Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
File: NgHDzOanHKshpLut8KuE3ePyurI.mft (raw, json)
Hash identifier: bdSF7rTYr61UBvn1+iU4UyIf3gZrQ2DK+JS3ACONP78=
Subject key identifier: 6D:69:42:8B:3B:15:5F:ED:F8:D4:9B:C6:88:7D:F5:29:44:F4:18:0D
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Certificate issuer: /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial: 0198530DD0702A1A57873F3AF355ADA66CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 22:01:10 +0000
Manifest this update: Mon 28 Jul 2025 22:01:10 +0000
Manifest next update: Tue 29 Jul 2025 22:01:10 +0000
Files and hashes: 1: Mk7YYF4o9LB74wKwKgBbcKzvyH8.roa (hash: OCqXIpcMD6jOp7DHnSx2liWfa4cjdFDkG92oQWOUUNo=)
2: NgHDzOanHKshpLut8KuE3ePyurI.crl (hash: bYi5wGDhqI5c7DFF+sBcL0DxzETAeW2jdbi4VdocrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:d0:70:2a:1a:57:87:3f:3a:f3:55:ad:a6:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Validity
Not Before: Jul 28 22:01:10 2025 GMT
Not After : Jul 29 22:01:10 2025 GMT
Subject: CN=6d69428b3b155fedf8d49bc6887df52944f4180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:a3:99:dd:57:c5:d4:eb:c8:fe:7c:d3:74:
b1:0a:b7:f3:a7:8b:b3:f9:c6:3d:c0:3c:cc:df:93:
3e:e4:09:aa:ff:5b:c7:8f:60:10:d6:07:3a:76:b0:
2b:05:f9:42:73:99:ae:c2:b4:2f:10:51:87:81:03:
28:03:ad:21:c0:39:66:bd:92:b7:c9:10:7d:0b:9f:
f1:ad:a6:ee:cd:9e:fb:d5:64:ab:ba:27:41:8c:b3:
16:92:2e:1f:75:eb:5e:e7:95:b7:29:65:4f:44:89:
9d:a9:6f:7c:f2:d9:43:1f:4e:95:6e:2c:bc:ea:f8:
6d:e7:4e:08:86:9f:f9:1c:d8:5c:80:8b:ae:90:92:
51:9e:60:f7:5e:a6:d1:d4:19:50:8d:97:42:a6:25:
e1:63:c9:7a:06:64:9d:47:ec:cb:1a:72:fa:15:d9:
fd:16:93:ba:64:84:67:a2:c4:71:24:cd:5d:22:74:
3a:be:2a:91:2a:6a:5a:07:9e:8c:cc:6d:bd:84:64:
00:56:30:7c:c2:9e:2d:4a:33:ab:e8:1b:49:dc:33:
6c:cf:93:41:18:8f:a6:a6:ef:6f:a7:7a:cc:6e:e2:
02:ae:53:9c:a1:e6:85:59:aa:d3:aa:74:ee:52:6b:
9f:a7:b9:a4:9f:95:c2:54:e8:b9:a9:be:d2:4e:34:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:42:8B:3B:15:5F:ED:F8:D4:9B:C6:88:7D:F5:29:44:F4:18:0D
X509v3 Authority Key Identifier:
keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:4a:37:87:4e:0d:10:af:82:ba:96:6a:ef:f9:54:c1:33:
c3:ca:37:0e:ab:69:d4:5a:7f:71:c8:df:db:2a:9e:1b:3b:b9:
83:a4:68:fd:a0:6a:65:92:94:af:32:19:a9:85:a0:72:61:d0:
a1:ca:b7:ee:6d:7f:a9:8d:e0:30:89:7a:b2:ce:7d:1e:f7:0e:
e0:75:e5:5a:7a:fb:a2:c3:38:37:75:db:eb:81:55:e3:42:68:
e9:a2:41:35:f9:a7:45:f6:08:7e:ab:0f:ad:db:e4:35:5e:bb:
01:b0:3b:ab:31:44:c4:46:65:70:db:ad:d8:56:b1:28:09:4f:
40:75:c8:b3:43:53:5d:61:94:d5:f3:06:0f:c2:ba:6f:10:b3:
bb:c4:96:1b:8a:a6:82:bd:98:4f:ef:12:8d:3e:f7:30:0e:5e:
f8:f5:f6:a0:c8:12:c8:e6:b3:b5:44:a1:f4:ef:37:86:6f:fb:
10:f4:80:e7:1d:f8:b6:33:a4:fd:c5:53:61:a8:93:2d:e6:6e:
f0:31:4b:c5:3d:7a:9f:0e:d4:ad:ad:79:ea:2b:17:1f:4a:87:
f5:9b:63:d9:60:d4:31:3b:4a:7b:78:44:cc:ae:8e:2a:53:70:
68:7e:24:db:6f:21:bc:58:ab:73:72:d9:06:73:13:5b:38:67:
8f:6f:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:18 2025 by rpki-client