Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 2NODuBe74cv+FaNs0ZAPYf3/iKkZh9Z6ZHtVt7nRThE=
Subject key identifier: 77:DD:FE:2F:C2:C1:6A:D6:2B:F5:BB:78:C1:F5:2C:06:42:45:2D:29
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 01983314984C9D40681D35FDEBF42A6F7C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 014F
Signing time: Tue 22 Jul 2025 17:00:44 +0000
Manifest this update: Tue 22 Jul 2025 17:00:44 +0000
Manifest next update: Wed 23 Jul 2025 17:00:44 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: zJ5Fu9wZ+rYfjpj3kELP1rW93YStAzVqVQK2poCeDPo=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:14:98:4c:9d:40:68:1d:35:fd:eb:f4:2a:6f:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Jul 22 17:00:44 2025 GMT
Not After : Jul 23 17:00:44 2025 GMT
Subject: CN=77ddfe2fc2c16ad62bf5bb78c1f52c0642452d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:01:72:25:32:dc:3d:92:7a:41:47:c1:57:
f2:db:4a:65:b6:2f:91:97:ed:49:2a:f9:e1:c1:f6:
91:06:2a:4a:32:29:7c:a8:fb:e8:66:27:13:c2:34:
65:09:68:21:80:ac:16:47:54:13:29:9c:a2:76:20:
4e:ee:bf:98:b2:8f:38:9f:c5:ad:d1:f3:43:9f:5c:
37:ec:4f:8b:61:cf:91:3a:a8:6c:81:5d:62:a5:94:
75:ea:c4:21:ab:d9:eb:1c:9d:a9:a3:ab:62:38:e8:
24:31:13:46:ad:e3:c0:c5:b1:30:e1:91:9e:50:51:
b5:1f:27:45:b1:4b:f8:04:2b:92:2d:84:1f:56:a7:
6a:fa:83:38:39:c4:fd:96:c9:47:31:74:0c:23:a8:
11:65:dd:1b:d6:74:87:31:df:10:c3:a9:46:e3:26:
90:98:e5:6f:1d:ea:5b:de:e4:78:60:bf:4e:b8:45:
ff:47:63:33:e0:a0:2f:e7:e8:4b:0f:76:ea:2a:33:
3f:d8:ad:83:09:15:66:e6:3e:14:20:b3:10:a0:a2:
f4:41:c3:61:b7:95:1c:39:5b:ff:b5:4b:c8:e8:17:
4f:fb:95:5c:bd:79:35:cb:24:38:2e:d3:f1:2d:7d:
1b:5f:b6:4e:36:3d:06:e1:ae:d3:1a:88:19:20:45:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:FE:2F:C2:C1:6A:D6:2B:F5:BB:78:C1:F5:2C:06:42:45:2D:29
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2e:99:82:38:43:95:9a:15:be:50:69:7b:db:ca:37:60:86:
9e:c0:31:6d:3c:1f:90:26:93:79:9a:12:94:45:7b:78:a9:45:
01:96:a6:c8:c7:6f:fb:e4:eb:49:e0:db:30:59:0d:b5:12:ce:
b4:aa:7b:bb:95:f2:27:d4:ab:7c:50:cc:22:25:d7:9e:36:83:
28:9e:52:f6:53:03:a7:ba:ca:08:aa:fc:45:18:bb:42:41:f5:
7d:b4:6b:75:56:91:cf:66:df:e6:f4:bb:5a:2f:9f:6e:da:a3:
c5:81:42:c6:fe:f7:a2:20:f2:30:7c:11:55:2b:0e:58:7a:89:
5f:69:1c:52:bf:ad:39:96:86:fb:ac:b8:22:1b:46:a8:6a:ea:
e4:18:95:88:e1:7f:6c:37:cf:a8:f7:53:02:64:e8:73:7b:89:
8f:00:55:54:b7:78:c9:31:a7:ac:cf:0b:9c:42:01:b2:f3:84:
15:9a:da:14:87:79:42:64:d5:22:50:50:33:5d:2d:1a:4e:cb:
16:cc:45:9d:1b:ee:9f:9d:9c:91:3a:ac:2a:aa:3f:b7:c0:ee:
1f:e0:d5:00:15:dd:60:9f:12:47:57:30:f0:34:dc:a2:3c:94:
f8:81:7e:cf:96:80:8c:1a:fd:da:c6:4c:52:89:34:33:9e:0f:
93:6b:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:07:13 2025 by rpki-client