Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: L2mmZ5YgGAnXUc3TMy4eFXlf7uSfxcg8+8GtJp0U55w=
Subject key identifier: 1E:74:04:99:31:73:7E:73:31:93:10:2D:D4:51:E8:D6:B4:5B:65:00
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 01976F2C2AE5D81E50F10AD4B10B0F18E9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0F8B
Signing time: Sat 14 Jun 2025 16:00:54 +0000
Manifest this update: Sat 14 Jun 2025 16:00:54 +0000
Manifest next update: Sun 15 Jun 2025 16:00:54 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: 53EQG7SmsSbhT3ffUBQT5Mb51QZW94/wwlvm3FeyJFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:2a:e5:d8:1e:50:f1:0a:d4:b1:0b:0f:18:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jun 14 16:00:54 2025 GMT
Not After : Jun 15 16:00:54 2025 GMT
Subject: CN=1e74049931737e733193102dd451e8d6b45b6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:61:c7:c0:7d:88:1d:9d:52:cf:ce:bf:b5:
36:24:44:a4:08:aa:16:91:f2:0e:08:12:bd:45:b4:
c8:ae:a9:32:73:4b:ef:f6:cd:05:1b:d7:96:9f:0a:
ff:4b:ac:29:9e:91:b9:e0:04:cb:29:82:a4:29:e4:
f9:24:72:81:a0:af:32:ea:2b:a6:18:95:db:b0:3d:
72:60:66:97:8f:73:b5:00:17:2c:54:dc:45:78:68:
e7:f7:6d:71:a2:fc:79:77:e0:f4:3f:3c:d6:f3:76:
66:d3:4e:58:f9:c4:7a:4a:c2:5e:16:a3:61:74:1b:
3e:51:70:1e:ee:86:3d:e2:a4:e6:f8:53:84:c8:05:
06:56:ac:f5:49:3d:f0:07:30:26:50:21:ee:c6:eb:
01:e4:e9:25:ae:4e:23:5a:a7:07:0d:2f:6c:f9:d5:
10:fe:87:57:97:31:8f:03:3e:2a:f5:24:ca:08:2d:
9a:38:7f:c1:cc:ef:24:7b:4a:9f:f2:0f:03:de:cd:
b7:7f:09:31:4d:e9:0b:7f:f8:c7:71:64:29:ba:aa:
8b:ba:b1:39:b6:0c:ca:ae:87:03:41:cf:0d:bf:09:
71:98:79:a1:a1:2d:bb:44:c1:c6:d9:a9:c6:85:47:
54:10:50:36:aa:c0:c2:5d:40:82:c5:e5:9e:b7:2c:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:74:04:99:31:73:7E:73:31:93:10:2D:D4:51:E8:D6:B4:5B:65:00
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bb:c8:bb:3a:d4:b8:81:56:6b:cf:b2:85:02:71:40:4a:c1:
77:64:8a:ab:13:01:fd:9d:39:fc:e0:d4:71:76:56:d6:9b:7c:
8e:71:23:0f:43:c2:60:29:dd:74:65:0a:b5:a5:b4:02:39:fe:
c7:5b:82:6b:bc:78:32:f5:40:07:69:d5:c9:a1:11:e6:b9:74:
b6:ca:6e:56:33:e3:c8:c4:c8:49:21:91:41:ac:c4:df:6a:31:
d8:fe:70:d2:75:cd:cd:4f:75:dd:de:d2:41:27:25:f5:ad:8d:
52:ef:e9:be:55:31:37:db:89:e4:58:51:a5:c0:19:80:86:db:
22:2c:93:3c:f0:f2:41:99:a9:7b:4e:3a:bc:a1:ad:81:b3:a0:
39:59:43:77:5b:0e:41:11:5c:71:22:a3:30:1a:b3:d5:c1:91:
37:11:6b:78:fa:fe:36:1a:a2:d1:33:12:36:10:a7:70:70:04:
ef:5d:d6:83:6f:97:9c:7c:35:fa:b2:24:39:65:58:0b:28:a3:
b6:0b:d2:81:c3:6a:51:67:54:96:51:a3:90:df:71:8c:c9:4d:
46:87:17:c7:81:c5:b1:75:7e:86:1e:a5:93:47:71:ed:80:56:
9e:69:88:55:47:51:50:cb:7e:65:25:3b:9a:fc:c4:79:3a:38:
18:cb:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:01:38 2025 by rpki-client