Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: pDbD1QxdkmbMg9hQx7NjgYXpf8H0IElK3GucBr6tnpk=
Subject key identifier: 9A:BA:F2:DB:15:FD:8A:9A:EE:74:24:22:95:B6:99:23:63:7D:25:E5
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019849659CD4E0D7A4FF5C197EF43759E9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1341
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: CfqY5O0u3JMl08RvJiKye0x9aW3CNUaehb+vWqwvdFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9c:d4:e0:d7:a4:ff:5c:19:7e:f4:37:59:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=9abaf2db15fd8a9aee74242295b69923637d25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:37:7a:08:13:d6:81:bb:da:4c:f5:ee:b4:
db:e6:75:a4:2a:bf:c6:f5:48:7e:c8:3b:5e:cc:18:
40:69:b6:17:62:ff:4b:e7:fe:48:0a:8d:09:fe:ea:
49:52:6f:b7:01:e2:87:ee:5c:09:8e:d7:d2:6d:b5:
32:8f:73:aa:70:aa:03:ea:de:cf:41:c8:1d:ef:d9:
6b:60:23:fd:13:9c:10:11:76:d5:a6:66:c1:70:7b:
1a:76:65:92:de:af:51:37:83:1b:68:6e:e2:94:f2:
6c:a9:dc:cf:f6:c8:8c:ff:5c:5e:62:97:34:d1:9b:
2b:82:93:c5:19:d9:2b:61:8b:4f:8b:9a:2b:54:75:
93:44:ea:5c:56:40:fb:aa:a1:e7:a2:0f:f6:32:68:
3b:ea:79:95:16:4c:73:02:2b:14:25:82:49:2f:c9:
1a:cb:9b:d2:99:d5:fe:05:7a:7d:3d:7a:a0:87:26:
66:98:6b:8d:4f:29:03:2b:3d:34:4b:b1:02:44:9c:
5a:63:4e:20:ee:bf:5f:ac:fc:68:8b:ba:8d:46:3c:
86:27:8a:90:9c:49:2f:f7:c4:17:04:bf:ce:fd:d9:
3e:20:36:af:2c:24:bd:6c:2b:39:e2:bf:cb:6f:f9:
97:9e:44:c7:81:26:6e:a2:96:23:c5:2b:dd:0d:b9:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:F2:DB:15:FD:8A:9A:EE:74:24:22:95:B6:99:23:63:7D:25:E5
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:1e:29:c5:e0:8c:e7:d0:1a:48:59:28:5b:be:59:96:52:
8a:08:5a:0f:6c:6b:6b:01:76:71:f8:47:a0:3e:49:2d:21:13:
1d:e9:90:4a:5c:ba:6e:b4:8d:fb:1f:96:90:45:fa:61:43:17:
5e:a2:0e:e6:60:3f:d7:dc:2b:91:30:7b:d7:52:00:ae:8e:e7:
12:6e:de:68:4b:57:0e:af:4d:c5:fa:41:34:2e:e7:1f:34:51:
c6:92:8c:43:38:be:1b:c7:c0:a9:20:aa:72:81:63:2b:b0:0f:
e7:06:15:a8:bb:ee:6f:9a:42:25:db:3b:73:bd:01:e8:7c:51:
b9:31:a6:70:98:ef:9f:05:a9:97:46:bb:7e:6f:a1:32:3e:1f:
35:6b:66:ae:32:cd:3d:58:9e:17:01:04:14:d2:d1:93:c2:b2:
c0:4f:74:64:c3:ce:47:af:be:0c:cd:e8:0a:d4:65:df:14:87:
ab:87:f0:26:81:da:aa:a7:7b:0d:1a:57:44:94:eb:03:aa:dc:
a8:a2:6d:f9:e4:c2:b2:7e:bd:73:f7:15:c8:9f:5c:c7:7b:ce:
56:c7:fa:9f:c2:e0:e6:a7:df:4f:fe:de:a7:f8:e0:aa:fb:7d:
87:10:02:44:b9:56:ca:07:de:0b:e3:33:70:02:e3:93:2f:e1:
30:47:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:36 2025 by rpki-client