Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: 8HdWYEwiylEn1SRCDZjbsRRonm2vFHSdAocUEMNogtw=
Subject key identifier: E1:4C:4C:E9:F5:BE:8B:FF:52:B2:95:9C:AC:37:3C:32:A5:DB:E0:E4
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019750462FF707A6698D051DF8CA61CA2A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:01:06 +0000
Manifest this update: Sun 08 Jun 2025 16:01:06 +0000
Manifest next update: Mon 09 Jun 2025 16:01:06 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: Nvjw+D1duUxIHZIYVWEtVHy8teJKzWSC3+fNuGzoqgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:2f:f7:07:a6:69:8d:05:1d:f8:ca:61:ca:2a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Jun 8 16:01:06 2025 GMT
Not After : Jun 9 16:01:06 2025 GMT
Subject: CN=e14c4ce9f5be8bff52b2959cac373c32a5dbe0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:18:33:73:1e:92:0f:ae:8a:00:8b:24:1d:
19:b1:25:e2:5f:e1:2c:4a:6a:71:0a:d4:0a:44:14:
97:5d:26:56:df:30:63:ea:79:37:d9:ec:93:e6:da:
b0:f3:7e:d6:f3:dd:4c:a4:28:44:9e:e1:4a:03:eb:
b1:bf:ee:a6:95:d2:a2:9c:b8:6c:e0:ff:ff:d3:ad:
88:39:a4:59:e3:76:68:86:55:b9:4a:cf:21:47:94:
60:55:b2:c5:0c:de:93:31:6e:5d:f5:96:6c:62:f3:
ab:bb:50:68:9e:09:f2:32:55:df:64:88:4f:7b:7c:
53:8b:a5:87:3c:06:29:5f:24:11:4e:e2:ba:29:ed:
25:16:10:6d:ba:1c:f6:03:8a:40:e9:f7:d5:7a:72:
5f:c4:6d:9e:d2:98:30:93:f4:51:e9:0a:f2:10:4f:
0b:1b:bd:df:3f:96:89:8c:23:19:24:d7:76:07:64:
52:4b:2a:92:cb:0b:89:d1:71:5e:41:2c:c6:f2:c0:
e5:43:45:be:65:f2:fc:10:5d:b8:fb:4b:6c:52:68:
2f:a1:a9:a8:63:47:12:b9:ad:8f:04:ba:88:0b:7b:
e4:39:18:dc:af:85:47:b5:d6:67:98:ff:24:9d:1d:
18:89:1c:7f:66:81:8b:db:28:4d:df:f9:05:24:d1:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:4C:E9:F5:BE:8B:FF:52:B2:95:9C:AC:37:3C:32:A5:DB:E0:E4
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:84:fd:be:f1:47:a8:51:54:5f:22:54:60:5d:09:02:1a:0a:
f7:9c:41:99:02:f3:b1:1f:1b:aa:bc:05:ee:9a:f4:c2:23:55:
69:0d:38:ee:c2:5d:51:25:35:7c:a7:6b:19:6f:ab:52:4a:1a:
85:fd:1f:db:f5:eb:40:bf:d9:83:4f:14:95:de:de:e3:cf:4c:
70:6d:e3:49:97:2a:a8:23:c8:66:ce:c2:26:d2:2a:34:c6:d6:
73:b4:ab:46:52:48:b3:52:27:2c:b3:c1:43:01:e0:7a:4f:a0:
9b:0c:b2:16:e4:4c:de:3d:c2:69:22:54:7f:a7:a6:9c:7a:ca:
af:a1:df:77:a8:e1:3b:83:75:55:b3:7c:c4:d4:00:29:96:4e:
42:44:46:ab:f5:4b:9b:df:70:93:6c:3f:7d:bb:a3:09:bf:5a:
82:a6:43:9f:7e:fd:8a:95:3c:a3:6d:c0:3c:ea:95:e7:2d:89:
06:fc:2d:0e:a9:ad:5f:34:c0:43:5d:d3:4d:91:bb:55:91:64:
da:5f:64:65:94:ba:7d:e6:73:ad:2c:e1:20:b3:1a:a1:37:65:
fa:3a:fc:d2:78:cd:ac:7f:7a:c3:27:c2:fb:ec:b3:00:d8:c1:
16:d8:d5:00:eb:9a:ce:95:1b:df:ed:8f:38:92:84:50:f6:c2:
96:8e:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:24:01 2025 by rpki-client