Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: GhVnMmA5nN9CSMu68EprCYBYR+1VXf8+jGC6ztJZ+7Q=
Subject key identifier: CD:76:07:FB:53:DA:F7:4B:BE:4D:46:97:09:A5:54:6E:DC:F2:CD:45
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019842504BFE6A018F24EBBC41F95EFCE75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 023C
Signing time: Fri 25 Jul 2025 16:00:15 +0000
Manifest this update: Fri 25 Jul 2025 16:00:15 +0000
Manifest next update: Sat 26 Jul 2025 16:00:15 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: Wo68fk2UBO1Ont9KId9W1YlMSrAlOZFAtWVBEBHT+oQ=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:4b:fe:6a:01:8f:24:eb:bc:41:f9:5e:fc:e7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jul 25 16:00:15 2025 GMT
Not After : Jul 26 16:00:15 2025 GMT
Subject: CN=cd7607fb53daf74bbe4d469709a5546edcf2cd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:58:0b:80:21:b1:ce:64:44:20:ba:e2:e8:
df:73:37:64:b0:8c:b0:10:24:e4:42:4a:88:1a:8f:
5d:1d:ed:36:4b:f7:96:8b:c6:54:82:27:cc:82:ae:
33:68:b7:0b:da:14:f9:2a:54:c9:d9:4f:12:17:17:
55:c3:7b:af:7f:eb:42:0f:ee:70:de:42:59:d9:90:
94:01:44:44:01:67:e1:be:d7:80:83:b6:6a:80:fc:
90:12:d8:5a:6f:a6:5e:43:e3:f0:86:86:31:2b:0b:
73:a2:55:2f:fe:c1:df:59:a6:8a:db:65:2b:1c:9e:
47:33:2b:35:11:31:1d:35:3b:aa:f7:9e:b3:e9:6c:
b6:06:c9:70:f0:69:f4:87:10:6c:2f:cd:5f:3d:4b:
40:f8:38:f0:a2:37:03:df:82:6b:9a:40:e9:10:b0:
c4:8d:99:e7:e5:76:48:27:92:24:c4:e2:05:f7:a2:
8e:f6:5f:30:77:cf:10:49:1a:9a:3f:fa:8d:5a:8f:
ee:7e:ae:4e:83:49:5f:3e:47:d8:69:63:9e:18:7c:
0c:66:01:e6:4a:9f:4a:6e:17:c6:6f:f9:bd:1e:c4:
44:b3:c2:fc:24:47:81:a9:73:7d:2f:d8:f6:32:15:
e4:ea:ad:22:02:b7:df:70:8d:ca:54:0e:fc:b2:bc:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:07:FB:53:DA:F7:4B:BE:4D:46:97:09:A5:54:6E:DC:F2:CD:45
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:54:97:3d:d8:47:36:fa:af:bc:c7:24:3a:96:a6:51:6d:b9:
99:37:6b:dd:59:05:5d:66:a3:12:4f:cb:1b:1c:c3:dd:7b:dc:
ef:40:ed:70:ad:d7:b0:d0:c5:17:4d:56:2a:0e:df:72:f0:15:
81:da:ae:98:fe:8f:7a:9d:7e:a6:4a:1d:93:a8:57:0b:be:0a:
70:97:c2:14:6b:63:e1:cd:9d:1d:98:36:10:ba:6b:ef:97:12:
3e:f9:07:1a:e0:c5:28:0f:96:3f:e9:16:16:b5:e0:24:ab:45:
a3:7b:bb:42:61:61:ef:c6:f0:e7:24:37:e1:c0:74:5a:66:50:
b3:e6:af:fe:70:89:38:97:ae:92:b7:30:57:c1:7a:a4:5d:47:
a0:52:4b:94:5d:2a:7c:a2:d9:6e:f2:2e:b6:b4:2d:c5:50:e2:
21:ea:be:e5:3b:1f:c5:a8:2c:91:2f:6f:d2:76:d6:c6:9b:e4:
1c:05:f9:69:44:db:03:dd:fa:70:2c:e0:b4:81:b3:f0:9a:8e:
a9:19:15:da:93:d3:6d:ac:f4:60:a2:c4:f0:64:7f:f8:a9:54:
bf:2a:4c:da:dd:1c:ef:21:57:d5:03:c6:19:64:2a:ff:4b:e2:
6d:6a:dd:4c:88:19:54:af:e8:93:7c:fb:90:e4:f7:9e:4d:0a:
62:8a:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:23:03 2025 by rpki-client