Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: 1Ch8HlNvhRsfJeYwz87RGxdyZICdtq9adQXDwbi0jf4=
Subject key identifier: 97:96:C8:BD:E6:37:96:90:80:2C:9D:79:D4:4E:7F:37:8C:A0:49:54
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019921E749DD9CD69FB5CF8968AE19450A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: huQWJ4Iy45I7OywPDxKfMk92N9HrG4lmo44umLEqiuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:49:dd:9c:d6:9f:b5:cf:89:68:ae:19:45:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=9796c8bde6379690802c9d79d44e7f378ca04954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:ad:60:f3:34:8b:4a:f2:de:22:32:e6:56:
8f:d5:6e:7d:fa:e7:22:a8:f9:49:77:6f:ac:c3:c5:
c2:84:65:0b:e1:dc:3a:15:cf:4e:d2:6c:66:98:b3:
82:c7:68:69:ea:58:a0:05:27:33:d4:ed:9e:d0:e1:
c8:cb:26:7e:f0:01:b2:04:68:b5:6d:c6:63:5b:f5:
67:ef:4a:fc:3f:8c:34:e0:ff:fc:f7:ea:fa:3d:fa:
f5:4d:9a:b5:d6:ab:23:e8:0e:32:75:bd:12:a3:b3:
0f:51:ac:5b:8f:fb:a1:fd:39:5c:65:48:63:13:64:
e4:f6:0c:a8:3b:f7:9e:9e:b5:49:ea:33:ea:db:bc:
97:f0:63:aa:f0:d3:17:21:c6:3a:94:82:76:b0:4b:
d3:de:2b:c9:05:92:fb:f1:e7:00:ff:28:4c:b4:fb:
e6:07:f1:0a:70:e7:31:dc:fb:f0:ca:c9:02:f1:04:
82:90:9a:40:56:67:57:df:16:f1:ff:45:6a:da:c0:
b3:af:c8:e2:17:75:0f:07:15:72:bb:65:1b:8a:08:
72:9e:5d:2a:39:54:39:6b:23:a3:21:83:d9:cf:66:
d6:ee:43:73:a7:50:c5:bf:63:87:48:b7:58:72:e7:
07:7d:55:3c:6b:00:cc:d2:c0:9b:2d:f2:79:94:27:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:C8:BD:E6:37:96:90:80:2C:9D:79:D4:4E:7F:37:8C:A0:49:54
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9b:50:0c:bb:ae:f6:d1:1b:0f:c4:7b:3f:9e:91:3c:a3:5d:
76:19:f3:b1:ad:58:4e:82:64:c7:3e:1a:e4:23:6d:71:d6:cd:
6f:3c:e4:78:14:6b:2e:18:ae:f4:3a:bd:51:e6:b9:d4:38:dc:
89:90:d1:ef:d8:09:a6:ec:f4:16:bf:cd:f0:09:15:11:b9:7b:
e6:ed:af:aa:d6:54:81:99:04:56:a0:54:36:9f:ec:02:2d:2b:
85:64:a6:b6:d2:1a:4a:d9:12:ab:e1:25:06:08:e8:98:ce:87:
b5:dd:17:38:17:87:a4:f3:d6:82:af:6d:fc:95:65:9e:b3:f5:
22:81:a9:9b:8a:9a:b1:40:e9:a4:63:87:9e:1c:6d:32:1e:91:
c7:c9:17:95:02:31:1b:8c:c2:44:bc:0a:14:39:63:37:82:8c:
8b:df:8b:70:f3:53:ad:5a:ff:ab:dd:71:8a:c1:8e:b0:40:1e:
a4:33:e3:38:d8:2a:06:ff:fa:10:2d:50:f2:1f:88:b2:85:5e:
9c:80:9e:5c:f5:4d:5b:aa:89:cf:b1:b5:59:b2:1c:b6:e2:12:
aa:9a:28:eb:71:34:fe:70:ab:28:ff:b8:50:d7:a8:a6:9e:d0:
32:a6:7a:51:ad:83:ef:84:f0:94:3a:87:b2:1e:64:bb:d0:6a:
70:8e:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client