Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: DYI5RkMW7plZ/BT6b7r6lNO2tkpJdMkTWoLhS3mlOk0=
Subject key identifier: 92:96:7C:75:62:19:E6:80:54:23:13:F7:B0:A1:E4:70:CA:2F:F2:94
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 01976E19190C0995B8948EAC023B7DE19DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0177
Signing time: Sat 14 Jun 2025 11:00:27 +0000
Manifest this update: Sat 14 Jun 2025 11:00:27 +0000
Manifest next update: Sun 15 Jun 2025 11:00:27 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: OePjw2NpwKnpLsu5BFpcETd0cSmTDPovSVjcIr4zbjE=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:19:0c:09:95:b8:94:8e:ac:02:3b:7d:e1:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jun 14 11:00:27 2025 GMT
Not After : Jun 15 11:00:27 2025 GMT
Subject: CN=92967c756219e680542313f7b0a1e470ca2ff294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:74:51:6e:16:48:56:8f:2d:b6:a8:23:8f:
41:b8:f1:ee:3a:16:d7:56:f4:75:27:5a:d3:3b:c9:
c1:0f:5a:17:97:51:9f:21:9d:fb:e4:35:a0:1f:64:
27:19:bc:8c:06:ba:e8:e4:c2:ea:29:b3:af:d5:5f:
9d:8c:1a:91:4a:e7:a2:c9:9e:53:4e:a9:54:95:a4:
17:ff:dc:af:ab:0f:16:00:29:60:47:25:2b:39:93:
99:61:2c:e7:b3:27:65:c9:00:6d:36:a3:c5:9c:07:
2f:1e:d8:be:96:28:25:4d:a6:12:c3:75:2f:c1:aa:
70:5c:04:97:51:c9:b3:ac:e1:64:33:45:0e:e6:e2:
1e:2d:fb:46:64:37:d4:91:ce:09:03:1e:44:fc:2d:
01:75:4e:af:dd:06:8a:00:e8:e0:28:01:40:18:ab:
8a:bc:ba:b3:33:18:54:1b:16:8b:6d:4b:72:bb:68:
18:d7:1d:50:8c:23:e8:e0:90:55:10:08:5c:e5:75:
c3:95:84:1d:40:3f:49:df:dd:eb:f7:bc:0c:c8:20:
0d:5c:4a:94:b7:fc:80:d0:86:9e:0f:eb:b6:7d:3e:
df:7c:81:a9:aa:97:a4:59:69:08:ac:cd:27:19:f1:
81:10:cb:7a:2c:0d:e2:8e:fe:7a:16:bc:8a:d7:4c:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:7C:75:62:19:E6:80:54:23:13:F7:B0:A1:E4:70:CA:2F:F2:94
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:2d:02:e8:d1:43:5f:b3:a7:3d:50:19:0d:f1:12:41:ec:
23:dc:24:51:7a:04:3c:6d:83:bc:0e:a6:19:2a:62:d8:ff:b5:
c0:95:15:9e:ef:a5:d7:77:cf:26:f5:98:b7:bf:d3:5c:88:44:
84:c4:37:8f:6f:91:c7:32:d8:a4:d2:4e:19:6a:ec:dc:56:af:
20:1b:b2:91:ac:ef:f3:f6:e0:a4:20:c5:81:9d:0b:d6:f6:00:
52:33:10:49:0d:e4:73:c2:f2:84:75:c1:fd:53:31:7b:b0:75:
fa:b3:cf:86:c5:eb:5a:3e:b5:38:b9:46:b5:a5:ec:cc:33:72:
be:3a:b6:23:40:80:f5:27:ca:fd:a7:0a:25:18:fe:b7:40:14:
77:e8:b5:6e:ac:5f:51:04:11:f2:c6:e4:ef:d6:5b:5e:cb:36:
30:6c:69:fd:5d:12:84:de:a1:a8:6c:42:ca:2f:df:c0:81:b1:
d6:88:32:27:a4:85:6d:88:12:4a:d8:2e:c2:be:1c:9c:22:45:
16:a8:1b:89:c1:c4:93:23:9e:28:a3:6e:dc:0a:ee:31:fc:af:
9b:e8:27:89:45:97:ab:c0:92:6b:6f:50:76:9a:9d:29:b5:68:
3e:49:c2:cc:f8:00:19:54:5d:2b:f8:ea:d4:a4:55:68:a5:42:
4b:2a:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:39:48 2025 by rpki-client