Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: WCZXd4/CR662S0/9MtWQHatNLGhGKIC+kuMHtqycvxA=
Subject key identifier: 85:F2:F8:E4:23:5C:2C:27:41:30:F7:C5:90:B9:53:26:0F:9D:C9:CC
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019872D01F624C192BD9AE08FDF56E9353FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 02:01:38 +0000
Manifest this update: Mon 04 Aug 2025 02:01:38 +0000
Manifest next update: Tue 05 Aug 2025 02:01:38 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: UaxND9ObFP+ahylrMrr6efSasTjaOQWRmn/R5pu78CY=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:1f:62:4c:19:2b:d9:ae:08:fd:f5:6e:93:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Aug 4 02:01:38 2025 GMT
Not After : Aug 5 02:01:38 2025 GMT
Subject: CN=85f2f8e4235c2c274130f7c590b953260f9dc9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:72:29:0c:f8:3d:5d:e3:8f:8e:f1:b9:ee:
8a:0b:83:ae:04:94:33:95:6b:6b:43:97:3e:2f:73:
48:6f:20:bb:6b:64:48:03:8f:5c:81:e1:7f:a5:c3:
22:30:14:7a:14:85:69:c5:38:7e:c2:c1:b0:4e:98:
75:79:85:e5:5b:14:1a:e7:3f:34:7e:bf:99:b8:85:
49:5a:ab:7d:3b:cf:e0:11:91:fd:f4:f2:67:b1:2d:
b6:bc:eb:06:4f:31:a0:86:75:36:67:1f:e2:82:c1:
ef:53:ea:da:e3:19:1c:f0:39:e1:d6:d0:ec:69:a0:
c9:d6:53:f1:ad:17:7b:9b:d9:79:74:eb:73:4f:7e:
b5:fc:b2:40:a8:a8:6c:f1:a5:3e:62:5a:ec:fc:cb:
93:7b:65:e2:aa:40:70:56:d3:27:61:ed:bf:29:a5:
0e:01:31:b6:36:51:e9:2a:8d:80:4e:86:c7:36:22:
c8:53:b7:75:e0:da:c5:bd:23:15:f0:b5:29:03:ab:
61:24:d6:76:6c:e7:17:c8:97:1e:60:72:eb:d2:33:
ba:91:09:59:81:28:73:c0:34:d3:84:23:4d:24:f5:
34:9d:c9:ee:dc:03:71:e3:6b:0f:97:cf:2f:5c:ec:
ba:11:34:46:4b:2c:eb:4c:95:41:53:ab:2a:0b:e2:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:F8:E4:23:5C:2C:27:41:30:F7:C5:90:B9:53:26:0F:9D:C9:CC
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:30:70:e1:16:67:24:fe:4d:b3:d6:73:e5:f0:9e:72:bf:
99:61:9b:52:e3:3d:8b:92:a2:e8:80:2e:34:a3:3a:91:32:87:
58:24:e7:67:41:f6:7d:5f:20:4c:9e:a6:d1:eb:3a:47:16:6a:
26:9f:7a:2b:13:44:ae:7e:b4:d0:bc:65:23:91:b7:28:d7:9e:
ed:3d:06:eb:92:9c:fb:eb:5c:f3:87:83:23:3f:39:59:0e:7d:
69:f5:1d:ad:17:22:bd:8c:11:19:73:a5:e7:ef:62:c6:3d:1e:
d4:07:8c:85:bc:05:d3:82:61:e4:c2:4e:92:b7:27:43:9e:48:
81:00:5c:65:3d:c9:c2:04:27:11:5d:d5:ed:77:13:a3:f8:c2:
9b:ce:41:4b:2f:d0:5c:16:82:13:04:82:b5:5a:3c:c6:74:c3:
af:c9:f1:3e:f9:bb:13:67:a8:52:d4:95:e6:e0:5c:44:3e:b0:
bb:88:6b:7d:dc:98:5c:19:97:76:7e:f6:84:78:98:19:8f:37:
0b:cd:a8:a0:8c:70:54:bc:ce:76:94:d7:49:cb:0f:18:93:03:
24:19:da:f7:3d:7b:eb:9b:92:70:f7:2d:2f:91:3d:7c:24:27:
07:9d:01:b6:63:75:4c:8f:7f:37:8c:a9:1f:fc:4a:bc:40:58:
2e:75:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:37 2025 by rpki-client