Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: 1hI3uUWcTII5b1Rt3b15Vs/6xigy1wfuuv6gte6dg2E=
Subject key identifier: A5:FD:2C:A5:29:E4:74:C7:B7:E0:34:AB:DE:F9:03:48:7E:6E:5C:ED
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 0197B70EAB790980CC16DE99BAC86EDB727C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: 5gbvbJ253lESF41qG2UxSf/RCMb78KkklVyUsNNCKf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:79:09:80:cc:16:de:99:ba:c8:6e:db:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=a5fd2ca529e474c7b7e034abdef903487e6e5ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:5c:eb:bd:7f:5a:ec:46:1a:69:cd:cb:7c:
2d:92:c4:07:3a:fe:cb:4c:b4:a1:10:94:d8:5e:ca:
25:b0:50:86:23:fa:7c:1a:22:c1:41:32:3f:73:cd:
7a:a7:8d:7b:eb:49:34:ac:b8:ed:16:be:60:b6:a5:
de:e3:59:5d:97:dd:80:9d:08:75:5d:62:7b:a4:e2:
27:a2:f6:ea:f8:94:f0:be:d9:4d:cc:36:0f:32:e8:
c9:ab:21:17:a2:7c:60:ff:d3:5f:89:c3:f1:7f:61:
f7:b4:75:12:af:a2:0a:f0:9b:61:b3:1b:93:6c:bc:
7b:59:8f:e8:10:e2:80:b8:87:c3:e6:e7:b3:da:ed:
2e:b5:af:06:bd:39:f4:ff:5e:02:49:cb:3a:1e:6e:
3b:86:12:99:62:ec:8a:6c:de:15:fa:f9:f8:3e:9a:
63:a5:d4:ce:86:6e:28:ae:11:39:ae:08:cc:8c:ce:
68:af:34:e2:55:a9:fb:1f:99:df:00:78:ab:83:40:
20:74:06:60:fa:0d:5f:18:ca:09:d9:12:1f:9b:c2:
63:61:06:30:3d:ae:60:ab:7b:63:70:b8:d4:7d:64:
06:58:83:bd:35:61:5e:b4:1b:ab:56:32:ce:70:2a:
16:c8:6f:d4:c3:f6:f5:3c:71:cc:c6:12:5d:a9:fb:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:2C:A5:29:E4:74:C7:B7:E0:34:AB:DE:F9:03:48:7E:6E:5C:ED
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:87:0d:1b:95:2c:b3:31:80:c0:4e:90:aa:fa:37:a8:fa:fa:
b8:da:fd:8b:12:69:98:eb:91:7c:75:14:53:df:94:9e:38:2c:
45:10:47:00:60:7c:bf:85:29:b5:3e:50:54:ea:43:9e:71:13:
03:64:41:24:0b:ea:8f:35:91:68:b9:42:82:cc:9b:4d:80:cd:
b7:45:ad:68:60:2d:10:32:eb:f2:07:4f:1d:fd:54:60:be:4d:
8d:a2:b9:07:ef:da:db:04:2f:d7:3d:b6:fe:fb:6a:24:0f:f0:
4e:f7:61:ef:cc:09:29:79:08:cf:12:24:38:da:4b:5b:18:eb:
bc:06:4d:63:27:13:e4:ba:e6:b8:f6:73:b4:ec:ea:04:34:b6:
aa:92:3f:b1:c6:57:04:68:7f:1a:80:c1:3a:94:9c:5d:9f:7f:
b7:1b:a6:f7:98:5d:9e:af:e1:fb:e5:91:1d:78:bc:4b:fc:82:
95:0f:4e:b9:68:ef:e2:28:1d:a0:2c:d4:da:b5:23:cd:4d:0e:
0a:46:d1:85:62:5f:67:96:cb:e0:24:16:ef:c3:a1:c3:68:a2:
2a:66:33:be:6b:64:c6:b4:cf:64:06:44:05:c1:28:81:ec:29:
e8:38:ca:70:d9:3c:f4:aa:6c:33:db:bc:2f:b3:a7:55:e9:7b:
df:6d:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client