Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: sXCWfDtu8wK8cre1hLruDUXpMQUlXKwHkCq4Tp8rCBI=
Subject key identifier: 7C:9A:D3:53:CE:68:DF:2B:AA:56:F5:DB:E8:5B:5B:35:F6:48:C3:CF
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 0197684E0698EDA0ED8C8A350A9246086EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 08:00:33 +0000
Manifest this update: Fri 13 Jun 2025 08:00:33 +0000
Manifest next update: Sat 14 Jun 2025 08:00:33 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: 9h7tUKd7FmdJy5D2B9WcLIeVaFm+AuE2KK9KBnfKWVw=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:06:98:ed:a0:ed:8c:8a:35:0a:92:46:08:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Jun 13 08:00:33 2025 GMT
Not After : Jun 14 08:00:33 2025 GMT
Subject: CN=7c9ad353ce68df2baa56f5dbe85b5b35f648c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:6f:9b:27:dc:57:c3:45:be:e3:b4:a8:bb:
b3:e1:36:bd:49:fe:4a:f5:0c:1b:80:bb:0b:8c:bb:
11:37:4f:4c:b4:89:06:f7:86:86:e4:68:d6:4a:a9:
5e:c0:3c:c2:db:74:c1:ae:65:51:31:ea:9d:f6:1b:
f7:eb:4a:16:d1:68:db:32:4b:f5:be:ef:6f:13:41:
d6:d9:6b:29:06:06:02:0f:5f:29:dd:91:04:f3:8d:
34:57:d7:c1:f4:20:5b:56:4f:f4:7d:07:af:5f:66:
28:51:32:78:48:e6:03:92:68:0f:8e:2f:03:d9:ef:
c7:d0:05:e3:09:d8:9a:85:28:8a:28:3a:d1:43:ee:
18:80:27:3f:15:c5:82:2a:ee:15:d9:71:0d:65:7b:
27:af:51:0d:0d:58:9a:aa:73:41:76:90:ae:4d:43:
b3:b7:a4:dd:19:9f:8b:39:8f:9c:f8:46:f0:04:69:
31:c9:1d:ba:31:2c:16:b2:87:0e:be:8c:72:ad:c5:
71:9f:4a:0b:b7:62:19:d7:d8:9e:5e:47:99:2c:34:
ce:b1:56:cc:08:3b:d2:9c:4e:fd:66:85:8d:49:15:
fa:c5:ed:a1:68:d6:a8:6f:59:94:45:c4:3a:55:a3:
f4:e4:ca:f5:40:c0:69:66:1f:ee:8b:72:ff:4b:95:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:D3:53:CE:68:DF:2B:AA:56:F5:DB:E8:5B:5B:35:F6:48:C3:CF
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c3:9e:fd:c0:3d:18:d7:f1:94:db:0b:e2:ee:bb:22:19:9b:
92:80:c8:b5:09:34:ed:93:91:78:dd:62:c5:f3:3c:43:5b:2d:
9c:b4:4a:68:1a:8c:15:2f:10:52:9d:cd:0f:c6:ad:f2:ab:f1:
85:5b:77:1b:02:db:79:df:4c:2b:83:a4:b7:cd:e8:93:81:3b:
3f:b2:9f:1c:2d:ba:1b:26:e0:df:58:72:c7:e2:d7:d1:d1:82:
14:59:5b:e6:27:94:ac:e4:a3:f1:55:d2:2d:db:cb:dd:28:18:
f3:56:16:9f:07:1a:ba:09:d5:2e:27:82:67:82:d5:db:67:05:
6c:6d:40:5a:cb:4c:f5:c7:3b:09:1f:25:1f:2c:e9:bd:f2:34:
f5:c7:43:d8:bd:8d:ce:82:f9:2b:8f:dc:17:e4:e1:cc:89:62:
f1:b5:c7:0f:9a:b7:72:e3:31:f1:76:bf:44:8d:a0:c1:ca:da:
6a:5b:6a:eb:d4:16:2a:4e:fd:fd:35:cd:65:76:01:fb:11:65:
09:de:2e:9a:50:0d:33:26:c6:dc:a7:7c:f6:a8:d7:70:a1:89:
c3:d8:24:62:39:76:73:fa:99:23:59:0a:48:76:d1:f2:5b:43:
05:b6:a9:c2:60:4d:7c:55:c2:69:39:bd:50:fc:39:22:15:61:
e5:be:8d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTgaY7aDtjIo1CpJGCG67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5
OGU1YzkwHhcNMjUwNjEzMDgwMDMzWhcNMjUwNjE0MDgwMDMzWjAzMTEwLwYDVQQD
Eyg3YzlhZDM1M2NlNjhkZjJiYWE1NmY1ZGJlODViNWIzNWY2NDhjM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZvmyfcV8NFvuO0qLuz4Ta9Sf5K
9QwbgLsLjLsRN09MtIkG94aG5GjWSqlewDzC23TBrmVRMeqd9hv360oW0WjbMkv1
vu9vE0HW2WspBgYCD18p3ZEE8400V9fB9CBbVk/0fQevX2YoUTJ4SOYDkmgPji8D
2e/H0AXjCdiahSiKKDrRQ+4YgCc/FcWCKu4V2XENZXsnr1ENDViaqnNBdpCuTUOz
t6TdGZ+LOY+c+EbwBGkxyR26MSwWsocOvoxyrcVxn0oLt2IZ19ieXkeZLDTOsVbM
CDvSnE79ZoWNSRX6xe2haNaob1mURcQ6VaP05Mr1QMBpZh/ui3L/S5VLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHya01POaN8rqlb12+hbWzX2SMPPMB8GA1UdIwQY
MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt
N2ExM2E1ZWZhZjVlLzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl
LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcOe/cA9
GNfxlNsL4u67IhmbkoDItQk07ZOReN1ixfM8Q1stnLRKaBqMFS8QUp3ND8at8qvx
hVt3GwLbed9MK4Okt83ok4E7P7KfHC26Gybg31hyx+LX0dGCFFlb5ieUrOSj8VXS
LdvL3SgY81YWnwcaugnVLieCZ4LV22cFbG1AWstM9cc7CR8lHyzpvfI09cdD2L2N
zoL5K4/cF+ThzIli8bXHD5q3cuMx8Xa/RI2gwcraaltq69QWKk79/TXNZXYB+xFl
Cd4umlANMybG3Kd89qjXcKGJw9gkYjl2c/qZI1kKSHbR8ltDBbapwmBNfFXCaTm9
UPw5IhVh5b6NUw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:05 2025 by rpki-client