Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: wuZEhtkDGxRslciXoi+H2/BLWQte8kmHtY9Y5vKl71Y=
Subject key identifier: A2:37:52:9B:7A:0F:73:0E:7A:FE:C7:9C:86:AA:D7:C7:E3:CD:45:9C
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01978922EFF798D6ECC994188EFA44857913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 15AF
Signing time: Thu 19 Jun 2025 17:00:57 +0000
Manifest this update: Thu 19 Jun 2025 17:00:57 +0000
Manifest next update: Fri 20 Jun 2025 17:00:57 +0000
Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=)
4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: SqZTdJ2PnfeRX7A7TWLG5u1GVyJfZy+RSY7IJknrJfs=)
5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:ef:f7:98:d6:ec:c9:94:18:8e:fa:44:85:79:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jun 19 17:00:57 2025 GMT
Not After : Jun 20 17:00:57 2025 GMT
Subject: CN=a237529b7a0f730e7afec79c86aad7c7e3cd459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:68:60:65:91:10:22:88:2a:2f:8a:e2:07:
74:3d:b1:ff:b3:fd:fc:c8:1f:5f:53:e4:90:23:c7:
8c:d9:3a:c0:71:fb:33:29:43:d1:1a:22:b4:14:64:
89:a9:a7:de:9c:d2:ab:f7:10:a7:8f:3e:ee:cf:eb:
c8:89:ae:86:7e:44:d5:ec:7c:83:e7:9c:6a:87:06:
cd:c0:bd:1d:c1:04:17:a3:d7:5a:58:4d:3f:8f:6f:
d4:c2:a7:81:d3:fd:39:41:f0:16:bc:1d:a0:fb:c2:
8f:39:79:57:72:87:71:27:1b:16:f3:a0:1c:c1:9d:
e3:76:19:45:19:59:d2:4d:9b:f9:9e:9e:b3:cf:7b:
e7:df:54:58:61:63:8a:b0:3d:9d:6a:a5:b0:a9:1f:
50:36:32:c2:d7:75:49:fd:e4:07:c1:d6:c4:55:70:
fe:71:1c:0b:99:a2:4d:ea:0c:44:fa:90:28:23:44:
39:c8:ac:64:f3:dc:40:c7:02:58:07:c2:c7:26:c0:
62:e2:9e:79:5a:ae:af:b7:ae:60:fa:21:11:27:e6:
5d:97:92:10:94:bb:cd:57:27:b5:be:0d:b1:cf:2d:
34:1b:57:d7:dc:96:88:c3:cd:6e:0d:d1:ce:1d:0e:
32:43:ac:66:0b:de:be:39:77:db:cd:34:a1:32:ea:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:52:9B:7A:0F:73:0E:7A:FE:C7:9C:86:AA:D7:C7:E3:CD:45:9C
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:35:32:28:57:12:be:b8:c3:05:38:a3:45:f0:b4:1f:c8:ea:
38:8d:13:71:ee:ae:0b:25:8a:1b:8c:3c:36:5b:d3:0e:78:a0:
a6:0e:43:2e:e0:f8:71:be:ca:80:d9:2d:e2:16:e7:c2:e8:8d:
ef:fc:c3:76:ac:82:ad:39:7d:91:de:f0:01:08:3d:78:41:6c:
a7:05:fc:32:2d:fe:42:e2:96:c3:ee:23:c6:76:93:1b:6a:8d:
10:b0:7d:c3:12:7e:d6:8d:c2:37:c8:a5:47:ae:5f:6e:53:ba:
6b:6f:b8:bb:8f:34:45:80:02:1b:f8:8a:45:5e:cf:09:bb:59:
fd:18:dc:90:fc:4c:72:c3:64:cd:58:5a:78:5b:07:7f:58:9c:
cf:1b:11:ab:11:7b:5d:62:75:de:28:e6:b5:e2:08:ca:02:b1:
bc:09:cb:ab:9f:bb:29:ad:cc:94:f6:2e:79:3b:10:ba:b3:c7:
5e:c7:75:93:14:fa:3b:73:97:c8:c5:0c:c5:14:83:42:ad:db:
8c:c4:28:07:a0:e4:9d:0f:a2:64:20:03:1c:a3:63:e6:1b:2d:
3b:8a:fa:a9:a7:db:32:c4:57:f5:d9:75:bc:6b:b8:4b:d6:80:
d5:37:10:08:5b:45:29:2a:23:ff:a8:3e:15:95:08:11:f9:49:
b3:df:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:53:30 2025 by rpki-client