Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: XQfZd6CV2vt5z/cGbx0neDgMLqfvF0a/kNsdf13eUUk=
Subject key identifier: C6:5E:F8:61:B2:4C:56:0E:D6:0B:F1:3C:83:CF:3C:C6:91:89:1A:68
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 0197B632A57DB92DC9F486FC25C6555EAD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: jRAIVO7xdS3Q+y+qWE5N+pzc0usWmaIfarU1AFYeAs0=)
2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a5:7d:b9:2d:c9:f4:86:fc:25:c6:55:5e:ad:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=c65ef861b24c560ed60bf13c83cf3cc691891a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:5e:d5:20:64:34:64:bf:cf:0b:27:3b:61:
e7:1e:63:69:dd:b9:9f:93:6f:f9:74:c1:23:74:09:
b5:88:0c:0d:85:97:bf:b8:7f:9e:e9:a1:24:de:5e:
0b:09:96:23:57:14:40:e6:09:94:a8:70:01:50:05:
2d:81:b2:17:9b:aa:65:e1:41:01:72:ac:22:10:d4:
c8:3f:67:d5:24:79:04:6b:ba:b9:21:99:95:8e:b1:
42:95:a4:ba:18:af:22:1b:ec:c7:e3:33:cb:ad:be:
8b:58:91:ed:53:42:9c:9f:49:96:ad:21:fd:30:a1:
32:4b:8c:ac:84:36:40:11:f0:84:40:21:60:3f:13:
3e:c6:2a:b2:c4:6c:3c:5d:fe:7b:a6:40:ae:3a:c6:
04:b6:06:84:48:44:37:03:f5:9b:68:23:cd:b7:a8:
b2:6d:6f:54:3b:b2:6e:7a:8b:2e:37:77:ec:9d:ea:
07:dc:d1:63:9d:30:07:b3:95:c1:ba:10:de:b1:1c:
63:ab:2e:cd:be:12:64:28:33:61:b3:0b:8c:19:d5:
f1:66:d6:82:8b:83:54:50:75:bc:ca:3a:12:0e:36:
df:ab:cc:71:e4:f9:77:55:af:18:01:d5:c0:14:17:
29:b1:7a:6a:ff:a3:1d:0f:d7:51:9f:7e:1b:84:ad:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:F8:61:B2:4C:56:0E:D6:0B:F1:3C:83:CF:3C:C6:91:89:1A:68
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:73:dd:6a:b3:54:fb:7e:3a:2f:1f:9b:cd:40:33:ac:e5:
c5:a3:48:2b:a2:95:67:27:a0:45:5a:36:b5:0d:9a:9a:1e:bc:
c0:79:63:2a:e0:82:5f:6a:54:73:e8:18:66:cf:df:ed:1b:25:
44:0e:64:ef:17:0e:f3:06:fa:38:9f:49:9d:75:4f:22:44:0d:
eb:21:90:07:b7:7b:18:0e:93:89:8b:29:04:1f:3e:e4:d1:7e:
c1:6b:af:14:df:28:7c:c7:28:b1:57:3f:5b:64:9b:a9:61:ad:
85:bf:81:a1:9d:00:40:84:1c:30:2c:eb:ef:66:ab:2e:f5:5d:
27:e8:76:5a:f2:7d:b5:b8:b3:7a:01:06:eb:32:e7:33:b1:9e:
3d:4b:02:f0:38:fd:3f:b2:b6:b0:25:48:fb:03:02:91:8f:93:
fc:36:29:b2:d6:61:d9:fa:9a:50:ba:5d:da:0b:bd:99:aa:ea:
d0:54:01:b9:c7:2d:8e:b3:0f:cb:38:25:2c:a4:09:6d:2b:68:
99:aa:5d:70:bf:c7:ad:28:8a:ce:9a:8e:3c:d6:0f:2f:eb:1f:
04:47:5f:7c:72:9e:55:5c:28:c2:dd:a2:bb:39:7e:40:41:48:
95:64:f2:83:9f:a0:82:2c:23:e4:0b:af:4f:99:d3:f7:06:bd:
7a:0e:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:50 2025 by rpki-client