Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 7n6XMcrx/JX3cEmVDCQoWiJ7gYb8LjdRLNtF70K1fy8=
Subject key identifier: BC:C0:B9:7C:03:67:D1:3F:1F:FE:25:03:3E:57:0F:CC:82:4F:24:E7
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01976F2CFBB6EBE610970438E87454C542E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 15B3
Signing time: Sat 14 Jun 2025 16:01:48 +0000
Manifest this update: Sat 14 Jun 2025 16:01:48 +0000
Manifest next update: Sun 15 Jun 2025 16:01:48 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: btQTnV555rXjvRwNGyK1g79vfdzvh8gFpFBgyMrMCec=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:fb:b6:eb:e6:10:97:04:38:e8:74:54:c5:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 14 16:01:48 2025 GMT
Not After : Jun 15 16:01:48 2025 GMT
Subject: CN=bcc0b97c0367d13f1ffe25033e570fcc824f24e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:9e:95:f7:0e:88:32:36:fa:89:53:34:50:
b6:b5:8c:20:74:a1:6b:c1:8f:a1:8b:da:6a:a9:99:
4b:40:d3:91:05:b8:95:20:4c:a8:d3:35:0e:d0:53:
df:2e:9a:1b:ef:48:ad:89:1b:30:63:d4:74:3e:8a:
b6:da:e9:be:c8:5a:50:71:6b:7d:0a:4e:58:95:d6:
71:9d:9a:8b:2f:24:a6:25:95:db:13:60:59:b7:01:
f3:f4:f6:a7:c1:8c:b2:b4:3e:70:24:6b:4c:48:1e:
8d:9d:bf:e7:5b:fb:66:ff:75:88:6e:4f:0d:48:0d:
92:8f:bc:c4:d3:f3:d1:e1:63:98:ad:e0:8a:f1:b3:
64:39:28:72:98:01:0f:fc:62:1e:23:51:f8:cf:e0:
17:15:ce:df:69:ad:1b:e7:98:a9:40:52:3b:44:cb:
21:0a:54:f7:8e:eb:ef:b2:13:4d:ae:89:e7:5b:76:
45:db:1b:9a:c3:4f:9c:03:b6:6e:cb:60:7b:d1:09:
72:d5:11:36:08:eb:90:3a:0f:a8:f1:eb:2a:b5:62:
a2:21:0f:29:e4:ac:c8:de:dd:44:0d:a1:4e:1f:e3:
1b:92:65:7c:0f:54:de:25:a9:9f:ab:16:ec:7a:7c:
46:54:8a:4a:d1:59:01:db:68:6d:3b:6a:89:33:e1:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:B9:7C:03:67:D1:3F:1F:FE:25:03:3E:57:0F:CC:82:4F:24:E7
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a5:cb:12:6b:80:12:61:c9:f3:5c:7c:3f:77:37:09:6a:52:
6d:de:f0:64:d7:b2:74:9a:20:f4:09:5f:72:26:8b:83:26:2b:
20:b2:ee:f7:f6:18:6c:47:57:6e:16:bd:43:06:da:29:d6:d8:
a1:0f:83:aa:80:65:27:b0:5a:c1:e3:a4:b4:3a:8a:3e:f4:61:
9d:30:ee:a8:24:d6:83:f6:1c:a5:4a:f7:8c:84:64:cf:66:54:
b0:63:7a:6e:74:65:1b:77:4c:34:69:34:86:6c:d6:47:17:88:
e0:9a:65:6e:c9:44:d0:4a:15:7c:fb:46:1d:58:4d:3d:17:38:
19:47:6b:4b:85:be:15:dd:69:00:24:2c:0d:06:c7:a7:5a:60:
32:3b:ed:f8:a2:d4:b3:4c:1e:b8:0d:82:b4:f1:66:28:95:fa:
5e:67:31:34:a1:b8:72:1f:16:80:f5:3d:04:a8:49:74:cf:11:
d7:e8:03:cb:fe:a5:b2:bf:e5:23:16:45:7b:66:42:fb:f9:e8:
3f:d4:81:56:3c:f4:5e:24:3e:87:a0:99:ff:74:70:90:9a:80:
18:be:37:c2:5c:26:61:f4:52:4f:d5:f6:df:fd:22:2c:f6:d5:
9d:36:f7:58:7c:c0:74:34:df:1c:f4:fe:5b:8f:85:ba:c7:c3:
ea:e8:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:41 2025 by rpki-client