Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: Ep6srV0eIh3K3r9V770xrRAKJVL8gGKw+/Zdp051FLw=
Subject key identifier: 9A:3A:FE:D3:E7:3D:DB:04:92:A9:4F:D2:4E:E8:A6:05:94:53:77:E2
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 0197B88F307F9C89E5301A610938A89D477F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 0E8B
Signing time: Sat 28 Jun 2025 22:01:21 +0000
Manifest this update: Sat 28 Jun 2025 22:01:21 +0000
Manifest next update: Sun 29 Jun 2025 22:01:21 +0000
Files and hashes: 1: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: 40WaP6ZC5hFn8FLo1PZ9+yuWb7ZxJdFY68JFa3aYqcw=)
2: nsObN2DjPGcwLXn29XqybNz0hdw.roa (hash: LniUQovzLZtOR3Vslt1uv0Oiv/eQZfXqUz8XebxPz+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:30:7f:9c:89:e5:30:1a:61:09:38:a8:9d:47:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Jun 28 22:01:21 2025 GMT
Not After : Jun 29 22:01:21 2025 GMT
Subject: CN=9a3afed3e73ddb0492a94fd24ee8a605945377e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:b4:d7:b2:c1:2d:1d:1e:30:11:87:a7:c5:
ab:2d:c3:3d:f9:07:54:d6:f7:01:d0:25:35:ee:92:
64:b8:1b:31:dd:f1:4b:4d:0b:47:6d:01:7d:ce:42:
5a:74:cc:3f:71:92:f7:e4:ec:14:47:9a:39:37:00:
f5:b5:72:c0:3b:d8:75:34:b8:9e:6b:6c:35:4f:6a:
7b:bd:ad:ee:c9:b3:25:13:d7:f0:0f:f1:61:8e:69:
36:59:f4:c3:70:40:f1:1e:b4:19:58:21:3d:a1:69:
24:2d:f1:70:ce:1d:c9:25:a8:42:63:cc:9d:91:9d:
06:65:9b:90:71:f4:2e:5e:d5:13:b5:87:aa:a6:c0:
44:b6:b4:ef:b3:88:79:af:eb:d8:27:1b:87:c2:cc:
f4:07:9f:ba:98:b0:e2:85:1f:17:20:30:c9:49:77:
88:5c:05:f1:00:29:0d:27:27:06:56:2a:8f:21:f7:
05:c8:22:f0:28:c2:33:3c:c8:4a:5c:60:8c:f2:02:
23:72:a0:60:06:62:fd:0c:11:7f:29:3e:46:3f:b0:
f4:fb:5c:b8:9f:3d:43:fe:ef:3d:c9:98:99:94:41:
ac:1f:10:54:0e:3a:79:9e:1b:86:29:9f:21:3d:16:
39:25:46:79:a6:67:90:82:f5:ec:c4:2c:0b:83:57:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:FE:D3:E7:3D:DB:04:92:A9:4F:D2:4E:E8:A6:05:94:53:77:E2
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:69:f4:3b:36:05:59:13:2a:e5:87:67:e7:c6:90:04:dc:62:
b1:50:0b:0e:bc:c2:dd:b8:da:23:2f:23:32:ed:b6:83:11:e8:
1b:83:d4:64:93:f1:45:f1:a6:e3:2a:a3:07:11:eb:a0:2e:9d:
5d:ad:69:88:4f:60:ae:36:53:36:93:e1:7f:7d:f3:e3:3b:89:
0d:11:7c:e3:2c:8c:0f:02:9e:4a:51:a5:42:f3:c1:23:96:c4:
f6:30:7a:6d:52:f0:5b:5c:ea:3d:b3:93:a3:90:29:04:3d:ac:
2c:10:e0:06:af:03:bd:07:09:19:df:86:41:20:ac:69:6e:4c:
d0:34:a1:83:67:09:b5:0b:2e:fc:a0:09:63:25:aa:f5:95:87:
1c:b9:81:ef:eb:60:b6:a7:1d:0f:96:6e:d7:d7:ce:18:37:07:
19:98:29:91:77:2e:e6:cb:61:9b:9e:f8:d7:36:6b:d6:3d:59:
22:52:57:48:cb:24:54:4d:7f:d4:83:34:26:a1:0a:0b:f0:ed:
13:8f:94:16:64:1e:53:ac:e9:7c:ae:21:84:42:df:97:18:4a:
08:c8:1e:35:b9:24:69:d9:e2:7e:a9:ea:01:8e:c5:11:32:3b:
95:4b:46:61:65:26:9f:d6:fd:64:7d:96:31:42:ad:0a:44:06:
72:1c:ff:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jzB/nInlMBphCTionUd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDE4ZTI2YjJhZWI2ZWFhODE0M2ZkNzE4MzBmOWIzNTRh
ZTdiYmMwHhcNMjUwNjI4MjIwMTIxWhcNMjUwNjI5MjIwMTIxWjAzMTEwLwYDVQQD
Eyg5YTNhZmVkM2U3M2RkYjA0OTJhOTRmZDI0ZWU4YTYwNTk0NTM3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+a017LBLR0eMBGHp8WrLcM9+QdU
1vcB0CU17pJkuBsx3fFLTQtHbQF9zkJadMw/cZL35OwUR5o5NwD1tXLAO9h1NLie
a2w1T2p7va3uybMlE9fwD/Fhjmk2WfTDcEDxHrQZWCE9oWkkLfFwzh3JJahCY8yd
kZ0GZZuQcfQuXtUTtYeqpsBEtrTvs4h5r+vYJxuHwsz0B5+6mLDihR8XIDDJSXeI
XAXxACkNJycGViqPIfcFyCLwKMIzPMhKXGCM8gIjcqBgBmL9DBF/KT5GP7D0+1y4
nz1D/u89yZiZlEGsHxBUDjp5nhuGKZ8hPRY5JUZ5pmeQgvXsxCwLg1eEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo6/tPnPdsEkqlP0k7opgWUU3fiMB8GA1UdIwQY
MBaAFDRBjiayrrbqqBQ/1xgw+bNUrnu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xZDRmMzYtYjk3ZC00ZDk4LWJiMmMt
YjhhMjc0NzJhODk2LzEvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xZDRmMzYtYjk3ZC00ZDk4LWJiMmMtYjhhMjc0NzJhODk2
LzEvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWn0OzYF
WRMq5Ydn58aQBNxisVALDrzC3bjaIy8jMu22gxHoG4PUZJPxRfGm4yqjBxHroC6d
Xa1piE9grjZTNpPhf33z4zuJDRF84yyMDwKeSlGlQvPBI5bE9jB6bVLwW1zqPbOT
o5ApBD2sLBDgBq8DvQcJGd+GQSCsaW5M0DShg2cJtQsu/KAJYyWq9ZWHHLmB7+tg
tqcdD5Zu19fOGDcHGZgpkXcu5sthm5741zZr1j1ZIlJXSMskVE1/1IM0JqEKC/Dt
E4+UFmQeU6zpfK4hhELflxhKCMgeNbkkadnifqnqAY7FETI7lUtGYWUmn9b9ZH2W
MUKtCkQGchz//Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:51 2025 by rpki-client