Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: S+YJz6zAoBzQtfM/ac4XKASnyZhLrqMUpy5ah3CzJes=
Subject key identifier: 27:A4:13:E0:04:92:73:AA:09:CF:08:30:C8:EF:DF:39:59:80:99:DF
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 0197488D048225E08E945031602A8A08CD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0F77
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: 3o9UOox/9KPm0v2WXiydljKpNA/L3U4gENTG+2YpNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:04:82:25:e0:8e:94:50:31:60:2a:8a:08:cd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=27a413e0049273aa09cf0830c8efdf39598099df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:e9:2c:7b:59:b8:06:f9:3c:e1:2c:e2:ff:
33:c7:bd:dc:8f:6c:2e:ea:23:59:b7:f3:fc:65:96:
c6:3e:74:55:f8:67:56:e0:cb:e1:4f:27:5c:26:6c:
d4:8f:bc:75:1c:82:6f:3c:0a:89:26:f4:60:50:48:
82:c6:8f:5a:68:78:2f:f7:e0:73:b7:96:0c:cb:98:
b3:a8:d6:6d:4a:da:cf:c8:e6:14:aa:81:cb:5c:7d:
41:8d:1e:dd:68:39:0a:50:ab:d7:3d:f0:19:78:10:
02:48:fd:e0:19:73:95:95:57:0a:5a:ae:4f:c6:9f:
21:34:14:db:5a:45:bd:1b:93:5c:e0:fe:09:64:16:
53:7f:4a:9d:c2:92:32:a8:ec:54:62:52:61:75:6d:
7b:51:98:37:57:b6:38:50:40:f2:1e:eb:82:a3:69:
ae:74:87:93:3a:e4:07:2b:fa:7c:55:27:7e:eb:ea:
7b:fe:9a:17:60:87:80:eb:3f:92:8a:57:62:cd:0f:
d0:8a:1a:70:2d:cd:eb:21:a9:f5:ce:f1:9f:1c:c8:
b0:fd:d7:d9:cd:39:de:a2:d6:7f:8c:a2:bb:ce:9c:
9c:9d:6d:4d:53:44:7a:13:5b:15:4e:21:fd:80:6d:
ec:8c:6e:83:a3:8a:a3:29:d2:81:33:91:44:4e:ad:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:13:E0:04:92:73:AA:09:CF:08:30:C8:EF:DF:39:59:80:99:DF
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1f:17:e6:e1:7d:1d:a0:93:fc:c8:9a:3e:5d:ed:42:b7:de:
38:78:ae:8d:a8:e2:66:e2:a8:50:af:e6:8a:82:c4:96:4e:c0:
98:25:b6:1e:e0:32:db:b4:a1:ef:2c:8d:f9:39:9a:7b:23:f6:
93:f7:a8:ad:5b:37:d5:2d:05:0b:24:11:76:59:fe:0c:da:66:
04:68:e3:d8:7a:8a:38:33:f5:73:f8:c1:10:87:cc:f2:b4:e5:
80:50:db:25:00:25:62:30:dd:fb:95:63:48:b7:e1:4f:44:d2:
5a:f4:66:99:63:58:cc:65:e1:eb:c5:2a:fe:51:d9:10:a0:d9:
a2:08:1f:a9:74:96:4e:11:02:71:6f:5a:92:94:28:00:cc:29:
fe:f7:a9:8c:80:c8:a3:dc:5a:6e:79:e1:be:d6:bc:50:df:b0:
2e:30:91:fd:ac:69:1d:7f:76:e9:18:fd:e6:3e:2d:a5:a6:68:
54:2b:d2:ce:19:38:a4:17:32:b8:0c:6b:26:41:39:b3:b9:5f:
14:6b:9b:64:5c:df:5c:86:a9:b3:a7:a3:cb:fb:10:9a:7e:93:
6b:7b:33:89:3d:96:e1:ad:99:05:2c:33:d6:89:f4:41:20:07:
03:85:23:e3:64:dc:2a:22:43:ac:f5:16:86:ae:33:a1:87:ad:
f1:07:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:53 2025 by rpki-client