Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: qwyneZ1PiAVcoNgF7n7VB1AhpUJvbCJqgC9MdbtaCzc=
Subject key identifier: 83:94:CB:15:50:30:31:83:6C:F9:43:D8:10:5C:45:21:19:C9:18:12
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019878636E8D9D411C83560B282EFD20E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 0258
Signing time: Tue 05 Aug 2025 04:00:38 +0000
Manifest this update: Tue 05 Aug 2025 04:00:38 +0000
Manifest next update: Wed 06 Aug 2025 04:00:38 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: +Irn9PZ97rjKySzl76Mx3Csc5hm+mgg/lw/Um+ANx7M=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:63:6e:8d:9d:41:1c:83:56:0b:28:2e:fd:20:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Aug 5 04:00:38 2025 GMT
Not After : Aug 6 04:00:38 2025 GMT
Subject: CN=8394cb15503031836cf943d8105c452119c91812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:b3:fb:80:e0:b5:84:06:10:fd:37:67:13:
5b:7c:47:59:ea:c6:01:26:fa:7e:60:04:e8:be:d3:
48:23:0a:d8:86:6d:a0:62:88:ec:23:4c:60:62:16:
25:c5:b5:4f:23:ef:3e:91:c2:b4:49:f4:e5:c0:ba:
f1:39:62:52:91:99:bf:ae:0e:1a:b1:ad:9c:2d:f6:
77:76:7a:7a:fb:da:a7:e6:4c:33:80:ef:c3:70:c7:
25:85:72:87:3b:74:d8:cf:e7:92:f5:19:4c:a0:99:
25:42:21:30:d7:82:2a:82:64:52:c0:20:dd:ab:9d:
fe:72:de:28:d0:74:a8:cf:bb:6d:b7:20:4a:22:fe:
a9:9e:6e:f0:c6:a5:74:1f:17:66:81:55:15:e4:0a:
17:c2:dd:2f:fa:b4:af:2b:b4:32:79:d7:ea:2b:39:
4a:12:4d:90:a3:77:66:ff:86:f5:f0:ae:99:58:60:
46:44:20:2d:70:62:84:5f:e6:a8:3c:1c:89:a4:7f:
fb:e4:a3:56:02:36:45:06:2e:ee:af:44:f4:40:d8:
46:f0:d9:de:ab:76:f7:2d:9d:0c:ec:46:cf:c4:b6:
e5:d6:fa:52:23:43:30:57:c7:79:44:2a:a5:b6:f3:
08:a5:a5:46:e1:57:04:e3:8c:b9:3c:62:2a:9a:c5:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:CB:15:50:30:31:83:6C:F9:43:D8:10:5C:45:21:19:C9:18:12
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:55:4a:47:51:04:04:e4:85:16:28:00:70:c8:ab:4e:79:
13:56:6c:a9:40:94:47:6a:a2:55:ed:20:20:3a:46:7b:6c:4f:
d7:a9:1c:0a:2a:ec:62:dd:03:9e:64:9b:2a:87:f4:02:36:2b:
01:74:15:29:e6:70:26:69:5b:01:e9:e3:a2:c4:56:7f:a0:dc:
57:6c:41:a1:14:7a:1a:16:3f:98:96:66:19:1b:0d:91:2e:a0:
f5:6c:ab:d3:88:fb:ef:cd:5d:0e:d2:b8:f1:54:1b:8a:9e:f7:
9d:11:d9:8c:3c:67:81:d7:4a:1b:29:7a:2e:36:88:d1:b4:44:
ea:c9:e8:91:9e:a9:cc:75:7b:fa:8e:eb:7a:90:5a:96:9a:80:
ab:8f:60:ad:28:d2:69:38:81:de:67:06:ae:38:c6:cd:ba:f4:
64:ed:3f:c2:9a:e8:93:2e:90:7f:33:26:6f:1b:ce:38:1e:4d:
2a:3b:49:32:b6:1b:19:23:f5:cd:11:a8:98:7f:12:76:a2:27:
9b:66:2b:96:7f:35:59:48:f2:3d:5d:1e:22:38:e8:3f:61:16:
e0:53:56:aa:01:b7:da:2d:1f:46:84:ca:16:fb:ca:04:9d:d8:
68:75:d8:6d:e0:13:08:e3:12:1a:b0:d8:84:9c:b5:f6:bf:6c:
9a:8b:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:15:34 2025 by rpki-client