Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: T+j+/m6ftu9QOn5S3wiHJ12ijTcftJ6RemNt5mPKl5s=
Subject key identifier: 13:5C:57:64:B2:0D:1D:85:5A:F1:6B:B5:12:90:57:3D:EF:E7:17:7E
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019747B07A8835B6402A590525A9A9675E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 0315
Signing time: Sat 07 Jun 2025 00:00:37 +0000
Manifest this update: Sat 07 Jun 2025 00:00:37 +0000
Manifest next update: Sun 08 Jun 2025 00:00:37 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: 8gU/vuS5N4ligmp3Z2tCTlViW7F1AHVHhBkkX7jBQgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:7a:88:35:b6:40:2a:59:05:25:a9:a9:67:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Jun 7 00:00:37 2025 GMT
Not After : Jun 8 00:00:37 2025 GMT
Subject: CN=135c5764b20d1d855af16bb51290573defe7177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:64:2c:fc:68:f3:a4:c2:88:f2:4f:93:6a:
19:d0:90:f7:30:57:81:aa:7f:ab:1a:5e:5a:32:17:
ac:ba:59:2f:2a:40:20:ed:e6:85:a9:62:5b:21:b6:
52:f3:76:e5:4c:5a:01:2d:4e:e4:7a:83:cd:5d:1b:
4a:c9:83:fb:6c:3f:fd:64:06:d7:17:f1:a5:b8:88:
12:25:f6:b0:fe:90:72:f0:e2:12:df:64:63:80:36:
4e:b8:f7:bc:f4:5b:ec:33:22:35:1b:8b:3a:57:b3:
d1:4e:fc:88:81:68:52:98:26:5f:21:92:29:e5:00:
cb:a1:4a:d4:35:87:a3:d8:8a:00:60:bf:25:72:b1:
68:4b:a6:a5:2d:e3:ad:2b:13:d3:03:4a:73:e8:18:
a9:af:b9:4e:8b:f0:0c:f0:64:56:b3:85:19:a5:3c:
32:52:14:cb:de:e2:49:d1:37:3d:3b:26:c7:ce:3e:
c3:44:68:90:42:ce:49:e7:a2:e7:04:95:80:9b:3d:
ed:6f:79:ba:d2:69:83:85:70:05:1b:89:e3:d0:0c:
1d:a7:eb:9d:47:39:60:9b:30:1b:43:3b:f4:d6:b1:
18:cf:19:ed:ac:00:e1:1f:56:c5:aa:e1:f5:b1:3c:
75:88:5c:fe:9c:6e:b8:ac:5f:15:7d:c0:ca:a3:6f:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:57:64:B2:0D:1D:85:5A:F1:6B:B5:12:90:57:3D:EF:E7:17:7E
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:2c:64:f7:ca:aa:5c:6c:8b:50:ae:2a:61:15:24:bf:48:
98:ec:d5:26:1b:63:e0:19:3a:e0:27:59:71:d5:84:1f:6a:4a:
45:e5:92:29:7f:05:ce:12:76:46:a0:97:9e:13:fb:c6:a5:a2:
83:d1:99:40:36:37:70:25:f8:bd:c0:bd:b1:d0:22:e7:45:d4:
44:90:d4:66:bd:e6:f9:85:34:40:1c:6d:b3:60:f2:05:57:4a:
a6:84:37:f6:b3:3f:98:d8:96:74:18:ea:76:da:21:a0:81:fe:
1f:63:77:da:28:3f:11:79:64:08:90:0c:4e:8c:f1:72:a0:1b:
2d:f0:00:48:bd:5a:ad:a8:5e:6c:3e:81:f6:16:45:e0:c4:fa:
08:bf:bd:9b:e0:cc:a2:f7:5f:87:58:93:dd:8b:d8:01:03:ca:
46:f1:e4:d6:2c:40:f7:39:32:bd:4c:28:0c:9f:0c:d8:97:b5:
68:45:96:50:68:ab:d4:f8:5b:8b:9c:c4:66:7d:fe:e8:38:c7:
47:d9:a7:c6:0b:24:40:96:5f:44:4c:f5:7d:1d:a0:0e:06:a5:
09:37:97:f2:89:53:78:6f:a2:4e:9f:65:56:db:38:a3:9f:3e:
0a:0d:47:74:55:61:c4:9c:47:ff:aa:21:96:63:bb:14:d9:e5:
41:81:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:53 2025 by rpki-client