Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: xUDZ8ts19ncKafAD5cFHrcM7PvbS4GHJ09Bo35P0/Sw=
Subject key identifier: 98:5E:06:D1:E3:56:EC:CB:F2:94:1B:37:0F:BF:01:93:89:11:CC:53
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 0197B5C525C76AB6495DDBC0A996D4E0CAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0D2C
Signing time: Sat 28 Jun 2025 09:01:25 +0000
Manifest this update: Sat 28 Jun 2025 09:01:25 +0000
Manifest next update: Sun 29 Jun 2025 09:01:25 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: 2CZG23ECnhAG1L6AAi+by0vNkIY58pg+lc2RjHW4K4k=)
2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:25:c7:6a:b6:49:5d:db:c0:a9:96:d4:e0:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Jun 28 09:01:25 2025 GMT
Not After : Jun 29 09:01:25 2025 GMT
Subject: CN=985e06d1e356eccbf2941b370fbf01938911cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:3a:ed:ef:e0:5d:34:01:18:68:31:34:8a:
6c:24:6c:c3:51:b8:78:94:3b:88:5c:1e:64:65:0f:
cf:ac:5c:85:ca:04:46:a3:4d:f2:30:ec:78:84:76:
04:ed:78:96:47:da:a0:5d:40:f7:16:2a:a8:72:6a:
fc:8d:ff:4c:59:26:52:bb:f7:27:50:f9:9c:f9:3f:
5e:ee:81:31:c3:52:aa:6f:98:58:64:99:68:1e:e0:
51:f4:77:c5:e1:b7:4a:7d:a4:ee:83:c1:db:96:b5:
9e:70:a0:14:81:ee:1f:19:97:89:0a:3d:f7:5d:56:
5d:ef:c8:ca:82:ec:45:d4:ac:fd:e0:bb:8b:90:de:
49:d3:9e:f6:3a:83:1b:b7:d8:cb:1e:ac:f1:96:19:
e1:9f:1a:02:b0:0f:37:94:63:42:c8:b7:a9:ed:1e:
5b:ce:8a:a7:dd:eb:b6:fc:0e:20:8c:c4:bb:eb:4f:
08:2f:6f:e3:12:9e:b6:6d:ed:2f:63:e6:2d:fb:2d:
c0:62:b9:d0:74:6e:ab:db:ba:22:c4:a2:eb:be:0e:
2f:4c:28:6f:6b:8d:c3:ad:ec:8a:a1:1f:53:95:98:
66:33:03:ac:de:c9:d7:71:33:3b:6c:6f:9f:05:f6:
5b:86:44:1f:fd:3c:b3:1f:2c:ac:fe:fa:7c:0c:82:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:06:D1:E3:56:EC:CB:F2:94:1B:37:0F:BF:01:93:89:11:CC:53
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:3d:98:18:91:b9:0f:cf:ea:56:c1:25:91:6a:4c:57:f8:
bf:0c:93:19:4b:54:b1:1d:cc:80:3e:3a:e3:aa:01:85:39:bf:
82:d1:5b:37:4c:c2:c7:81:79:d2:2d:25:89:69:02:98:f7:18:
8a:11:ee:ad:a3:f7:71:1e:67:ed:18:02:ba:89:c6:37:f0:85:
e0:15:0c:18:46:4f:f7:cb:87:f9:23:6b:ec:d6:f8:1a:38:f3:
38:00:6d:35:0f:2e:04:e3:60:3c:cf:4b:97:8e:a2:77:aa:9c:
f0:8b:da:04:e2:7a:ca:50:dc:2c:48:c7:8c:90:0e:ed:3e:50:
a8:45:1d:4e:ab:ac:76:77:4a:c0:3a:3f:3a:dd:0d:0e:40:02:
99:e4:2d:0d:79:3b:44:a4:5f:64:85:42:2d:48:2c:e7:90:41:
bc:f5:2a:00:fb:f2:25:ee:a1:1e:94:8d:eb:c9:4a:41:30:58:
8f:0d:da:1d:de:26:97:fe:46:5f:e0:ef:40:be:69:17:ef:c4:
1f:5c:42:be:a2:13:55:e0:e0:bd:ae:7e:42:87:ab:f7:1c:89:
ed:99:43:5b:2a:ae:99:2a:7b:cb:55:c9:b4:33:a3:0c:38:e8:
9d:a8:20:c4:55:18:ac:b0:40:25:33:de:79:8c:06:42:fb:ec:
3a:5b:94:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xSXHarZJXdvAqZbU4MrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy
ODI5NGUwHhcNMjUwNjI4MDkwMTI1WhcNMjUwNjI5MDkwMTI1WjAzMTEwLwYDVQQD
Eyg5ODVlMDZkMWUzNTZlY2NiZjI5NDFiMzcwZmJmMDE5Mzg5MTFjYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDE67e/gXTQBGGgxNIpsJGzDUbh4
lDuIXB5kZQ/PrFyFygRGo03yMOx4hHYE7XiWR9qgXUD3Fiqocmr8jf9MWSZSu/cn
UPmc+T9e7oExw1Kqb5hYZJloHuBR9HfF4bdKfaTug8HblrWecKAUge4fGZeJCj33
XVZd78jKguxF1Kz94LuLkN5J0572OoMbt9jLHqzxlhnhnxoCsA83lGNCyLep7R5b
zoqn3eu2/A4gjMS7608IL2/jEp62be0vY+Yt+y3AYrnQdG6r27oixKLrvg4vTChv
a43DreyKoR9TlZhmMwOs3snXcTM7bG+fBfZbhkQf/TyzHyys/vp8DIJAdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJheBtHjVuzL8pQbNw+/AZOJEcxTMB8GA1UdIwQY
MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt
MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl
LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/M9mBiR
uQ/P6lbBJZFqTFf4vwyTGUtUsR3MgD4646oBhTm/gtFbN0zCx4F50i0liWkCmPcY
ihHuraP3cR5n7RgCuonGN/CF4BUMGEZP98uH+SNr7Nb4GjjzOABtNQ8uBONgPM9L
l46id6qc8IvaBOJ6ylDcLEjHjJAO7T5QqEUdTqusdndKwDo/Ot0NDkACmeQtDXk7
RKRfZIVCLUgs55BBvPUqAPvyJe6hHpSN68lKQTBYjw3aHd4ml/5GX+DvQL5pF+/E
H1xCvqITVeDgva5+Qoer9xyJ7ZlDWyqumSp7y1XJtDOjDDjonaggxFUYrLBAJTPe
eYwGQvvsOluUvw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:09 2025 by rpki-client