Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: hQ6z01hWR7qO4Nt5UbHCHPf5ZcR+V7FoB+NPKvkWohA=
Subject key identifier: 48:7D:2B:4B:BA:CE:AD:77:45:5F:9D:67:43:F1:D2:76:62:27:A3:F1
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 01976FD0C3B3517364E3916749B56AF2F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 01CF
Signing time: Sat 14 Jun 2025 19:00:41 +0000
Manifest this update: Sat 14 Jun 2025 19:00:41 +0000
Manifest next update: Sun 15 Jun 2025 19:00:41 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: vlz+/oR5K9JXnmQ4pY++caiIMflPu/Ik35oHqLBLdn8=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:c3:b3:51:73:64:e3:91:67:49:b5:6a:f2:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 14 19:00:41 2025 GMT
Not After : Jun 15 19:00:41 2025 GMT
Subject: CN=487d2b4bbacead77455f9d6743f1d2766227a3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:fb:bc:a1:ad:37:24:d5:36:0e:3b:ce:46:
12:b5:02:87:eb:5f:8d:da:93:06:6a:9f:e1:87:0e:
df:d2:a6:5b:42:dc:56:80:5a:9d:46:ae:d6:d9:01:
0a:03:f7:3f:b3:3e:cf:ea:e3:22:e7:1f:6f:aa:e4:
ca:df:40:80:bf:a3:2c:4e:e6:88:d5:30:60:28:a4:
5e:7a:37:43:d1:ae:d6:f3:0f:0d:5a:bc:c9:b6:be:
73:a4:3a:09:92:12:ec:5d:49:09:0a:b8:c3:10:1c:
21:a4:3c:b1:6f:25:2f:7f:2e:39:aa:14:f6:eb:b6:
34:47:21:94:f3:4f:da:f8:92:8c:3e:c8:67:1f:e0:
60:c8:4b:51:c4:94:be:2d:46:92:3e:ea:3d:28:51:
38:88:69:17:33:f2:de:09:2b:8c:27:7a:9a:63:3a:
eb:f1:ea:8c:84:30:1d:b2:8d:bd:b3:e1:a0:bf:e1:
ab:7e:4e:ef:6d:89:62:1a:36:c2:00:35:3d:53:d5:
ad:ad:57:20:2f:be:67:c4:f6:d6:d2:a2:e5:8b:8f:
0f:9b:7c:da:20:85:f6:d8:59:25:8d:e6:bc:91:66:
4a:2e:ae:4e:e3:77:38:cd:cd:40:99:03:fe:8e:95:
e8:9b:87:79:8f:9c:60:ae:63:6d:02:c4:8d:ce:5a:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:2B:4B:BA:CE:AD:77:45:5F:9D:67:43:F1:D2:76:62:27:A3:F1
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:69:5e:13:e1:49:93:87:f6:00:ad:6a:48:ff:91:52:b2:8c:
15:ee:71:64:77:1c:c9:12:da:9f:f4:27:b5:2f:97:f0:1e:a8:
11:cb:0c:a5:ed:8f:c1:c0:b8:81:e9:69:37:3c:9a:5d:8f:00:
08:fb:fd:48:24:d1:d6:44:f1:d4:7e:86:96:47:6a:d9:67:8a:
2c:4a:50:65:31:cf:ab:23:ec:2f:cf:97:2f:85:0f:49:b7:9a:
19:90:4e:ee:d3:8d:6b:da:fd:3f:12:fe:53:3a:97:3f:62:af:
cb:67:4c:96:c7:25:b1:31:c1:8b:c0:05:73:ba:89:2a:43:17:
cd:30:82:c7:f4:f0:56:8f:38:cf:ec:44:f0:dd:3c:12:6b:1a:
76:7c:00:5f:ed:e1:90:77:0c:e6:c0:83:5e:4c:ef:25:05:77:
b7:60:16:4e:d9:1a:d5:81:ff:c4:1e:36:66:d7:3c:71:1b:b5:
f7:77:fe:83:9a:f2:cb:d3:3f:f2:82:09:d7:f0:65:f8:e5:c0:
79:3f:06:f1:2b:e3:73:73:0c:4b:8d:59:86:88:66:68:e9:14:
34:c2:53:a7:a7:b8:f7:03:9f:8a:cb:ae:60:35:e2:44:74:15:
cb:9e:db:e8:9a:fb:fd:3c:b6:49:26:d6:1c:08:54:ff:10:72:
8f:6b:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:08 2025 by rpki-client