Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: 0pcs5nsZy1V4EXYB+NLmbA4h3jcB5UpfV0lOfQE+ROM=
Subject key identifier: 3E:57:67:DA:02:96:5F:EF:D1:9A:36:55:E2:91:70:D3:74:6A:18:12
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 01976BF4968D248FC5415E5EDD49FFF3E61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 078E
Signing time: Sat 14 Jun 2025 01:01:20 +0000
Manifest this update: Sat 14 Jun 2025 01:01:20 +0000
Manifest next update: Sun 15 Jun 2025 01:01:20 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: 1OU7C1zYDW5rdQxWlcGp59wNId+K2YZzqw2O63JpK2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:96:8d:24:8f:c5:41:5e:5e:dd:49:ff:f3:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Jun 14 01:01:20 2025 GMT
Not After : Jun 15 01:01:20 2025 GMT
Subject: CN=3e5767da02965fefd19a3655e29170d3746a1812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:3b:c1:c8:dc:3d:9d:7d:53:bd:1a:a8:b7:
9d:89:d6:e0:88:4c:4e:b7:f4:39:ed:3f:b1:fe:4c:
1a:49:c6:24:e6:83:eb:ab:78:32:ed:a7:a0:46:c0:
ac:a3:bc:39:22:15:2e:4d:89:92:b2:1c:4e:63:1e:
c0:58:c4:32:73:ec:c7:9f:36:aa:30:8f:43:69:03:
cc:a1:02:43:ef:c2:69:0a:87:6a:01:b7:d6:b4:2f:
21:00:3f:d4:bc:e4:8a:31:35:63:f0:a9:0c:35:a9:
98:15:1c:23:f6:3a:42:2e:04:29:4a:4c:d2:35:10:
9e:be:25:70:02:49:d6:85:85:04:14:8c:a3:96:0d:
55:94:8f:1c:f9:aa:58:72:78:5f:dc:23:8b:a8:54:
e2:d4:0d:b7:3b:a5:23:0c:b0:d5:61:62:af:51:f3:
50:3c:18:60:0e:4e:24:b6:54:66:af:91:fd:b1:d0:
bc:bb:a8:54:82:3d:60:fd:ca:e1:13:90:43:1d:80:
68:9b:c7:50:e8:02:43:60:b4:d3:1b:55:fb:6c:0f:
b1:27:9a:89:f4:f1:45:62:98:d3:65:61:41:0a:a1:
10:f5:a9:66:10:58:22:b0:15:4b:47:4b:d0:bc:74:
69:33:33:26:bc:31:51:1e:57:f7:5a:16:c9:5e:f0:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:67:DA:02:96:5F:EF:D1:9A:36:55:E2:91:70:D3:74:6A:18:12
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:41:9a:d0:57:49:23:e9:df:f4:e1:ee:f1:6c:62:d3:eb:
3a:b2:d0:a5:1d:6b:f7:69:7f:c1:4b:a3:49:fb:2d:e7:e3:5c:
46:24:50:27:11:40:2c:bc:7e:cd:21:c8:56:5a:39:17:18:df:
8a:de:b0:b7:7c:29:95:ae:d9:28:20:05:8f:0b:79:8b:88:60:
d1:f2:70:5b:f5:12:22:2a:e6:5d:0d:7d:e3:b6:7d:04:af:8f:
23:f6:6a:50:aa:f3:5a:51:5f:61:1e:2e:b2:61:c2:06:83:b6:
a7:ff:8a:70:09:84:b0:ce:02:1b:38:0d:7d:55:aa:06:4f:ec:
92:61:eb:aa:4b:76:9f:9b:64:9b:3d:d3:a6:a9:e3:27:cf:c0:
de:7c:91:7e:20:d5:9c:6d:3d:6f:cd:bd:a1:80:60:7c:7f:3a:
8d:fc:7d:20:f6:e1:46:d1:65:c3:aa:ba:f8:0c:59:ce:39:63:
87:ce:53:8d:0a:da:15:a3:76:74:00:9e:46:bf:46:44:08:c1:
b7:48:01:4d:6f:ac:92:03:94:35:7c:87:ee:3f:dc:a5:e7:0f:
12:ba:35:33:3a:da:2a:b8:b1:52:d1:4b:ca:2d:c5:d7:0b:34:
6a:cf:60:bb:7b:4f:5f:12:03:17:45:b7:12:a7:17:a5:ff:15:
8f:9b:12:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9JaNJI/FQV5e3Un/8+YeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmYwMGFlMmE2ZmVlZWQ2YTQ5ODdjYmM5MTM0NjdmZGZl
ZjgzZTgwHhcNMjUwNjE0MDEwMTIwWhcNMjUwNjE1MDEwMTIwWjAzMTEwLwYDVQQD
EygzZTU3NjdkYTAyOTY1ZmVmZDE5YTM2NTVlMjkxNzBkMzc0NmExODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXE7wcjcPZ19U70aqLedidbgiExO
t/Q57T+x/kwaScYk5oPrq3gy7aegRsCso7w5IhUuTYmSshxOYx7AWMQyc+zHnzaq
MI9DaQPMoQJD78JpCodqAbfWtC8hAD/UvOSKMTVj8KkMNamYFRwj9jpCLgQpSkzS
NRCeviVwAknWhYUEFIyjlg1VlI8c+apYcnhf3COLqFTi1A23O6UjDLDVYWKvUfNQ
PBhgDk4ktlRmr5H9sdC8u6hUgj1g/crhE5BDHYBom8dQ6AJDYLTTG1X7bA+xJ5qJ
9PFFYpjTZWFBCqEQ9almEFgisBVLR0vQvHRpMzMmvDFRHlf3WhbJXvDQAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5XZ9oCll/v0Zo2VeKRcNN0ahgSMB8GA1UdIwQY
MBaAFDT/AK4qb+7takmHy8kTRn/f74PoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUt
OGIzZTQwMDYzODU4LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUtOGIzZTQwMDYzODU4
LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMtBmtBX
SSPp3/Th7vFsYtPrOrLQpR1r92l/wUujSfst5+NcRiRQJxFALLx+zSHIVlo5Fxjf
it6wt3wpla7ZKCAFjwt5i4hg0fJwW/USIirmXQ1947Z9BK+PI/ZqUKrzWlFfYR4u
smHCBoO2p/+KcAmEsM4CGzgNfVWqBk/skmHrqkt2n5tkmz3TpqnjJ8/A3nyRfiDV
nG09b829oYBgfH86jfx9IPbhRtFlw6q6+AxZzjljh85TjQraFaN2dACeRr9GRAjB
t0gBTW+skgOUNXyH7j/cpecPEro1MzraKrixUtFLyi3F1ws0as9gu3tPXxIDF0W3
EqcXpf8Vj5sSAg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:46 2025 by rpki-client