Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: tmIsQwfWAhT5HBdGl+MiEdDZjJliUDkxEibEuSK9MPY=
Subject key identifier: 14:69:FF:A0:8A:E2:66:D0:67:5B:8F:A8:20:01:43:5C:B3:50:51:4E
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 0197635EEF1E873C4088F3AF5F3EA44759EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 3F
Signing time: Thu 12 Jun 2025 09:00:55 +0000
Manifest this update: Thu 12 Jun 2025 09:00:55 +0000
Manifest next update: Fri 13 Jun 2025 09:00:55 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: dYlYFwXckrps+e8oYQY7C66/z8BkRhoBNluYf3phlFw=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:ef:1e:87:3c:40:88:f3:af:5f:3e:a4:47:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 12 09:00:55 2025 GMT
Not After : Jun 13 09:00:55 2025 GMT
Subject: CN=1469ffa08ae266d0675b8fa82001435cb350514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:53:46:f0:83:1a:38:a6:85:ef:70:f2:e4:
7a:42:c4:92:99:d9:f9:cb:77:a0:ed:95:b9:5a:ef:
43:a0:2b:6e:53:7f:4a:b5:6b:ca:7f:0a:fc:43:ba:
6a:84:6b:ea:7f:ea:a4:b0:e4:e4:f2:f2:cf:82:a8:
78:02:97:68:97:b3:95:e5:10:cb:ce:e7:be:f0:96:
ea:bf:94:3f:6a:dc:d1:04:30:fb:27:f1:3e:08:a8:
1b:f8:12:53:7b:ba:e9:5b:dc:35:da:1c:47:4f:68:
2e:04:f1:ae:61:67:32:98:8b:07:23:6d:6f:48:d3:
a6:9f:60:55:51:d8:34:3a:72:09:f2:4f:3d:bd:f2:
96:85:bf:25:60:34:e9:b1:ae:a1:a4:03:83:a8:ca:
9a:fc:d5:ea:b6:0a:86:15:d3:4a:a8:1f:6b:4e:4c:
a7:35:3e:6e:85:7f:1f:d4:64:43:fd:66:0d:b1:ab:
f5:40:1f:c8:a6:9b:fa:50:6c:bf:f1:0a:47:0d:6c:
11:be:a1:ec:ce:b6:c8:8a:1c:07:c0:c4:a5:a6:4a:
38:68:62:82:d4:22:4a:27:a3:7e:0c:07:d5:dd:25:
92:e7:5d:d8:6c:7f:b4:47:59:f5:c9:80:e2:3e:e8:
1b:94:4e:42:60:4b:66:a4:ef:9a:09:72:47:d6:d4:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:FF:A0:8A:E2:66:D0:67:5B:8F:A8:20:01:43:5C:B3:50:51:4E
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:40:79:98:2b:9b:36:07:31:64:c8:38:c1:90:cf:d8:dc:89:
e2:e8:3f:bf:f8:b6:b0:31:6b:ac:81:6b:02:ee:b3:a4:92:ed:
db:b1:9e:1b:ac:da:60:98:e8:d5:31:28:28:af:56:2f:d5:ac:
b1:d3:53:2a:cb:69:ec:6b:e2:13:ab:97:c3:2e:40:ef:66:ab:
7e:49:d6:7d:e1:b6:e1:87:fc:60:68:73:24:f9:3d:0a:c9:7e:
f8:71:01:b6:a7:93:b3:02:21:a5:15:9f:69:63:8b:d5:63:e2:
8d:f1:9a:79:c7:4d:e4:18:48:bb:17:ee:52:c2:ec:b4:e2:47:
4b:ef:3f:5e:9b:7e:c6:d0:11:36:c1:f4:4a:ab:25:8f:a8:23:
11:9b:f9:5b:15:db:c4:6a:d7:85:33:24:10:5e:df:8e:68:ca:
ee:e4:5a:0e:b4:8c:76:35:c4:2b:be:76:66:17:eb:9f:3d:86:
6c:ba:a7:8a:b5:81:a1:fd:5a:77:38:04:d3:c0:d6:8e:88:bf:
b1:4b:dc:24:c4:5e:98:ba:87:b5:d6:b8:d4:80:4c:4b:27:48:
63:fa:e9:c8:54:54:27:05:60:a2:70:eb:0b:f3:8f:bc:7c:13:
e3:a5:a2:bf:9c:d6:8c:23:36:a4:ad:ea:ea:68:09:12:80:d1:
50:36:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:13 2025 by rpki-client