Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: eYZMpV/v3ghXrrEdWYt4R71oD3TmSBHodOCayFr3ACo=
Subject key identifier: 5B:3D:7A:93:38:56:A1:F7:62:1C:88:84:EA:7C:C6:B2:8B:C2:B7:76
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 01974B56C1D429E2B290A99B0BF93B28181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0165
Signing time: Sat 07 Jun 2025 17:01:06 +0000
Manifest this update: Sat 07 Jun 2025 17:01:06 +0000
Manifest next update: Sun 08 Jun 2025 17:01:06 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: chhDUlis8BdHB5OeFVOyJ9w4LoJLcsOdY2KpACWIqpQ=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:c1:d4:29:e2:b2:90:a9:9b:0b:f9:3b:28:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jun 7 17:01:06 2025 GMT
Not After : Jun 8 17:01:06 2025 GMT
Subject: CN=5b3d7a933856a1f7621c8884ea7cc6b28bc2b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:4e:6e:41:0f:3b:ea:0b:c3:51:4e:b5:10:
90:3e:63:42:69:d5:a6:0e:07:05:80:73:d1:49:be:
30:fb:fe:a8:62:dd:02:6f:0b:53:49:a2:ac:4a:d8:
9d:eb:e5:b4:25:2a:67:92:63:54:b8:4f:4e:12:f8:
1d:91:fb:45:37:c2:6b:c3:c9:64:c0:4c:d3:fb:db:
71:9c:95:02:ec:3a:32:0a:a2:38:69:23:17:35:1f:
44:6c:f6:cd:3b:45:40:c8:e8:f5:60:6f:51:1f:9b:
04:0a:62:47:65:58:4f:e5:a5:3e:f7:8e:28:bb:19:
0a:59:cf:b5:0e:62:59:2b:0e:b9:1c:89:f5:80:44:
ac:b8:19:2e:ed:59:78:47:26:f3:9a:03:66:03:43:
7a:ca:af:b2:57:4f:02:70:08:3d:fd:d0:fd:cc:e5:
47:d6:a7:a0:30:77:15:f3:46:62:6e:90:0c:9d:35:
f9:e3:d6:4a:23:b1:a0:ed:5e:c1:a0:8f:05:8a:e8:
7b:6c:e1:df:02:bc:20:e5:3d:1e:09:f3:82:ed:65:
21:c5:1a:96:f9:83:23:24:e1:c2:14:b6:4d:e9:1d:
e2:5b:21:90:b5:d0:ed:98:7a:e6:19:b8:b5:33:fc:
88:16:a2:19:8e:4e:b3:83:76:fc:77:d9:c4:7a:1d:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:7A:93:38:56:A1:F7:62:1C:88:84:EA:7C:C6:B2:8B:C2:B7:76
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:24:5a:d7:57:7d:84:d4:cb:4b:31:57:b1:e9:1c:b0:ee:cb:
14:75:ea:59:d3:f0:3a:2c:9d:f3:3e:52:ad:53:cf:75:03:dd:
25:ed:26:c1:96:ed:84:d5:12:bd:0b:49:ce:9a:30:aa:37:a1:
f3:57:e3:2f:ed:6d:e4:e8:02:98:be:43:d2:03:77:59:ef:5f:
74:c7:0d:b0:64:3f:60:ad:f1:7e:33:81:5a:e5:3e:40:2f:c6:
52:e3:14:87:ff:59:dc:84:c1:94:fe:72:59:de:6b:a9:4d:89:
9d:69:b5:7b:79:30:5e:f5:94:e8:6b:f0:65:3f:0b:95:f4:36:
f9:d5:8d:b6:69:8d:82:6c:bb:6f:f9:e6:95:78:57:5d:44:ad:
cc:a8:f7:d7:94:39:6a:52:ae:6c:a8:2f:02:09:1c:70:59:1b:
d0:f2:44:1c:31:bb:14:3d:64:0c:b4:2b:ae:31:4c:8a:77:54:
60:d9:80:d6:9d:68:2a:87:79:c3:a6:3b:2d:83:25:eb:3e:8f:
c4:e8:81:45:75:e9:ca:98:b1:fc:74:ad:06:96:81:b6:ff:21:
b0:b3:a2:27:b8:41:b2:4e:ce:70:42:6a:a2:52:92:b5:ac:39:
ee:ef:1c:d2:bf:f4:64:0f:0f:c5:a9:59:f5:de:2f:04:41:e7:
fb:30:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:55 2025 by rpki-client