Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: F6jAiYjX1Ua813VllvHiWHvNvgm05nkgSIBKI5k1+Kg=
Subject key identifier: 05:AF:46:B6:A3:1D:A3:58:F0:E3:63:93:3B:1B:51:9D:70:E6:82:C1
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0197B77C3B8DD81474354E567381CA69B774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 099F
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: dx5k1HKtYuQSzmnK51NmjfX/cCFG6CUBYrdK6HoGhSo=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3b:8d:d8:14:74:35:4e:56:73:81:ca:69:b7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=05af46b6a31da358f0e363933b1b519d70e682c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:3d:00:17:ba:b1:5b:39:ba:9f:49:c7:54:
7c:92:b1:03:1d:30:26:72:15:e4:4e:d0:c9:4d:c6:
6a:e2:16:67:73:a7:c1:00:5e:71:e6:65:1f:13:70:
bb:da:55:24:84:1f:21:c0:5d:59:ef:61:01:96:74:
55:b3:16:db:9e:78:a3:4d:da:bb:59:9a:61:9c:10:
66:6c:dc:6a:8f:98:2e:3a:9a:93:3d:ee:b5:56:f0:
c4:c5:e3:e8:34:fc:9a:74:f9:b0:3f:ac:c0:b5:b0:
c8:c9:e7:06:05:a7:0c:b0:7b:ab:99:7d:84:4b:b5:
ea:b5:45:fb:1b:2d:0c:6f:fa:ce:31:55:e4:03:7e:
0a:ea:cb:ac:99:16:a7:13:9d:6e:9a:a5:37:dc:77:
60:ab:3b:6e:5f:b5:26:c9:c6:10:41:cf:0b:97:ab:
a4:bd:b5:21:74:d6:fb:78:26:4f:b8:cf:13:02:f0:
5c:88:c6:dc:4d:97:9e:79:7b:cd:a8:72:08:6f:95:
c8:4d:ba:95:c9:86:34:f8:2e:7b:7a:94:32:23:d1:
09:1b:39:a8:69:c9:d4:36:94:38:d2:da:2f:8e:0a:
00:95:6b:07:6d:e6:4c:3c:79:ae:37:7d:33:de:56:
ba:ee:93:8e:9a:f4:38:c4:12:a8:ff:36:64:9e:d5:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:46:B6:A3:1D:A3:58:F0:E3:63:93:3B:1B:51:9D:70:E6:82:C1
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:38:fc:ad:f8:30:6e:6a:2b:35:ab:e5:8a:fc:77:5e:c8:5d:
77:72:52:4e:2d:49:96:22:87:bc:03:bd:53:05:f6:9c:a9:64:
36:85:c1:d4:04:b2:37:a6:fc:53:9a:b7:24:4b:39:f5:34:85:
9a:84:a2:f2:3e:18:2d:d3:9e:db:9c:03:c9:a3:c0:5e:5c:1d:
89:73:9b:60:10:7c:48:64:93:15:df:83:79:5f:e6:d0:cf:8c:
35:a0:eb:5e:97:66:3b:50:27:c7:25:b3:d9:ec:2d:3e:f6:17:
41:7f:1f:05:0e:c2:7d:b3:7e:40:b2:13:c8:d0:96:da:f0:c8:
a6:ed:20:8f:13:ea:00:03:e4:69:7e:3c:cc:1b:2e:42:03:db:
16:2f:90:5c:a7:8a:e1:79:14:65:d5:36:85:b0:22:d8:a3:76:
28:c0:26:94:8e:09:e2:79:80:00:b9:66:e7:93:15:e9:d9:16:
5e:36:e7:8a:9d:03:1b:22:47:53:20:ba:08:94:bf:e4:db:26:
41:77:4d:c2:69:23:0d:7d:3c:60:3b:b6:4d:f6:df:a0:47:a6:
e7:aa:15:93:c6:eb:33:04:7d:4a:a4:de:8f:f1:df:cd:63:f1:
90:3d:42:55:a6:b3:66:eb:9a:9a:60:d9:73:c9:ff:45:dd:c5:
4e:de:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:21 2025 by rpki-client