Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: WjX6urkR9myfiRxVfEO/TE+PL0XnODKj9tDa72ZM3Mo=
Subject key identifier: CB:5A:61:87:85:CA:F6:A3:B2:7F:2E:40:00:4E:5A:10:89:FC:44:6C
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01974F337A70F1E74A6745F317192E006C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: EA
Signing time: Sun 08 Jun 2025 11:01:03 +0000
Manifest this update: Sun 08 Jun 2025 11:01:03 +0000
Manifest next update: Mon 09 Jun 2025 11:01:03 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: sGbF7SaBRy9cAbWJo8NtUcAmVAkjrsS3WIY9w07cUZ0=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:7a:70:f1:e7:4a:67:45:f3:17:19:2e:00:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Jun 8 11:01:03 2025 GMT
Not After : Jun 9 11:01:03 2025 GMT
Subject: CN=cb5a618785caf6a3b27f2e40004e5a1089fc446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:af:96:0f:2c:46:dd:72:f3:f3:55:52:b2:
a0:d9:7a:c2:59:96:b6:08:ed:38:88:26:da:91:5a:
66:8f:ff:a6:ab:38:f5:e6:6f:bf:ec:59:dc:f3:ca:
fd:d4:67:33:9c:29:06:1f:09:57:f0:02:08:59:35:
53:ec:2e:11:d1:ad:28:b9:8a:a0:3a:45:db:c4:2e:
2d:91:ac:4a:b1:36:f1:d6:4c:a8:05:f9:bd:dc:fa:
c9:b6:05:a9:df:8a:c2:3b:4f:86:07:a6:61:c5:9b:
c1:4b:e3:9c:cb:db:4c:11:9d:8a:3b:f1:09:cc:8c:
b3:8e:d2:89:d0:60:15:f7:44:3e:d1:3f:0b:28:24:
d2:2f:89:e7:b0:24:13:9e:e4:50:f9:55:d9:b0:ac:
d6:eb:ec:04:e2:41:37:b5:10:49:90:77:97:06:dc:
89:d4:c4:fa:c9:6c:3f:5c:7d:2a:b0:40:86:a8:d8:
8f:8b:6c:0d:fe:e3:6d:98:05:98:45:53:f5:48:b6:
05:03:8d:3b:4a:a8:6e:d0:37:02:88:ec:f1:c7:0e:
32:08:27:d6:f8:07:88:75:be:64:a0:34:ae:d8:4f:
3c:37:ed:17:84:61:16:c9:4e:ff:49:11:1f:3a:ed:
8d:6c:f8:6f:bf:53:78:4e:4e:62:06:9f:19:20:a1:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:61:87:85:CA:F6:A3:B2:7F:2E:40:00:4E:5A:10:89:FC:44:6C
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3b:bf:a4:5a:dd:31:9e:09:f5:8f:e2:42:4f:96:e6:68:6b:
2b:b2:bc:57:b7:6b:a2:08:10:8e:87:48:7b:e7:ca:8b:df:d3:
f7:e4:f5:b4:02:bc:d9:ad:a9:3b:ba:29:96:f3:13:dc:43:91:
48:67:5f:eb:f0:6f:09:b1:63:e9:44:4b:c6:9c:ac:b1:9a:98:
73:33:1c:36:b1:61:83:ab:9d:93:20:47:af:3b:03:20:0a:55:
80:86:ff:cd:95:89:ce:b7:c3:5c:d4:b6:d0:c6:e3:0b:7a:d9:
87:88:ea:23:7d:c4:a5:0b:eb:ad:d2:c3:44:6a:53:1d:5a:92:
08:b0:56:d9:e7:18:7d:18:2b:74:d3:5a:81:01:7b:aa:e9:50:
42:d4:29:ac:2c:57:30:63:69:19:f2:7c:f6:2f:65:96:c0:3f:
b8:8d:6c:54:35:2b:4e:68:a2:0a:ef:3a:0c:42:df:ca:11:6c:
73:fb:cb:1a:92:a8:e1:9c:54:ba:86:ac:7d:09:05:ba:6d:70:
15:da:c3:7d:47:b8:0b:2c:e3:c1:3f:b7:e9:b1:b9:2f:c5:d6:
5f:21:23:a2:90:df:d0:84:00:51:a9:75:78:da:bb:3c:22:0f:
21:7d:59:fc:d8:d9:50:e9:ea:4f:75:ee:15:cd:6e:65:72:34:
ee:98:72:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:54 2025 by rpki-client