:7a:6f:ef:e1:ec:6d:5a:1c:
83:fd:57:a6:fd:68:36:f4:5a:c1:34:a5:12:f8:25:50:68:bc:
54:4e:84:52:f8:f3:51:49:82:56:c9:34:7c:79:c6:a6:5a:6d:
ae:91:30:c6:3d:0b:eb:6f:76:c1:9d:b5:2d:88:50:84:0e:b1:
70:e1:fc:a3:41:30:9f:60:1d:fe:fe:1c:38:d5:3b:03:04:15:
7b:9a:d1:c7:23:98:79:bc:5b:79:40:f5:23:49:b9:34:6d:14:
59:af:8a:2f:9b:59:7a:06:e4:87:b1:03:b2:97:5b:18:67:b1:
98:00:da:3e:29:3a:ef:22:3a:56:bf:28:cb:99:b7:06:e0:df:
fc:7e:54:5f:a9:3f:d4:05:1d:4e:88:6d:2f:b4:33:8f:28:c0:
a0:5f:85:3b:90:a4:91:8a:dc:53:ba:81:2a:e7:75:80:c4:94:
fc:39:d4:6a:3c:88:b5:3a:e1:4e:6f:27:5a:be:40:9c:bc:44:
3c:d0:a8:fc:cd:80:6f:5b:f6:e6:8a:14:87:f9:32:68:22:8f:
1a:56:2c:8f:a5:92:db:20:41:79:7a:9e:cb:b7:40:cf:af:47:
1d:0c:ef:8b:9d:ea:31:ef:93:21:7e:a8:40:bf:87:84:0a:88:
a1:fe:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:08:54 2025 by rpki-client