Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: EFvkqKgjAtQw22Az5y0FPJ7ZOHupWrNJA6AXnaelTB8=
Subject key identifier: 65:67:88:30:D1:3D:A0:B3:00:DD:03:45:2D:26:88:10:C2:E5:92:89
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0197B88F5DB3232DAFD4488975E81AB58362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:32 +0000
Manifest this update: Sat 28 Jun 2025 22:01:32 +0000
Manifest next update: Sun 29 Jun 2025 22:01:32 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: KKJvVt63xEkwpPiU8Vb1xUeYKDbYolUQ6o3ZHU2ihjk=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5d:b3:23:2d:af:d4:48:89:75:e8:1a:b5:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jun 28 22:01:32 2025 GMT
Not After : Jun 29 22:01:32 2025 GMT
Subject: CN=65678830d13da0b300dd03452d268810c2e59289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:a5:29:e2:ae:db:e4:bc:47:0f:9f:75:cf:
31:d1:4e:88:f1:8d:e0:d0:59:46:7c:60:c3:7d:d0:
fa:a7:7f:cd:93:fe:7b:a4:2e:8b:60:31:b8:84:b5:
c8:21:72:3a:9c:df:61:79:bd:7b:4d:d8:be:f1:81:
b3:10:cf:97:26:33:d3:d2:6e:17:2b:dc:59:26:17:
19:1a:a9:eb:bc:44:71:01:ca:50:8d:8b:8c:57:03:
fe:e0:4a:ef:02:7e:f8:95:fc:60:e9:53:91:59:25:
ea:94:8f:2f:02:61:10:85:8c:1b:95:0f:20:fc:02:
32:88:c9:3f:72:69:40:85:8c:9e:dc:38:f7:70:d2:
dd:42:1c:0b:3f:48:5d:2c:8d:a4:84:e0:7d:05:a2:
84:cc:80:17:e9:e4:1a:19:ae:45:c2:0c:de:71:20:
c4:b0:ec:08:c3:36:4a:8d:29:a7:9d:80:5f:2c:28:
86:ee:77:b3:54:29:80:ee:39:31:cb:5f:f7:a3:f6:
16:fd:49:15:f4:00:e2:6e:10:40:79:e9:de:b2:a4:
64:ba:5e:08:4d:2e:ab:5c:41:0d:f6:64:08:f4:8c:
23:01:8f:e6:0c:ae:f8:b9:f0:dd:82:54:ae:2a:af:
41:ca:dc:88:b9:ac:10:9f:fd:60:a5:59:8f:95:43:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:88:30:D1:3D:A0:B3:00:DD:03:45:2D:26:88:10:C2:E5:92:89
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ae:93:6d:ec:df:9f:87:32:8d:3d:81:e0:26:7f:0b:ba:d5:
cf:ef:c9:c0:00:b7:1c:8d:b2:20:29:4b:ae:06:31:f4:1e:e0:
03:e1:0f:f1:86:58:93:9e:a7:0e:10:ff:1f:bc:30:6f:ff:b9:
e4:20:d6:0e:a7:dd:21:b3:4d:88:e4:5e:8c:26:cd:58:56:ce:
13:62:18:a4:72:ef:d7:4f:75:68:c6:64:7f:ed:73:78:3e:e2:
e7:a0:4f:9a:83:48:8b:71:ac:37:5c:14:eb:f5:38:4e:b8:b2:
69:e9:cd:8c:3a:75:e1:16:7c:76:29:3c:e7:4e:9c:38:b8:57:
8f:ac:1c:31:74:d4:57:24:f8:79:e3:58:2e:8c:d9:91:f4:cb:
2c:2d:55:2e:1d:ca:65:06:cb:e4:9b:16:5a:52:3d:c0:5b:c5:
3a:fb:c3:d0:04:83:01:b5:3e:0e:aa:2d:c7:bb:b5:c3:20:93:
23:4f:35:ca:ed:f2:48:78:4c:d4:53:be:b4:2b:6d:7e:c0:4f:
cd:49:aa:24:21:6a:fc:3e:2a:44:2a:a8:e7:a4:1c:2a:7d:64:
83:41:e2:e1:44:07:9e:ad:4c:67:09:31:9f:fe:71:24:de:1c:
85:7c:71:14:98:d0:1b:d1:4b:1a:c7:2d:b7:e1:df:ed:78:88:
5b:9a:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:21 2025 by rpki-client