Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: fFgX32OKtY5d+Q56An559dH0AYtXsF+ijbBZkeGypl4=
Subject key identifier: 25:5A:46:E3:32:2E:5C:7E:85:04:88:2C:E4:FA:89:D0:27:2F:C8:9E
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0197B88FD5463698D08429C6397A2AFD1E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 12BA
Signing time: Sat 28 Jun 2025 22:02:03 +0000
Manifest this update: Sat 28 Jun 2025 22:02:03 +0000
Manifest next update: Sun 29 Jun 2025 22:02:03 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: UysnQXkReGSe146jghp2GctNwz2Co9b3Qy9k0zX/bbs=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d5:46:36:98:d0:84:29:c6:39:7a:2a:fd:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jun 28 22:02:03 2025 GMT
Not After : Jun 29 22:02:03 2025 GMT
Subject: CN=255a46e3322e5c7e8504882ce4fa89d0272fc89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:aa:2b:9e:2f:5e:a1:7a:d4:51:6f:8a:97:
84:d8:85:80:b5:a3:4b:8c:7f:de:81:54:cf:18:9e:
c8:b7:1c:81:d4:3f:6d:b8:f6:60:f3:b1:93:f0:ed:
98:3c:a3:33:a2:5e:44:9f:ba:a5:e3:8a:f2:75:15:
11:c2:6e:33:20:fd:94:98:7c:30:9d:83:39:23:0a:
62:8f:78:41:aa:ce:71:68:1a:96:ea:ee:53:2f:e5:
24:15:33:eb:32:29:0f:13:e0:57:6e:cc:46:1c:72:
6b:be:77:04:09:c9:5f:b3:46:ee:c6:d6:36:ac:1f:
bc:f7:0c:76:a7:a6:00:8c:fd:57:5a:7a:ba:54:2a:
4a:41:63:84:44:9f:93:a7:8c:41:ee:a7:41:f7:d4:
a2:ea:15:99:66:23:e8:d2:a1:ef:6b:2c:c5:d9:08:
e4:ca:6c:d3:11:42:a8:3e:0c:c4:4a:5e:f1:ac:a1:
f2:82:e7:1b:db:cc:e3:46:a9:f6:8b:f8:93:f9:68:
0b:2a:ca:de:72:ff:40:57:3b:b8:b4:0f:7c:27:8b:
9f:c2:d4:09:04:86:ad:e1:80:4d:23:8e:2a:0b:83:
87:1a:9f:a5:17:8d:86:84:22:29:ee:14:62:1c:f4:
b2:9a:4c:2f:e3:c4:cb:40:8e:1e:ad:05:5e:17:4a:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:46:E3:32:2E:5C:7E:85:04:88:2C:E4:FA:89:D0:27:2F:C8:9E
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a1:ed:53:dc:25:5b:78:4d:c8:2f:52:ee:83:f0:43:60:04:
85:90:4d:a0:b6:57:04:d8:28:ce:88:1a:29:4b:8f:09:54:50:
d8:1a:2a:24:ff:b4:33:7b:b0:81:20:de:b3:71:3e:f6:26:df:
71:8d:ab:3a:bf:b7:1a:ee:08:bf:22:5b:05:38:3f:6a:7c:cd:
48:f2:ac:80:ed:3b:b3:88:e4:7f:0b:e0:e7:1c:18:f4:e8:31:
b5:6b:2c:fa:5c:67:e6:89:c1:95:79:3d:a8:5c:5b:d4:3d:99:
30:07:e5:80:e3:db:4b:07:12:43:4b:ee:b2:a1:fa:04:68:32:
f1:00:39:d7:f5:0b:93:8a:54:51:59:93:c6:d0:65:05:38:2c:
14:a1:df:b3:d4:fa:95:b8:94:89:d5:5d:48:cb:ab:64:3d:9d:
c9:85:f8:e2:6f:2b:c1:f6:1e:71:94:43:8d:30:a0:79:ca:b2:
f5:d0:d9:fe:e2:6b:e6:1f:68:99:d7:a7:11:a0:19:93:17:99:
29:b4:cc:30:1d:bf:e9:8d:6e:b1:f5:b8:c8:21:57:e0:89:44:
76:3a:bc:f9:2b:d2:d1:94:5f:ac:0d:bd:3c:9e:71:16:06:27:
7f:e2:44:f4:29:52:6e:0a:42:77:e4:83:8a:c2:89:6e:f0:1c:
2e:60:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client