
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: rJXXs3tRYeVgon3NliDj3JsKAB9WNAzhnzRNleT4XrU=
Subject key identifier: F5:34:99:59:29:54:EB:F0:6B:63:BC:61:34:F0:56:E6:94:BE:A1:EF
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01977564B431EB65B13164AB871C82DF8C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0EBD
Signing time: Sun 15 Jun 2025 21:00:23 +0000
Manifest this update: Sun 15 Jun 2025 21:00:23 +0000
Manifest next update: Mon 16 Jun 2025 21:00:23 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: /RCjyk3UWm5mbbhSyQ/W1wANjoZiKXhvXbXXrCTHtWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:b4:31:eb:65:b1:31:64:ab:87:1c:82:df:8c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 15 21:00:23 2025 GMT
Not After : Jun 16 21:00:23 2025 GMT
Subject: CN=f53499592954ebf06b63bc6134f056e694bea1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:6b:51:2e:3c:37:83:56:bb:5d:4f:3e:2c:
f6:a6:0d:53:b5:66:1e:3c:f0:93:81:8b:9b:c9:a7:
0d:54:b6:c1:d7:41:73:e8:73:2a:5b:f8:6f:04:a9:
dd:20:15:1c:c9:5f:46:97:67:c6:55:93:c4:4f:23:
9b:4a:ce:7c:02:d7:57:90:40:51:83:54:ee:d9:42:
85:f5:55:c5:d8:e0:3f:8d:01:93:a4:a0:a8:fb:22:
da:94:f8:a5:81:ac:80:5b:04:e3:13:24:a6:82:b8:
34:9b:33:ff:00:6f:0b:f8:9a:2b:e4:94:10:85:fe:
95:55:5d:4c:dd:3a:05:68:f2:d9:25:ea:a6:65:79:
b0:2c:4b:63:db:d6:f6:ac:6f:e4:b3:b2:5a:77:d1:
94:08:4e:e6:59:bc:cc:ed:31:05:c7:ac:d4:f8:07:
12:6e:1e:61:95:f1:97:73:37:66:ba:9c:bc:70:58:
ef:a6:56:99:38:1b:fa:fb:b2:67:e2:f6:7d:a2:3c:
64:1f:8e:3d:e9:36:18:c1:60:6d:ba:86:53:34:24:
56:f5:c5:7e:26:c0:7f:4e:71:bf:18:e6:12:40:c6:
88:10:d4:ca:9e:18:82:0a:bd:4e:6e:ab:88:09:0f:
93:10:b5:78:fb:e9:01:70:9b:2d:16:ec:59:86:20:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:99:59:29:54:EB:F0:6B:63:BC:61:34:F0:56:E6:94:BE:A1:EF
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:45:d2:5b:ec:db:d0:52:2d:58:2c:e5:a6:55:d6:d3:7e:
2c:08:02:a3:47:b4:43:67:11:28:07:2e:f7:b2:aa:89:00:9a:
f1:18:ad:57:46:9f:67:26:55:a2:4e:0a:53:46:14:c3:9b:49:
d9:bf:a6:99:fe:61:cc:a7:b0:f6:36:58:35:27:c1:66:29:2f:
bd:a7:89:28:14:d7:ed:f6:e4:85:48:8c:8d:39:8f:99:46:d0:
c6:fb:77:94:83:59:c1:3b:c1:c1:f2:b3:e7:17:90:eb:aa:2c:
cc:74:f8:53:7a:be:c2:6e:b8:86:bb:53:f6:f2:4d:5d:1b:8f:
1b:0b:f7:d3:c9:c8:1b:de:82:54:ba:56:0d:51:68:e5:00:25:
12:83:2a:37:64:8c:07:79:80:76:40:69:d1:47:19:c7:8e:bc:
41:04:be:6d:97:56:6b:04:f9:4b:bb:fc:f3:0f:a2:4c:f0:7a:
94:d2:48:5b:6c:c6:32:85:6b:0d:74:72:f6:71:f3:d0:cb:7f:
4b:8a:0d:89:6b:92:26:7b:42:63:bf:7d:55:a5:43:b0:95:4e:
6a:6c:98:c6:f0:88:a8:e3:43:60:88:65:8a:52:d2:f6:c3:bd:
e4:e2:c0:16:34:5d:f0:0b:a6:3a:ab:b4:40:e7:8f:7b:5d:4a:
ca:b7:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:39:01 2025 by rpki-client