Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: V7cmM0N5vRcbqIFLdLX2vVX1kPyBJ0ki80gHlCZy+ng=
Subject key identifier: 77:B4:D2:4E:A9:1F:91:0F:E5:D7:A5:68:54:4E:10:E6:57:0D:74:20
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 01976D3D8BE4B64E9268C16D2EB0213C6CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 14CE
Signing time: Sat 14 Jun 2025 07:00:39 +0000
Manifest this update: Sat 14 Jun 2025 07:00:39 +0000
Manifest next update: Sun 15 Jun 2025 07:00:39 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: J4RgYGgHyD0iMZDuKyzyjezV/wQbt8oiJFJH2ZtiEMY=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:8b:e4:b6:4e:92:68:c1:6d:2e:b0:21:3c:6c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jun 14 07:00:39 2025 GMT
Not After : Jun 15 07:00:39 2025 GMT
Subject: CN=77b4d24ea91f910fe5d7a568544e10e6570d7420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:5d:2e:1d:57:3d:a8:2c:8a:b1:f3:dc:77:
a7:5b:a1:29:63:22:df:cf:48:35:c0:e3:88:3e:39:
63:a0:d7:72:50:25:17:12:30:89:b7:2e:7b:89:f2:
ab:96:e6:56:12:b5:99:c0:a3:8c:67:4a:cc:ea:de:
c6:36:04:e6:84:e0:56:1b:a3:06:4e:bc:b9:57:4d:
fa:18:99:47:ea:83:29:95:79:83:ac:f5:bb:e8:e5:
94:9c:3a:64:00:e0:4b:2e:ef:6c:16:cf:02:ee:5c:
9c:63:0e:c4:a9:4c:4f:53:5e:1b:44:d1:90:3f:6d:
fb:ca:78:bf:56:e5:43:e8:84:db:d6:70:87:5f:4a:
74:a6:32:24:5e:67:7f:46:16:f5:f0:ce:41:24:47:
50:f6:a5:ba:15:84:47:fc:49:ce:50:6b:60:db:08:
6f:98:c6:7c:6c:b8:a6:d1:39:04:ef:7e:f0:77:7b:
97:73:62:d2:fc:60:6f:89:78:e3:f8:04:8b:28:55:
b0:93:6e:7e:96:f1:03:fd:ad:52:01:fb:ae:e0:8a:
9f:a0:12:c9:ef:62:ff:1e:7f:40:f2:c3:22:e2:7a:
df:18:1b:5e:5c:a5:10:6a:28:80:e2:8f:be:03:31:
e8:ae:d9:4a:a6:2e:66:fb:d9:ff:da:43:ce:83:4b:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:D2:4E:A9:1F:91:0F:E5:D7:A5:68:54:4E:10:E6:57:0D:74:20
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fc:45:b5:59:c8:ff:9b:78:11:b7:41:ec:cb:05:fb:a7:1b:
d6:65:90:8d:f9:8a:26:74:6b:b8:b9:9b:13:be:d8:0c:c0:5c:
b6:6a:9e:87:dd:ac:d7:38:88:6e:65:74:45:92:cd:2b:a7:ff:
b2:85:31:fb:9a:52:56:5e:7e:00:40:21:95:91:c9:3a:6f:91:
94:98:d0:8b:8a:19:64:41:ae:a7:f7:de:23:19:05:63:cc:98:
78:4f:8f:03:6f:05:0e:a5:4d:92:c4:16:2b:ce:60:ec:86:21:
73:85:44:ae:df:66:c0:8a:29:84:9c:5a:dc:4f:6d:44:f6:84:
bf:1e:e1:f1:97:bb:e7:55:e8:6d:ee:e0:57:06:95:a3:89:12:
ab:5e:62:fa:a0:fb:46:74:25:a5:e7:e5:07:15:2a:e3:4e:35:
9a:85:4a:67:b9:f9:00:3b:84:9d:b0:36:30:e8:2d:af:9d:db:
fe:c3:ce:1a:14:23:d3:89:51:0c:fc:b7:72:3e:e1:36:c9:67:
d5:c6:99:32:f7:a8:d2:da:98:47:a5:6a:c0:8c:60:25:63:e0:
ff:90:f5:0d:98:8f:cc:22:22:85:57:13:72:15:1d:a1:b8:c5:
89:10:c5:43:5c:99:46:93:38:8e:77:8d:e3:eb:73:d6:c7:25:
0a:bf:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:28 2025 by rpki-client