Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: c1Srp9e+THqUssTamzpFIcgMPITj/rYJQrFYrdYLFEo=
Subject key identifier: 23:F8:7A:6F:AA:78:59:07:65:5A:6D:92:7B:C1:FC:72:60:C1:13:B9
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 019761705882B2A6DE7ED15CF52F60D37200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 3E
Signing time: Thu 12 Jun 2025 00:00:41 +0000
Manifest this update: Thu 12 Jun 2025 00:00:41 +0000
Manifest next update: Fri 13 Jun 2025 00:00:41 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: AwHRI7Q/D9HGGOqtl/Juc87yo+64iCFuX7lnpvBCabM=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:58:82:b2:a6:de:7e:d1:5c:f5:2f:60:d3:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Jun 12 00:00:41 2025 GMT
Not After : Jun 13 00:00:41 2025 GMT
Subject: CN=23f87a6faa785907655a6d927bc1fc7260c113b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:73:c2:bc:34:ca:55:24:7f:f1:25:df:96:
23:44:bf:94:71:56:45:c2:a0:d3:97:68:78:bd:a3:
d7:01:02:6d:67:b6:6a:51:c4:6c:db:87:c7:5f:87:
c9:97:d5:ad:f0:67:27:7e:56:04:14:3c:17:db:5c:
62:e7:0e:42:00:52:ff:e0:93:4c:23:76:e1:34:7b:
46:14:94:9e:dc:2d:98:ee:65:47:be:ee:8c:81:5b:
f0:7a:d5:df:53:91:46:48:21:53:69:80:40:92:5f:
a8:50:ab:bb:ca:bc:43:92:9a:c7:c8:ff:47:d4:c8:
3f:ee:82:e8:e6:7b:ab:80:a5:35:b9:1c:68:ec:c8:
bc:ab:a2:47:72:6a:d0:6a:d5:0a:d8:43:2e:45:47:
f1:86:45:c5:0c:b4:ce:98:c1:2c:4f:a2:f1:51:a2:
0f:d1:68:58:a3:c8:ee:ea:d6:1b:f1:c9:1f:bc:9c:
30:c5:7e:9b:5d:fe:59:e3:6c:18:df:9d:51:17:74:
90:81:a3:e1:85:9d:99:2b:44:5f:1f:ef:c4:0d:80:
29:f7:cc:bc:20:5b:42:f3:d8:8d:c4:68:30:5d:11:
00:dc:f3:7e:38:a4:2b:a5:a7:de:39:78:bf:f4:a3:
9d:4a:72:d5:44:90:4b:bf:46:6a:b2:3e:22:7f:38:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:7A:6F:AA:78:59:07:65:5A:6D:92:7B:C1:FC:72:60:C1:13:B9
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:28:12:41:e6:e2:43:69:19:05:36:a8:db:9a:cb:52:03:
57:18:24:8a:74:27:ad:9a:af:b9:87:3b:ad:18:52:d6:04:ec:
f1:aa:3c:f0:ff:6b:af:51:a4:87:03:88:12:3c:90:50:5c:02:
fc:4c:73:75:69:2b:3f:d5:db:66:e8:04:d8:c0:25:ad:91:ff:
51:5b:52:90:0e:56:d4:8f:3c:ef:1b:24:fe:dd:23:5b:9f:fd:
f9:c8:3d:2b:82:09:15:6d:b7:ee:81:a4:87:8a:f1:48:51:8d:
66:85:27:3c:f5:6e:9c:35:71:56:90:34:79:a0:b0:59:f6:0d:
4b:3d:43:93:81:dc:3f:7c:e7:06:af:7d:26:cd:1c:88:f7:76:
b6:b2:a8:3c:43:44:ee:fd:38:a3:a0:5c:19:82:16:36:29:c0:
6a:b4:5d:41:f4:18:b7:ef:08:79:94:4c:fb:da:4b:52:21:42:
f7:c5:3a:56:a2:18:5c:e0:ab:fd:35:d4:cd:6e:29:ec:1c:1c:
7f:63:2e:0f:1a:73:a1:10:90:cb:e2:d1:d2:54:b0:7c:aa:82:
dd:3b:4b:48:93:b6:96:3c:e5:0c:e1:3c:38:53:0e:36:63:9f:
85:e9:06:5c:86:17:c1:04:a7:b6:0f:34:90:87:ad:e3:49:17:
8c:1e:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:03:42 2025 by rpki-client