Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: 2m+yCbL6LuVhLib/dyS16xf4x3sHtJASg32h6lEGNNo=
Subject key identifier: 42:58:6C:31:55:0F:B9:1D:B1:E7:46:C4:E9:AD:B1:D2:00:D6:64:EB
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 01976F2CEE184D53EF6C886AD8BFE7497C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 16:01:44 +0000
Manifest this update: Sat 14 Jun 2025 16:01:44 +0000
Manifest next update: Sun 15 Jun 2025 16:01:44 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: eRjfeb12fxh/bFFE4qqQsDJ0s1G5HE0oWxkeAnTWrj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:ee:18:4d:53:ef:6c:88:6a:d8:bf:e7:49:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Jun 14 16:01:44 2025 GMT
Not After : Jun 15 16:01:44 2025 GMT
Subject: CN=42586c31550fb91db1e746c4e9adb1d200d664eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:93:2f:82:31:3f:56:46:8b:95:bd:4a:c3:
52:56:82:03:0b:58:fd:20:07:69:8c:9b:67:b2:de:
d7:bf:15:c0:bb:0f:72:1e:7e:5e:01:0a:27:af:86:
95:59:8b:12:be:d7:b1:2e:b2:b4:aa:5b:dc:ac:05:
86:cc:26:9c:00:bf:9e:99:6b:0a:07:97:c8:02:db:
44:4d:24:16:e2:0e:c6:4c:ae:19:a7:fb:ac:a7:ee:
a1:13:d8:4a:a7:61:cb:bb:45:4e:08:e6:35:57:43:
00:90:3a:1d:93:f3:49:63:54:61:e2:77:e5:c5:d8:
a8:4b:ac:88:83:40:f5:1a:9f:99:5b:22:6f:ae:a2:
77:00:a1:d9:40:82:35:2d:34:f5:2a:d6:52:f2:92:
62:fe:db:d1:cc:d9:00:b7:8d:a9:22:d5:1a:52:d0:
e7:dc:99:4b:93:51:dc:84:8a:cd:47:ed:68:40:e1:
4e:6a:21:9f:41:7b:d1:b2:e5:f3:2e:92:27:81:10:
d5:53:32:fe:9a:5e:f6:2f:e4:c9:d9:1c:8e:4a:8b:
09:96:59:b8:17:da:94:a0:d2:4f:68:ac:5d:af:d0:
58:36:e8:a0:ed:44:6a:5c:cb:d8:e6:77:f3:7b:65:
0b:2e:52:9f:76:03:40:7d:35:13:de:e1:5d:41:2b:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:6C:31:55:0F:B9:1D:B1:E7:46:C4:E9:AD:B1:D2:00:D6:64:EB
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a0:e8:91:2a:26:24:7f:ee:48:4c:5c:79:2e:54:49:fd:58:
b8:e3:88:13:eb:82:1e:45:7b:44:14:39:eb:30:20:96:36:da:
ba:de:49:dd:41:8a:5d:89:bf:8a:0c:f4:0c:34:c9:ec:b0:d9:
49:9a:00:d9:6a:e0:a8:9c:92:62:a7:09:e9:b4:5e:f1:8c:13:
e6:17:34:dc:85:f8:1f:52:1c:f7:87:56:c6:05:05:56:2a:d2:
55:74:bb:2c:a6:a4:78:21:4c:7b:4c:cf:77:9c:87:d7:db:87:
8e:c2:a5:ac:df:52:62:db:d3:cc:dc:c3:43:1e:16:76:9f:4b:
f1:6e:f9:c5:70:be:96:14:7a:fe:70:da:89:be:3c:7a:9a:67:
33:a2:05:bd:20:6e:26:dc:ec:e5:26:bd:9d:fb:30:03:6f:8e:
9b:fa:84:66:49:07:c3:8c:ef:8c:4e:fa:48:94:3a:84:5d:10:
59:7b:bf:64:8a:a3:3d:71:0d:78:7a:7b:a8:e0:05:19:c4:58:
a9:e9:24:0b:9f:f1:b7:be:56:c5:30:c4:c3:e3:e8:4d:a3:55:
1b:fb:68:5c:f2:a1:94:42:c5:2c:1b:7d:ef:34:b3:e8:95:99:
72:e3:ea:33:11:12:00:7a:e2:b7:07:54:b8:e4:c0:82:06:8a:
52:4a:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:11:33 2025 by rpki-client