Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: hJp/aL27kf0B1CAwKlWoa1BLVeJSB4a4mqmwKbWch5w=
Subject key identifier: B9:7D:55:A9:51:6D:E1:23:7A:98:BA:1C:94:7D:3D:EC:30:F7:46:97
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01974A43A19B01B641E303E7EEEEED3816BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 12BD
Signing time: Sat 07 Jun 2025 12:00:35 +0000
Manifest this update: Sat 07 Jun 2025 12:00:35 +0000
Manifest next update: Sun 08 Jun 2025 12:00:35 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: P+yPCd8QAeQXx7p3zws4UTBcHaFg2jSe1CIaMNv6WxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a1:9b:01:b6:41:e3:03:e7:ee:ee:ed:38:16:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jun 7 12:00:35 2025 GMT
Not After : Jun 8 12:00:35 2025 GMT
Subject: CN=b97d55a9516de1237a98ba1c947d3dec30f74697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:f4:cf:19:b7:cd:a0:a5:ba:31:e4:61:5e:
b2:06:00:3b:de:f7:11:11:c6:f9:46:bb:ae:27:97:
fc:85:af:1e:bb:6e:65:c4:ab:a3:32:7a:e3:1b:18:
de:0a:3e:ca:b3:98:cb:f8:b5:a8:c6:9f:e0:91:43:
34:d7:72:4e:f5:b6:d8:dd:71:a6:19:d4:f5:64:2e:
72:20:72:1c:ec:20:59:c5:45:1e:54:d0:c5:d4:66:
16:fe:5b:9c:94:5c:b6:74:f1:fc:5c:50:86:d9:07:
d9:70:4f:74:3f:d0:e2:02:23:a3:bf:7e:7a:74:40:
84:41:75:10:87:f6:be:2c:9b:4c:54:c0:42:1d:e5:
47:8c:36:93:38:19:24:a1:84:80:ca:31:98:2f:e2:
ca:70:f3:06:41:0d:68:c4:0d:a7:af:6b:85:fb:26:
4c:7a:f2:2f:46:b8:37:ca:02:ff:83:5b:06:f2:34:
79:70:d8:41:96:97:4e:58:e1:a2:d5:c1:e6:7c:34:
fe:b5:55:00:fc:a1:9f:5e:56:15:56:ea:d3:15:9e:
8d:e9:e9:0a:e9:cb:87:0d:3b:16:1d:09:4c:07:33:
bc:1b:92:be:f1:68:3f:27:44:99:3c:f2:7a:7e:36:
63:ee:0e:f2:32:60:d8:73:c5:b6:44:48:d2:5d:80:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7D:55:A9:51:6D:E1:23:7A:98:BA:1C:94:7D:3D:EC:30:F7:46:97
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6c:6e:88:33:b5:55:76:48:43:f3:3e:59:4a:49:e9:21:aa:
ec:54:bc:54:85:d9:d9:4c:fd:4b:4c:14:7b:34:e3:cc:b9:58:
58:06:ec:74:8e:e3:52:4b:ce:ff:b5:8b:64:80:5a:97:76:3b:
d8:51:05:54:d1:50:dd:b8:00:d9:b4:30:99:95:1c:34:b6:07:
9b:42:5d:43:b3:3c:79:06:b3:94:f3:6e:67:ea:bc:37:0e:cf:
e2:a9:48:c2:d6:8e:9a:7f:b8:ea:0b:68:b0:f5:83:fe:34:05:
3e:9b:1e:fb:0d:89:c3:45:a8:bb:3f:2f:ca:bc:03:46:8f:76:
58:43:55:d8:19:ea:b6:de:b2:99:44:92:60:75:84:6e:ca:50:
8c:87:b9:61:7f:4c:43:df:50:2d:32:3c:91:91:f4:8f:ca:7e:
05:d9:06:ce:82:6d:4d:9e:23:96:00:f0:1e:52:73:5c:2b:dc:
e5:42:35:5a:dc:94:88:3c:6d:ff:f1:de:da:90:48:cb:5e:28:
c4:88:27:bb:27:e5:ef:4d:78:10:61:aa:8a:83:5d:60:a7:73:
04:ef:7d:d6:03:a7:c7:0e:d4:de:8b:5a:96:43:c0:12:e6:d8:
b8:32:6f:63:9c:8e:5a:8b:f3:0e:45:f9:04:22:41:25:6f:5c:
70:6a:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:00:48 2025 by rpki-client