Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: fLkwPFyQ4pyWkMCU5zUJKhKrbNGWQFjMFV868KAkAF0=
Subject key identifier: 17:DE:A2:EE:44:16:16:B4:41:DF:AA:48:20:FE:48:DF:83:6F:10:B9
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0198D73B1CC4A8B5ECE6CF875C3D0A9E900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0A34
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: l4Y6bumZPxC7xkAg8JZaj2I788XK+QJxCLJTomCQIcg=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:1c:c4:a8:b5:ec:e6:cf:87:5c:3d:0a:9e:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=17dea2ee441616b441dfaa4820fe48df836f10b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:81:e2:8b:35:01:df:ff:a2:05:6b:05:74:
38:26:e0:f8:eb:eb:06:c9:c1:e9:75:a9:00:82:87:
83:96:13:d2:d4:e1:5d:c1:ae:1f:2b:19:89:9b:eb:
c6:5e:55:5d:5f:95:62:68:c7:e8:25:d6:72:cf:c3:
ee:01:a2:95:d2:2c:b9:4c:d8:61:1c:42:bd:a7:e3:
b3:53:47:3a:73:85:9e:b1:07:6f:bb:3d:38:74:0d:
51:b5:b2:9b:8e:5a:96:6e:ae:02:22:ef:e7:8f:ca:
99:92:1c:e6:bd:2a:61:40:34:98:c4:2c:6e:38:5c:
7f:b1:37:4e:dc:38:7a:45:5d:50:6c:66:8f:75:58:
7d:dd:79:8d:cc:be:82:43:73:03:6d:54:99:8b:1d:
7c:03:cd:0b:29:d6:87:fb:7c:57:e8:18:9e:78:7b:
43:07:b3:fb:37:8b:b1:f1:5a:38:54:5c:bc:40:2c:
1d:a0:ea:bc:a4:43:98:24:8d:ab:0d:d2:e8:35:0a:
dd:98:8d:1e:02:32:a4:20:6d:38:d8:74:c0:26:b5:
d4:01:7c:87:e2:4f:c5:3a:40:6a:ec:df:95:9f:49:
e3:bc:a8:ab:0e:8f:96:35:4a:ac:29:f9:d6:1f:a4:
42:f8:25:60:44:f0:79:8d:24:4f:81:a9:c0:e8:39:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:A2:EE:44:16:16:B4:41:DF:AA:48:20:FE:48:DF:83:6F:10:B9
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:54:db:29:76:1f:29:82:87:62:92:ce:6f:e8:f2:9d:23:
78:40:73:14:76:a6:bb:8b:cb:74:ac:74:d4:4d:a1:2d:35:08:
38:2d:73:b2:10:d1:b1:01:57:f8:11:80:71:73:77:1a:94:ca:
bf:63:42:b4:b8:0a:7d:d7:33:e4:51:76:e5:f5:4b:26:5f:93:
48:13:5f:5c:2c:b9:23:84:fc:fb:48:30:82:f7:ed:7a:cf:12:
9c:0a:aa:3d:1e:d7:af:6d:f1:4f:13:05:0c:20:7b:ed:f3:76:
c0:05:a6:ad:01:16:60:97:3a:28:45:d0:7f:48:0a:fa:ed:0e:
c5:99:cf:43:74:ec:46:5c:07:45:b6:79:7f:93:f1:e2:54:6c:
d1:e3:c7:fd:4f:e8:db:2a:a7:3a:8c:22:21:9e:fe:17:41:b7:
12:33:07:b8:18:61:bb:2a:78:17:a7:b4:de:c4:52:77:2d:f3:
77:81:c9:57:ac:8d:92:c2:42:f1:b7:d7:61:be:d6:19:cf:32:
9b:52:c1:36:02:35:5e:5b:f0:97:2c:0e:d4:48:f7:8b:db:60:
71:0f:90:d4:cd:e4:64:6b:71:75:6e:7b:00:7e:81:ee:fd:78:
fa:34:b5:08:12:24:ab:0d:cd:8d:be:39:df:43:0d:ed:37:29:
59:c4:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:55 2025 by rpki-client