Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: ++36VL989jpLHxxKJ7AfDrB8gbHF69vsU7aISAQuRVM=
Subject key identifier: DD:DA:23:B7:C2:4F:FE:A9:7B:F7:C0:BA:3A:63:43:69:52:46:C0:B2
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 0197474274D594DF98725FFEFA5755180B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 01BA
Signing time: Fri 06 Jun 2025 22:00:26 +0000
Manifest this update: Fri 06 Jun 2025 22:00:26 +0000
Manifest next update: Sat 07 Jun 2025 22:00:26 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: ovqirHfHFHe3dPrF4jpcs48890/wGl5/BWQMfdL/864=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:74:d5:94:df:98:72:5f:fe:fa:57:55:18:0b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 6 22:00:26 2025 GMT
Not After : Jun 7 22:00:26 2025 GMT
Subject: CN=ddda23b7c24ffea97bf7c0ba3a6343695246c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:97:ea:f7:da:ea:e5:b8:35:ae:51:d9:68:
85:c7:e4:38:24:4a:92:e2:99:cc:3c:51:4d:27:29:
79:80:d7:84:32:2e:90:bb:44:1f:5a:c2:2a:2e:ed:
52:60:c6:93:09:05:5c:ee:fb:b2:05:92:65:ad:ab:
70:ea:b1:33:3e:9b:19:b1:52:13:fa:73:81:53:d6:
6d:ad:09:5d:50:56:d9:77:ea:45:32:39:44:5d:44:
0e:66:d4:6d:d7:9a:8d:fc:8e:ff:a3:26:7b:b6:c5:
b3:ba:6b:b4:9a:f1:bd:4a:67:f9:04:be:88:1a:6f:
20:24:6a:6b:3a:9d:3d:e6:4e:ea:74:5d:dc:37:15:
74:4b:57:58:2d:f7:b8:83:cc:d6:3d:69:23:67:23:
21:6d:f0:cb:8b:60:b5:f3:62:48:b7:30:fc:ca:d9:
49:eb:82:71:0f:af:d4:7d:3f:d5:24:3f:56:58:d9:
9f:89:e0:56:db:9c:aa:cf:37:a1:9a:28:64:53:40:
04:62:61:cd:69:52:e0:9d:d2:00:21:5b:61:94:99:
74:2b:22:c9:06:6c:2d:19:00:59:1b:bc:76:62:2b:
51:b4:e7:7e:23:78:59:85:c8:88:bc:fe:3b:2e:a2:
9a:c3:f7:f4:ff:7b:39:2d:19:65:e5:21:d5:2e:fb:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:23:B7:C2:4F:FE:A9:7B:F7:C0:BA:3A:63:43:69:52:46:C0:B2
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:e0:d9:d6:48:4a:77:70:d2:20:99:d4:8f:23:64:ec:60:
bf:b7:9a:9d:80:96:44:1a:36:ff:28:74:72:d1:7f:41:23:68:
73:3a:c6:87:fe:8f:3b:19:1e:08:61:7e:99:b1:99:e2:ca:2e:
b9:47:e6:1f:ff:8d:3e:7b:ad:0c:df:b9:9c:26:e5:26:53:af:
8b:43:4d:9d:c5:70:c3:6b:41:6f:ac:c0:66:33:69:51:13:6f:
92:a3:63:6f:da:26:71:72:c0:8a:cb:5c:20:ef:e9:18:66:2a:
40:3b:a9:5e:d5:01:01:70:8f:97:95:6d:c4:95:09:88:cf:cf:
b8:ae:56:fb:52:06:8c:ea:18:f8:16:9f:9f:ff:d1:2c:22:d1:
7b:5b:14:c1:b4:e3:bb:49:8f:24:c1:14:ab:e5:50:d1:4d:3e:
b5:c0:e1:ad:50:99:c5:45:d1:62:68:a0:dc:0c:64:00:3c:b6:
9e:75:d2:8b:3e:d6:09:c5:2a:05:89:d8:ed:94:fd:78:c0:61:
80:83:aa:6c:37:07:24:05:42:b4:f4:da:8c:42:a7:08:15:98:
56:1f:21:2b:ab:60:6a:ab:b9:3d:b3:5a:87:54:39:77:1e:3c:
9b:be:3b:12:b5:ce:e7:bc:ba:ac:9a:11:62:1c:ee:c1:da:c3:
0a:c1:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:31 2025 by rpki-client