Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: 1KllQpqqCjrQfpHN9u9TJ0kHC+Grs0sj+rCZV6xBzXU=
Subject key identifier: 5A:F1:D7:43:54:D7:DB:67:44:A2:9C:6A:F7:C0:16:D2:B9:D2:D3:15
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01977007CF5E55214E3FB96970CF02A5D508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: FB
Signing time: Sat 14 Jun 2025 20:00:49 +0000
Manifest this update: Sat 14 Jun 2025 20:00:49 +0000
Manifest next update: Sun 15 Jun 2025 20:00:49 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: wglHDolM/pwvwMcimSbMn8ZhEbewGl3n/lbxlfmbzNc=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:cf:5e:55:21:4e:3f:b9:69:70:cf:02:a5:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jun 14 20:00:49 2025 GMT
Not After : Jun 15 20:00:49 2025 GMT
Subject: CN=5af1d74354d7db6744a29c6af7c016d2b9d2d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:34:ea:fd:77:8a:73:b4:52:9d:55:f2:4e:
db:d3:c6:be:1c:23:f4:27:3f:f0:02:5e:f5:86:45:
02:b3:36:ca:90:0b:a5:6a:05:24:73:c6:86:aa:80:
13:06:6a:cb:6b:6c:53:c9:bb:7b:fb:6d:4f:e6:28:
4b:65:75:75:7e:43:c3:bd:51:ff:72:5d:36:43:21:
2e:be:32:3d:89:1c:63:47:3c:94:68:ef:68:7c:4d:
d4:15:3c:4a:47:07:5a:62:d4:2e:06:9e:4f:c5:9c:
e2:c5:bd:1b:cc:b1:63:a5:25:ea:f2:f2:ff:b2:8b:
71:27:8f:72:72:d7:8f:8e:64:ba:e7:11:cd:43:25:
41:b6:3f:cf:32:06:fb:bf:ef:72:9e:7b:ec:94:45:
bc:1c:66:46:00:af:21:de:bb:4e:5e:39:70:20:ea:
fe:ca:2b:0e:ec:d1:1b:c4:e4:70:8d:57:a1:54:47:
cb:62:17:6d:74:72:cc:50:ca:0b:b5:6e:89:82:24:
cb:62:a2:b7:ee:f4:75:d7:fe:58:f8:67:da:a3:d9:
32:9f:4d:4c:e4:93:a7:88:ef:eb:0f:0f:4e:cd:43:
7c:49:d1:4d:9d:46:19:8b:aa:ce:ec:31:93:35:48:
8a:77:58:46:31:27:ad:d2:48:7e:b5:91:b2:4e:e9:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:D7:43:54:D7:DB:67:44:A2:9C:6A:F7:C0:16:D2:B9:D2:D3:15
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:cd:0e:bf:5b:5d:7c:0a:da:6c:27:75:cd:0b:07:7b:27:
88:43:ea:aa:68:ef:ff:6a:17:ff:c2:a2:00:82:6c:71:a0:56:
7e:32:2d:aa:b0:37:11:3b:30:32:a2:de:66:3b:76:3b:5d:f3:
3e:f8:9d:6f:67:6d:3a:a9:31:de:d6:9f:8e:28:a5:7a:79:15:
e6:33:f4:28:81:10:de:04:f9:54:cf:0f:22:40:70:53:8a:c4:
91:6a:69:2b:f8:50:22:e8:e7:5e:9c:31:1e:87:7b:44:f0:80:
d7:66:c2:48:eb:c6:a2:49:00:6d:2e:66:ed:07:a2:b2:71:c4:
08:2b:31:d0:11:05:e9:fe:0d:f2:bb:ba:83:86:e3:99:ce:39:
4c:71:db:36:dc:d9:51:ed:12:fb:6f:67:fd:70:da:ab:d3:6a:
bd:3f:ce:5c:d3:0b:f4:75:8f:23:7c:5d:42:6f:09:72:89:e3:
04:78:22:c1:9e:0f:26:b7:3e:b5:50:b5:67:3b:4c:7b:f0:b7:
95:90:51:aa:35:75:db:cb:c7:4c:ac:e9:9e:02:97:0e:99:2c:
40:e7:7e:51:4d:55:0d:a7:85:a1:4b:25:b4:3c:13:b1:c2:b1:
18:ff:85:d5:88:43:de:9f:22:1d:dc:40:97:c8:dc:86:f3:c9:
1a:8b:11:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB89eVSFOP7lpcM8CpdUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjUwNjE0MjAwMDQ5WhcNMjUwNjE1MjAwMDQ5WjAzMTEwLwYDVQQD
Eyg1YWYxZDc0MzU0ZDdkYjY3NDRhMjljNmFmN2MwMTZkMmI5ZDJkMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BI06v13inO0Up1V8k7b08a+HCP0
Jz/wAl71hkUCszbKkAulagUkc8aGqoATBmrLa2xTybt7+21P5ihLZXV1fkPDvVH/
cl02QyEuvjI9iRxjRzyUaO9ofE3UFTxKRwdaYtQuBp5PxZzixb0bzLFjpSXq8vL/
sotxJ49yctePjmS65xHNQyVBtj/PMgb7v+9ynnvslEW8HGZGAK8h3rtOXjlwIOr+
yisO7NEbxORwjVehVEfLYhdtdHLMUMoLtW6JgiTLYqK37vR11/5Y+Gfao9kyn01M
5JOniO/rDw9OzUN8SdFNnUYZi6rO7DGTNUiKd1hGMSet0kh+tZGyTumsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrx10NU19tnRKKcavfAFtK50tMVMB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtbNDr9b
XXwK2mwndc0LB3sniEPqqmjv/2oX/8KiAIJscaBWfjItqrA3ETswMqLeZjt2O13z
Pvidb2dtOqkx3tafjiilenkV5jP0KIEQ3gT5VM8PIkBwU4rEkWppK/hQIujnXpwx
Hod7RPCA12bCSOvGokkAbS5m7QeisnHECCsx0BEF6f4N8ru6g4bjmc45THHbNtzZ
Ue0S+29n/XDaq9NqvT/OXNML9HWPI3xdQm8JconjBHgiwZ4PJrc+tVC1ZztMe/C3
lZBRqjV128vHTKzpngKXDpksQOd+UU1VDaeFoUsltDwTscKxGP+F1YhD3p8iHdxA
l8jchvPJGosRJA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:42:48 2025 by rpki-client