Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: /LOa/6XKohf5ocZxsLon1kVSnkWyrEM6T6CC/O1iMO8=
Subject key identifier: 34:30:AE:5B:27:87:31:E4:9E:82:33:61:3A:94:89:2C:44:F4:41:B7
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019769CEDDF9260FEC459D0D8811B36D1E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 10FB
Signing time: Fri 13 Jun 2025 15:00:54 +0000
Manifest this update: Fri 13 Jun 2025 15:00:54 +0000
Manifest next update: Sat 14 Jun 2025 15:00:54 +0000
Files and hashes: 1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: TjKQUbm+YEYZ6Bq+78FLZYPHG21ZRR9cm1N5HjPveM0=)
2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:dd:f9:26:0f:ec:45:9d:0d:88:11:b3:6d:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jun 13 15:00:54 2025 GMT
Not After : Jun 14 15:00:54 2025 GMT
Subject: CN=3430ae5b278731e49e8233613a94892c44f441b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:58:e1:a7:53:05:6b:73:81:3a:be:0a:37:
0a:2f:b9:be:67:c9:37:69:60:fb:18:26:fb:5e:67:
fb:a3:4b:be:91:3c:25:44:42:ab:55:9f:83:cb:3f:
37:f0:13:41:3b:59:be:85:86:7d:d3:1f:39:4b:4e:
df:1e:c7:3f:9e:70:25:4e:40:da:3a:56:81:d5:9b:
97:ab:dc:9a:dc:a6:17:cc:a5:a5:e5:1f:74:02:dc:
4f:a2:69:f3:c4:ab:b4:2a:27:9c:0b:c3:e6:1c:8b:
6a:fe:ec:15:22:d8:a3:d4:dd:44:48:ae:13:d8:9d:
11:d9:ff:1f:bd:08:b8:c5:f7:7e:ef:a6:c6:5f:62:
f8:94:b7:dc:97:61:95:54:76:51:b8:c8:b3:9e:f7:
29:d6:49:3e:75:5a:25:22:f4:e9:88:7d:ee:c7:e4:
a0:18:81:5f:8d:c1:d7:11:8e:03:04:ac:04:0c:3c:
fe:a8:f5:d5:ec:0e:5a:62:ba:00:75:e3:c7:41:99:
99:f1:07:8d:af:b0:1f:b6:d8:e2:10:c4:3a:d6:f0:
9e:a6:46:68:58:04:c1:33:38:d8:ad:91:ab:9a:42:
00:a1:b7:62:c3:03:6e:fc:cb:9d:65:10:16:95:fb:
07:ac:6d:67:0b:c1:8d:13:ad:2e:71:d9:be:ad:9f:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:AE:5B:27:87:31:E4:9E:82:33:61:3A:94:89:2C:44:F4:41:B7
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9b:ad:d9:0c:1e:43:b5:dc:bc:d7:f0:e0:2d:3f:5b:7d:e5:
6d:24:cc:a4:cc:16:55:9a:a3:2f:69:e8:38:99:3e:cf:e8:26:
fd:af:86:b3:2f:31:f0:c3:de:60:58:24:79:c6:28:75:65:ec:
06:d7:5a:29:1a:16:a9:a0:5c:6e:c2:bd:2e:4c:4f:a0:a4:ed:
d4:bd:77:c2:58:91:ce:26:b4:9d:91:ff:00:1b:26:29:1c:4c:
22:11:56:14:54:22:e9:00:e9:31:e1:6d:b8:11:cf:8e:0f:d2:
d6:43:e6:bf:be:6d:bc:58:5f:e0:98:df:dc:0f:e5:d7:fc:a2:
c0:87:f1:a1:e1:91:a7:66:16:31:e4:2a:21:16:8b:cf:4a:b3:
00:32:f4:67:d9:bf:58:17:51:3f:12:bb:4b:b7:44:98:b2:a4:
b2:92:89:c4:f2:d1:bd:c8:56:84:6f:cc:61:6d:88:a8:d3:61:
f2:b8:e4:59:06:9c:99:a9:16:5d:6f:11:b1:14:71:fd:c8:5a:
11:3b:3a:38:62:23:87:62:57:7f:97:2d:45:e5:20:52:65:64:
2e:52:55:9f:db:c0:45:e4:55:77:d1:cc:83:8a:4f:a9:7a:96:
f6:25:12:44:61:d0:96:22:ae:ac:14:a0:dd:bc:85:20:56:df:
7e:21:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:18 2025 by rpki-client