Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: sOV2+9iTZLcJXV9+l9yhGrEYVLfwPIb+Lh2jCLaAqLU=
Subject key identifier: C5:A1:4F:7A:73:A2:AE:65:38:5F:27:F4:2E:7A:0A:BA:C2:23:0F:28
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 01984BC1B78B9E0AD73F73D99116865DF7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 11DF
Signing time: Sun 27 Jul 2025 12:00:43 +0000
Manifest this update: Sun 27 Jul 2025 12:00:43 +0000
Manifest next update: Mon 28 Jul 2025 12:00:43 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: Nj3IiqdsuOo7NwszNdrtoM9/nmIBEDYMAIlGAJv5F0U=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:b7:8b:9e:0a:d7:3f:73:d9:91:16:86:5d:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jul 27 12:00:43 2025 GMT
Not After : Jul 28 12:00:43 2025 GMT
Subject: CN=c5a14f7a73a2ae65385f27f42e7a0abac2230f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:07:07:39:55:1b:30:54:7f:58:92:73:47:
41:2d:60:6a:85:92:63:c5:b1:e1:15:e9:0e:02:cc:
ba:e4:3e:18:21:5e:8b:17:4d:17:ba:91:5c:90:a5:
35:00:98:bb:f3:3b:8d:ef:c4:4b:25:fa:ba:94:63:
dd:5a:80:c9:d3:53:f8:31:e8:63:e0:fd:93:d9:d8:
78:47:c6:86:a6:c0:25:7a:ef:b4:5e:24:a2:02:bd:
2e:af:49:f8:d5:9a:47:45:f7:23:50:87:58:0b:48:
2b:9e:f6:18:56:fa:bb:7b:f0:55:b0:5d:41:98:27:
85:32:e5:86:2a:1a:cc:af:52:0b:80:04:45:f9:2e:
69:9a:7d:e3:f1:42:fe:22:d1:83:78:7a:7f:eb:ad:
af:26:15:6b:ac:7a:97:53:79:90:94:0e:3e:65:f0:
32:91:72:67:83:d9:c4:97:e9:f9:ae:2e:29:50:77:
a9:a2:3e:3b:c5:d0:93:ab:59:77:80:c6:40:3b:f5:
39:bc:98:2a:18:42:00:d3:e8:cb:44:2d:6e:75:4d:
68:8e:ec:45:e6:24:2d:d7:f9:f4:04:fd:cf:58:0f:
41:b5:67:dc:16:94:9a:38:7e:0a:3e:cb:d7:87:a6:
44:69:eb:23:41:cd:6c:8a:6c:e8:be:4f:15:be:1c:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:4F:7A:73:A2:AE:65:38:5F:27:F4:2E:7A:0A:BA:C2:23:0F:28
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:61:13:4a:70:5f:ca:90:aa:82:bc:40:bd:cb:cd:86:6f:
76:78:e7:46:06:bc:8e:97:3c:86:52:f9:07:8e:ef:3f:e2:0d:
b3:dc:4f:0a:9f:8d:64:87:e4:a5:b1:aa:14:5a:5e:aa:ba:28:
2b:cf:89:3a:88:24:a4:df:0e:6b:52:30:0c:eb:8f:c9:b4:c6:
71:02:68:3b:ba:a9:37:b1:b0:dc:59:0d:13:3a:1f:a1:ad:8d:
9a:cc:df:68:b3:3d:ad:6a:ed:f0:5c:02:c0:3c:92:c5:d9:c8:
26:df:3a:c6:51:36:f2:55:ba:06:02:41:ce:cf:38:20:91:00:
bf:23:da:af:a7:a6:c3:a7:3d:83:82:45:29:34:41:28:f9:c9:
ba:ef:23:53:65:67:d5:24:44:f4:96:e5:36:ed:0e:70:44:28:
b3:b7:56:8c:b9:66:c4:4c:de:a3:72:fb:a1:3e:88:72:35:3a:
5f:30:a4:35:91:67:e2:ac:20:37:2f:d5:86:f2:c0:96:2c:34:
fd:16:e0:1d:f1:b2:57:9a:7b:33:4a:e7:f9:3d:62:2a:fc:be:
c7:9d:d8:30:50:d8:a6:fc:89:6a:29:49:c2:25:fc:3b:a1:6f:
f3:c7:71:b3:bb:7d:ad:44:fb:65:bf:c2:8d:fe:40:2a:63:53:
31:73:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:11:06 2025 by rpki-client