Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: V/QW3rP4o5iDNGiph061Qavjp4lQubrwmKcQZv2U2vk=
Subject key identifier: 2A:75:D0:76:D8:38:7D:29:08:53:67:5C:C4:E4:17:80:89:0E:0B:8C
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 0196C45E7A3162D8C80160F2F47D42C825E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 13CB
Signing time: Mon 12 May 2025 12:00:48 +0000
Manifest this update: Mon 12 May 2025 12:00:48 +0000
Manifest next update: Tue 13 May 2025 12:00:48 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: zOZkxTkHUyOZHzQBnpboOy/RXnW1U/A6r8DJVnBVfYQ=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:7a:31:62:d8:c8:01:60:f2:f4:7d:42:c8:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: May 12 12:00:48 2025 GMT
Not After : May 13 12:00:48 2025 GMT
Subject: CN=2a75d076d8387d290853675cc4e41780890e0b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:ea:8a:3b:62:de:4d:16:b5:c6:ff:d4:98:
27:35:ef:ae:7e:17:50:49:30:55:c7:9a:09:df:a6:
a6:07:20:9e:d7:ad:ae:12:30:06:df:7e:f6:2c:d7:
55:00:d1:4e:11:1c:71:7a:59:e9:f1:c5:d7:f0:85:
69:f0:71:70:ab:80:d7:06:d3:8c:dd:e1:e8:86:ae:
6d:61:54:79:e1:0d:20:5c:eb:32:86:bd:e4:db:28:
3b:f4:6a:fe:12:d6:75:a5:24:b9:3e:85:59:15:68:
74:31:f3:fa:b8:f5:27:5a:fa:ea:b6:c0:08:ec:47:
c4:5c:7a:bd:f0:80:41:16:09:5e:4a:0c:24:3e:f5:
a2:88:20:d4:c4:af:39:4f:bf:c8:ee:52:52:9a:74:
5a:fb:1a:23:29:a3:4d:35:9d:93:87:7c:db:d9:43:
ee:3c:4e:dd:3a:f1:b7:08:b3:78:da:dc:f1:92:48:
29:c9:7f:1e:97:5d:ba:c2:7d:63:c2:a1:6e:b3:ef:
7b:f9:12:2c:40:c3:64:d6:91:c4:7a:c9:60:b6:82:
97:36:c7:0b:96:f7:5b:39:d1:b5:75:a8:7b:7e:26:
b8:2f:c4:7a:03:e5:29:f0:0c:6d:8e:cc:c0:82:0c:
ec:fc:0d:9c:60:dc:fa:1b:2c:79:d4:eb:43:9a:bf:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:D0:76:D8:38:7D:29:08:53:67:5C:C4:E4:17:80:89:0E:0B:8C
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:78:7e:7d:f1:fe:9e:80:10:08:49:df:73:24:e1:96:c6:a7:
eb:bf:96:0a:3c:31:80:59:60:8a:4a:2e:b7:93:84:4e:04:55:
c8:52:bc:a0:5f:40:e7:21:64:e2:a2:6e:a1:28:ea:06:ef:d7:
43:51:3c:bb:21:48:72:24:b3:cf:a9:07:29:b2:81:38:1a:44:
0a:b0:f4:41:1a:21:85:47:c8:70:64:ad:8a:4c:e7:ee:71:51:
05:1a:70:0c:51:77:ed:fd:a6:fd:1b:07:19:38:86:9e:0f:ab:
15:7b:6d:5e:d5:23:b1:2b:6a:e6:75:5e:82:cb:d3:f7:3c:67:
6f:f1:d3:f8:51:26:24:a5:6d:b7:52:be:3f:fb:19:65:40:ae:
db:8e:bc:8a:18:d7:0c:fe:bc:27:c6:98:29:5e:53:38:94:0f:
51:22:b2:f7:be:14:25:21:fe:1b:9e:d8:2e:67:d1:15:e1:10:
d0:87:a3:7c:d8:3f:ae:22:fb:0b:cd:03:fc:3e:97:e0:ce:bb:
c5:41:62:d0:9b:73:22:c4:b0:23:f1:42:ea:d7:a9:6c:56:b6:
72:70:26:6b:ea:4a:48:a4:fc:14:dc:85:c4:b8:39:eb:d0:54:
ae:ae:5f:2b:6f:b6:38:85:4f:87:29:68:71:d7:92:fe:30:5b:
24:e5:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:27:59 2025 by rpki-client