Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: MqtPpcjjh99JR8SG/RqLDo+NyfYXllNpIkCG4hQWNHk=
Subject key identifier: B3:CA:77:7C:C1:DD:D2:FC:5F:82:C7:49:FC:AC:6A:BF:F6:80:6D:B5
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019890D9913F102350858D1AC1E03A8CAC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 22:00:34 +0000
Manifest this update: Sat 09 Aug 2025 22:00:34 +0000
Manifest next update: Sun 10 Aug 2025 22:00:34 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: JXG4TBcXgEdcTRv4nRaBUnC3L3YShazyUObqDURkzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:91:3f:10:23:50:85:8d:1a:c1:e0:3a:8c:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Aug 9 22:00:34 2025 GMT
Not After : Aug 10 22:00:34 2025 GMT
Subject: CN=b3ca777cc1ddd2fc5f82c749fcac6abff6806db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:51:64:7c:99:18:99:5b:62:8c:1a:f7:69:
68:17:db:e8:5c:04:2a:3a:dc:a0:c3:bf:8e:82:69:
51:9d:4e:c9:91:b9:ac:c8:3d:da:43:9b:2d:e3:d8:
62:5c:25:36:15:91:1b:ce:56:df:62:f4:26:a9:e6:
f3:00:3e:a3:de:e6:68:81:49:f2:b2:e8:45:27:d0:
7d:42:34:63:49:8a:a9:a9:79:ec:8c:8e:9a:fa:c8:
fe:4f:dc:bc:eb:f6:93:09:7c:03:d5:52:ae:23:1c:
6c:5a:07:11:22:8a:d0:a0:16:b2:0a:07:36:ed:df:
99:d5:4a:a9:24:c9:dd:e0:8a:7e:7a:4a:0c:a0:2f:
8b:67:f4:de:77:64:b7:d0:82:6e:10:ba:24:7c:7a:
ae:e8:fd:53:b8:9a:62:14:59:db:12:07:a0:e9:00:
84:58:8b:2f:2b:00:86:7f:94:19:fa:79:68:bd:56:
ed:82:3e:b1:cc:5c:41:73:f6:89:76:d7:e3:86:99:
4b:94:cd:71:80:94:7b:4d:20:15:21:13:3e:fc:7e:
f2:db:40:b2:a0:cb:14:76:c0:ea:f4:87:aa:5c:3e:
8b:12:0a:aa:3d:4d:d2:57:ca:5e:64:44:c3:c4:72:
ca:b9:ef:4f:63:8d:7c:08:04:1a:8b:44:a4:45:35:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:77:7C:C1:DD:D2:FC:5F:82:C7:49:FC:AC:6A:BF:F6:80:6D:B5
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:f5:22:1a:2c:c5:95:21:3b:b1:cf:31:88:0d:ec:0d:a7:
40:1f:0e:60:6d:30:4f:5d:30:c5:a7:24:50:3a:e2:b4:02:d2:
81:c4:be:e3:97:0c:3e:b8:39:6a:04:ef:06:a0:66:b7:23:7a:
ef:e6:c8:77:7e:76:a4:47:6c:08:09:27:d2:3f:13:49:c6:1c:
3f:ab:81:80:02:f0:0c:32:5e:4e:b9:0d:68:5d:93:43:a2:b2:
d7:c7:01:ce:6f:b8:a3:82:f4:e3:fa:ba:a9:a8:c8:6e:e4:3d:
60:c8:fa:81:51:f7:97:01:a4:cc:b3:b4:38:bd:c9:07:f6:36:
f5:bc:95:7b:81:c7:9f:44:57:65:7b:1c:ee:3a:4b:21:6c:c0:
00:f7:ea:98:25:cf:0f:ab:af:f3:2c:6e:39:69:96:75:0a:27:
e0:e6:ba:d0:24:fc:28:45:a4:06:ce:6c:0f:27:a6:40:18:4d:
31:ea:3c:5e:70:d0:83:37:05:b9:07:72:aa:4a:65:fb:02:ea:
5f:58:ea:ac:0b:5d:0b:11:5e:81:5e:7b:08:3a:21:68:df:91:
15:c1:dd:61:cc:e5:ad:6e:75:1f:4e:7d:25:87:c6:c1:19:54:
aa:3d:ed:c1:df:63:96:80:93:6e:98:b6:8e:dc:ee:ef:4d:9e:
41:46:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:18 2025 by rpki-client