Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 3fOqjboXJa6tsfxOiYM7rqUpqBavOYShnt0l6594dUY=
Subject key identifier: BF:31:A0:DE:8C:23:E1:CC:A1:FF:BE:EC:50:42:D3:A0:D9:59:34:98
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019926696874C05562C65428950FE800E374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 01CD
Signing time: Sun 07 Sep 2025 23:01:06 +0000
Manifest this update: Sun 07 Sep 2025 23:01:06 +0000
Manifest next update: Mon 08 Sep 2025 23:01:06 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: MS00fGaWKVeJMwhmSUir+CZLEDrdy3tDZ3KT7o+g7/4=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:69:68:74:c0:55:62:c6:54:28:95:0f:e8:00:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Sep 7 23:01:06 2025 GMT
Not After : Sep 8 23:01:06 2025 GMT
Subject: CN=bf31a0de8c23e1cca1ffbeec5042d3a0d9593498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:af:f0:69:3f:ae:0d:25:e0:81:58:10:ac:
b5:9d:57:ad:69:74:c2:4e:7a:d9:b7:df:e9:75:10:
c8:1c:bd:56:4e:38:f0:a9:6d:82:1e:04:03:37:f6:
77:ef:b0:5b:aa:bb:08:1c:b6:15:20:66:c8:c0:b4:
19:e3:53:52:3c:7e:48:7b:a0:44:80:f3:74:92:13:
3f:23:77:fc:33:3f:05:63:75:16:65:e8:86:be:ce:
b0:e1:65:5d:88:19:2f:70:c8:b7:3d:e8:37:68:3e:
b1:59:fa:35:ed:c4:67:95:ed:00:4e:ac:a6:51:88:
c0:76:88:67:eb:ac:0d:9c:aa:13:0d:b9:7a:c1:4c:
39:5c:db:26:c7:d3:b7:39:16:21:93:17:d7:fc:17:
bd:6a:8a:a8:ef:b8:92:90:95:67:f0:df:b8:cb:ab:
c0:ab:01:02:ab:1f:da:59:d1:56:63:56:62:8b:31:
8d:0b:7d:e5:fd:81:63:57:ae:ec:17:75:72:30:b0:
6e:c8:56:e9:77:2b:dd:c5:92:67:a9:fe:95:6b:c4:
56:23:dd:67:fc:c4:25:2c:1f:62:58:b1:5a:e8:0d:
23:72:30:da:5b:37:48:42:3f:00:aa:4d:f3:f9:fb:
cf:6a:1a:29:85:60:ea:0e:63:ba:64:47:48:d0:76:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:A0:DE:8C:23:E1:CC:A1:FF:BE:EC:50:42:D3:A0:D9:59:34:98
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bc:6a:94:fc:03:8a:f4:90:da:c0:45:8b:7c:f6:cb:74:91:
f6:3c:85:43:ba:61:f3:c3:60:28:9c:92:62:76:42:2c:32:3d:
5d:3b:c4:f4:6c:03:c7:16:ba:04:8a:05:ba:6d:ec:d7:ce:2a:
1d:f6:ec:b5:ea:8d:1b:72:cc:3f:69:b3:55:c1:ef:3d:a8:a0:
4d:7a:58:82:c2:14:5a:a1:15:d4:23:4a:9f:fb:b7:4c:88:31:
65:58:76:14:01:d1:2c:81:5b:2a:f1:82:94:1b:8f:47:50:ec:
3a:85:55:01:ab:bf:71:27:cb:91:55:21:99:64:9c:55:85:06:
7b:84:e9:8a:c4:14:4c:2c:ca:d9:86:ca:4c:2a:60:50:47:b7:
d6:39:56:ce:6b:20:57:00:ec:fa:d4:8c:e7:56:1b:6b:40:7f:
3e:3d:bd:56:94:96:56:b4:57:1a:24:65:87:62:ab:59:62:df:
4a:65:99:84:ae:31:cd:d9:cb:4e:16:eb:cb:7a:b7:5e:3b:fa:
7d:dd:13:9e:2a:10:02:86:b7:27:b9:1a:1f:51:3f:96:9b:a1:
1e:c9:95:c8:6d:ae:3e:d7:af:32:3c:69:54:80:02:b8:0d:94:
41:e7:d7:b1:82:2b:d7:42:4f:6f:8f:52:cc:60:28:fc:29:f8:
fc:e4:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:14:43 2025 by rpki-client