Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: QIZ54YyIqzud6EKw0gmHI5oLdrDjhEfsdPFeboXnzzk=
Subject key identifier: 87:50:51:67:16:E5:3F:9E:9E:24:A4:79:D2:27:30:8A:F3:ED:4D:AE
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 01976884F02153364A6783F81152009B63C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 0326
Signing time: Fri 13 Jun 2025 09:00:32 +0000
Manifest this update: Fri 13 Jun 2025 09:00:32 +0000
Manifest next update: Sat 14 Jun 2025 09:00:32 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: Zu2SX0SVHNMgMy8XmUITf7R6PiriDSS5EU5tSUEsBgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:f0:21:53:36:4a:67:83:f8:11:52:00:9b:63:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Jun 13 09:00:32 2025 GMT
Not After : Jun 14 09:00:32 2025 GMT
Subject: CN=8750516716e53f9e9e24a479d227308af3ed4dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:b4:51:2f:cb:5b:b7:96:84:90:e1:8a:91:
42:97:8b:b2:99:72:7c:b6:0c:77:f0:73:d4:03:12:
ab:fc:fb:a9:75:f7:38:3d:8e:23:fb:e3:7c:7b:72:
21:48:7b:b9:9c:9f:2d:59:44:e7:2a:6b:57:51:4f:
77:8f:51:6c:44:bd:6b:5d:8c:70:a8:2a:75:12:2e:
b6:b6:1d:63:48:b3:7c:f5:18:79:2c:f4:dc:62:b2:
8c:73:7f:70:41:58:f8:92:e8:1f:45:d3:b3:23:cf:
5b:48:ad:90:d0:cc:12:6f:87:55:e3:eb:f8:4a:0c:
b5:89:1b:f3:a0:38:3a:1e:e4:76:d5:79:68:3b:c2:
c7:b6:a4:a8:62:28:e8:cc:84:63:73:ab:e2:c1:44:
50:2a:59:7f:b7:d6:86:7c:4b:63:e5:97:9d:5c:34:
d0:eb:6e:5f:e8:cb:79:88:f9:35:d9:8a:60:21:b1:
14:c6:99:fd:87:5f:53:61:dc:65:75:16:07:cd:cb:
de:d9:6d:49:bf:03:cd:b5:69:b3:f9:9d:82:4f:ac:
55:24:fc:3f:1a:e4:9e:06:4c:c0:f4:a3:41:45:cf:
0b:6d:92:8a:bd:34:e0:c2:33:d7:3f:fe:2a:5f:2c:
15:b0:c9:c9:92:6d:c0:0f:8b:6a:0a:a0:b4:a3:d1:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:51:67:16:E5:3F:9E:9E:24:A4:79:D2:27:30:8A:F3:ED:4D:AE
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2f:33:1c:86:66:9c:2c:cd:2a:f6:46:66:9e:d6:7a:50:11:
06:4e:6c:4b:99:f5:21:91:36:9e:c6:e0:d0:04:0e:2f:86:89:
05:38:63:8e:3a:e6:c7:39:c7:f5:d9:88:0a:68:5a:8a:11:ac:
e9:63:11:24:84:24:f5:1e:f7:7e:74:a9:d9:8c:31:64:66:81:
eb:3e:6f:a8:95:2b:f4:ef:77:ed:88:a9:4a:e4:25:75:1d:3b:
41:c0:cd:8d:e8:17:39:de:47:8c:aa:36:9e:5c:e1:ab:47:5f:
0c:9b:af:ae:1a:0c:07:37:3d:5f:17:46:78:aa:79:c9:d6:d4:
d0:5f:26:c2:5c:08:29:e5:e6:13:eb:5a:09:24:83:77:1b:f1:
0f:f2:19:52:43:88:ad:92:1e:63:dd:a2:09:f4:b4:28:15:3a:
90:43:f5:fe:11:7b:48:5e:19:2b:73:81:a8:3e:6f:66:13:e4:
ef:2c:a8:86:cb:8c:49:c8:ec:3a:ab:0d:11:9d:f4:40:eb:70:
32:12:90:03:84:ca:56:5a:94:16:9f:26:16:19:77:66:1c:44:
07:da:0e:1b:8c:34:3e:85:ea:2d:ab:88:5e:2f:b3:3f:d1:10:
c0:0e:f9:dd:d5:05:53:6e:17:0e:11:67:eb:3c:c0:7e:da:2d:
92:a1:cc:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohPAhUzZKZ4P4EVIAm2PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2
ZDkzNTUwHhcNMjUwNjEzMDkwMDMyWhcNMjUwNjE0MDkwMDMyWjAzMTEwLwYDVQQD
Eyg4NzUwNTE2NzE2ZTUzZjllOWUyNGE0NzlkMjI3MzA4YWYzZWQ0ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzW0US/LW7eWhJDhipFCl4uymXJ8
tgx38HPUAxKr/Pupdfc4PY4j++N8e3IhSHu5nJ8tWUTnKmtXUU93j1FsRL1rXYxw
qCp1Ei62th1jSLN89Rh5LPTcYrKMc39wQVj4kugfRdOzI89bSK2Q0MwSb4dV4+v4
Sgy1iRvzoDg6HuR21XloO8LHtqSoYijozIRjc6viwURQKll/t9aGfEtj5ZedXDTQ
625f6Mt5iPk12YpgIbEUxpn9h19TYdxldRYHzcve2W1JvwPNtWmz+Z2CT6xVJPw/
GuSeBkzA9KNBRc8LbZKKvTTgwjPXP/4qXywVsMnJkm3AD4tqCqC0o9HuNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdQUWcW5T+eniSkedInMIrz7U2uMB8GA1UdIwQY
MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt
ZmQzZmQxODAzMjk0LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0
LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApC8zHIZm
nCzNKvZGZp7WelARBk5sS5n1IZE2nsbg0AQOL4aJBThjjjrmxznH9dmICmhaihGs
6WMRJIQk9R73fnSp2YwxZGaB6z5vqJUr9O937YipSuQldR07QcDNjegXOd5HjKo2
nlzhq0dfDJuvrhoMBzc9XxdGeKp5ydbU0F8mwlwIKeXmE+taCSSDdxvxD/IZUkOI
rZIeY92iCfS0KBU6kEP1/hF7SF4ZK3OBqD5vZhPk7yyohsuMScjsOqsNEZ30QOtw
MhKQA4TKVlqUFp8mFhl3ZhxEB9oOG4w0PoXqLauIXi+zP9EQwA753dUFU24XDhFn
6zzAftotkqHM4A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:46 2025 by rpki-client